last executing test programs: 29m31.465247811s ago: executing program 32 (id=10): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{}, "3f968a231afa0e18", "4a952e4ea416ad75f769d6386c3c044b", '\by\x00', "e4eb37b07ad86ed7"}, 0x28) 29m21.914214758s ago: executing program 33 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000020601040000000000000000000000000500040000000000050001000600000015000300686173683a69702c706f72742c6e65740000000005000500020000000900020073797a3100"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000b0601020000000000000000060000020500010007000000400007801800148014000240fe80000000000000000000000000001f0c00018008000140ac141436060004004e240000080008400000006806000540020000000900020073797a31"], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 29m20.50905666s ago: executing program 34 (id=24): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x46, &(0x7f0000000040)={[{@grpid}, {@jqfmt_vfsv0}, {@auto_da_alloc_val}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x7f000, 0x4000}]) 7m55.909880595s ago: executing program 35 (id=2836): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGySKnFRWiFwAcEJiUP/gILkGweExD0oXLiUW68+VkLiEnGIelk0s7P27nr9lvgloZ9PNZnnmeeZZ377m2dmvOtaG+AL6+q5NB+myNVzbzwo66srs+3VldkjdXM7SVluJM3uKsWdpHiUzJXtRd+SvvUGHy1eeevTx6ufdWvNeqn6j2213wgj+i7XS6br8aZH7jm+00Ms1+HlpSTX6vWgiZ2ONdCxTNrZeg2HrjOokc7ybnbfzXULPGd6T6ei+9zcYCo5mmSy/jkg9d2hcXAR7qlv9Aq7ussBAADAC+qTu4cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx4qu//b61VG91NyXSK3vf/T/S21eXn0NyOez7c1zgAAAAAAAAA4GB8/Ume5EGO9eqdovqd/5mqciKfd5Iv5b3cz0Lu5XweZD5LWcq9XEwy1TfQxIP5paV7F9f2LI3e89LIPS8d1CsGAAAAAAAAgP9Lv0pr/ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSse6qWk7U60yl0cx6W5aTfyWZOOx4d6EYtfHhwccBAAAAz2TyKfb58pM8yYMc69U7RfWe/yvV++XJvJc7WcpiltLOQq7X76HLd/2N1ZXZ9urK7O1yKeuD4/7gP7sKY6IeYayqjTryqapHKzeyWG05n2tVMNfT6B77bHKqF09fXH0+LGMqvl/bYWTNOq3lwf6w2acIe2Lwo4jGFj1b68ElaxmZqWMr9zzezUBRfVCTDGdi+OxsOFhzoDZVdRlfO9LFNNY++TmxDzk/Wq/L1/Pbfc35TvTnYi0TjVSZuNSbfeU1s3Umkm/+7c9v32zfuXXzxv1zh/uSdmFsk+3Dc2K2LxOvvtCZaO6y/0yViZNr9av5cX6ac5nOm7mXxfws81nKQjp1+3w9n8t/p7bO1NxA7c3tIpmoz0v3nO0kpun8qCrN50y177EspsjdXM9CXq/+u5SL+U4u53Ku9J3hk5vGXb226qpvDF/1vTP995HBn/1WXSjvbr9bv8vNbfWKN5ude6V77y/zerwvr91Z/3it1/G+62CmL0sv97IzPnLwp7k3Nr9aF8pj/Hqb58TBmqozUV5AvadEL7pXuploVs+ijfP8j51yv7TvdDo359/dZPzlofpr9bqcVitf2653z+hTsbfK+fJyJus7yeDsKNteWbvL9LV11udyt23wiVvud7JqK4relfqT3K0mwMYrdaL+GW7jSJeqtleH2k7X9/Cy7VRf28DPW7mbdq4fQP4AeBr/fHutOJWjE61/tz5pfdz6Tetm643JHx757pHTExn/x/j3mjNjrzVOF3/Nx/nF+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6d1//4Nb8+32wr3RhcbmTQOFVoa3bDfyUKGov9BnVJ9b9bcU7GrAQy5MJhnYUn3P0YGH0RoOY0Oh88vkwPPT+xLB0X1+XxaaOzrdcwNb/rJxwA+3j2csQ/NwB9fFPhYaOdiDjmX0BDisOxJwUC4s3X73wv33P/j24u35dxbeWbgzfvnylZkrl1+fvXBjsb0w0/33sKME9sP6Q/+wIwEAAAAAAAAAAAB2atQfBpx5abs/GtlQaCQZ/hsP/2chAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCeunkvzYYpcnDk/U9ZXV2bb5dIrr/dsJmk0kuLnSfEomUt3yVTfcEX+9CidEcf5aPHKW58+Xv1sfaxmt3/SqNeb27o1yXK9ZDrJWL1+BgPjXXvm8Yr/9l5DmbDPO53O3LPFB3vjfwEAAP//qWztYw==") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x402, &(0x7f0000000ec0)="$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") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) unshare(0x10040000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7m7.385684095s ago: executing program 5 (id=2932): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x5411, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r3, 0x3) madvise(&(0x7f000059e000/0x5000)=nil, 0x5000, 0x9) read$usbfs(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4) landlock_create_ruleset(&(0x7f0000000300)={0x1102}, 0x18, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r7, &(0x7f0000000000), 0x12) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r2, 0x2, {0x0, 0xf0, 0x3}, 0xfd}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0xd, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b6411248000004b6", 0x9}], 0x1}, 0x4048001) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 7m4.455618282s ago: executing program 5 (id=2939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$xdp(0x2c, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 7m2.931257245s ago: executing program 5 (id=2942): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x3f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1, 0xfffffff9) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x803, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) syz_genetlink_get_family_id$ethtool(0x0, r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 6m58.813876546s ago: executing program 5 (id=2949): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 6m58.250589822s ago: executing program 5 (id=2951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x50, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103, 0x0, {0x4}}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r10, r11, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r12, &(0x7f0000000000)="170cf31f8e85bcdbb6ad484c26dfa6be3180020cc3ad083eb719a8495180e3411bca5a3904d99c037e2d8e3c1c72fa92fbc31f328a0634a228ba73fca36ab95455c2429a396c437ae822453d5dbfd246cfc6e49f4b77fbb58e3e23beae7970b5bdb6c5d6a4b76a6e910402706986d2c4da7f3cab1ec82c46628456875bad37ebb5c0bef76aeae81b5489235cc4a3533c44fae97f864aa56771761bf7b68f404289dfd955fc20d7c7eb05951df334942d46ba78c78f3c72a7e827134798ba9e611ff2de814c88b7", 0xc7, 0x4000810, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) setsockopt$sock_int(r12, 0x1, 0xa, &(0x7f0000000140)=0x3, 0x4) 6m56.331964487s ago: executing program 5 (id=2955): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x1, 0xb, 0x6bb, 0xffff}, 'syz1\x00', 0x25}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, 0x0, 0x0) getpriority(0x2, 0x0) socket(0x400000000010, 0x3, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 6m40.666136199s ago: executing program 36 (id=2955): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x1, 0xb, 0x6bb, 0xffff}, 'syz1\x00', 0x25}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, 0x0, 0x0) getpriority(0x2, 0x0) socket(0x400000000010, 0x3, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 2m42.215533478s ago: executing program 7 (id=3520): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000480)="94b6de239930b7d7d923cee26f4881e5441f085c9900c3b3a0d99adf11146e21187fe27d76071bde52cfa8920b68312e2eba41eb11", 0x35) creat(0x0, 0x15d) r6 = open(0x0, 0x14103e, 0x0) r7 = open(0x0, 0x143042, 0xfe) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ftruncate(r7, 0x2008002) sendfile(r6, r7, 0x0, 0x80000001) lseek(r8, 0x7, 0x1) 2m38.437992492s ago: executing program 7 (id=3533): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) listen(r0, 0xffffffff) 2m34.046768176s ago: executing program 7 (id=3538): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2d8, &(0x7f0000000a40)="$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") unshare(0x40600) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m32.278345049s ago: executing program 7 (id=3543): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 2m29.958315035s ago: executing program 7 (id=3547): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$KDSETMODE(0xffffffffffffffff, 0x5608, 0x3f00) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES16=r3], 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c000000000002907800fbff09000000000000007d20000000"], 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x204004, &(0x7f00000004c0)={[{@dioread_nolock}, {@i_version}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") 2m27.743762424s ago: executing program 7 (id=3551): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x2b, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000030000000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x8}, 0x14) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone(0x2a809000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020}, 0x2020) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)={0x14, r6, 0x101, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4080040}, 0x24040010) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x7b) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)}, {&(0x7f00000005c0)='0', 0x1}], 0x2}}], 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2m12.028466661s ago: executing program 37 (id=3551): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x2b, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000030000000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x8}, 0x14) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone(0x2a809000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020}, 0x2020) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)={0x14, r6, 0x101, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4080040}, 0x24040010) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x7b) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)}, {&(0x7f00000005c0)='0', 0x1}], 0x2}}], 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1m32.035556912s ago: executing program 9 (id=3651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x0, [0x5, 0xffff133a, 0x1], [{0x40, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x8}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {0x400}, {0x0, 0x4}], 0xc}) listen(r4, 0x0) io_setup(0x9, &(0x7f0000000300)=0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0xfffd, 0x0, @private2, 0x7fd}, 0x6c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1m31.008794235s ago: executing program 9 (id=3654): ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000040)) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x2544, &(0x7f0000000400)={0x0, 0x2956, 0x0, 0x6, 0x26a}) socket$alg(0x26, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000018c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x1}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x29000000, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 1m25.910890726s ago: executing program 9 (id=3661): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x10, 0xb0}, [@NDA_DST_IPV6={0x14, 0x1, @private0}]}, 0x30}}, 0x20024090) 1m21.678685478s ago: executing program 9 (id=3665): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = getpgid(0x0) prlimit64(r0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000280)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x29) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000080)={[{@usrquota}, {@data_err_ignore}, {@nouid32}, {@mblk_io_submit}, {@dioread_nolock}]}, 0x1, 0x3ee, &(0x7f0000000440)="$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") r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0xfffff, 0x0, 0x0) fallocate(r4, 0x3, 0x4, 0x8000c60) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r5) wait4(0x0, 0x0, 0x20000000, 0x0) 1m21.674379158s ago: executing program 8 (id=3666): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000c80)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x201f) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 1m21.178679209s ago: executing program 9 (id=3669): ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000040)) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x2544, &(0x7f0000000400)={0x0, 0x2956, 0x0, 0x6, 0x26a}) socket$alg(0x26, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000018c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x1}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x29000000, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 1m20.839671656s ago: executing program 8 (id=3670): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = getpgid(0x0) prlimit64(r0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000280)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x29) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000080)={[{@usrquota}, {@data_err_ignore}, {@nouid32}, {@mblk_io_submit}, {@dioread_nolock}]}, 0x1, 0x3ee, &(0x7f0000000440)="$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") r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0xfffff, 0x0, 0x0) fallocate(r4, 0x3, 0x4, 0x8000c60) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x8, r5) wait4(0x0, 0x0, 0x20000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 1m19.954637317s ago: executing program 9 (id=3672): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) socket(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 1m19.183388519s ago: executing program 38 (id=3672): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) socket(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 1m19.178432459s ago: executing program 8 (id=3674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 1m19.017257922s ago: executing program 8 (id=3677): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = getpgid(0x0) prlimit64(r0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000280)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x29) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000080)={[{@usrquota}, {@data_err_ignore}, {@nouid32}, {@mblk_io_submit}, {@dioread_nolock}]}, 0x1, 0x3ee, &(0x7f0000000440)="$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") r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0xfffff, 0x0, 0x0) fallocate(r4, 0x3, 0x4, 0x8000c60) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r5) wait4(0x0, 0x0, 0x20000000, 0x0) 1m18.54766155s ago: executing program 8 (id=3680): ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000040)) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x2544, &(0x7f0000000400)={0x0, 0x2956, 0x0, 0x6, 0x26a}) socket$alg(0x26, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000018c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x1}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x29000000, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 1m17.128028545s ago: executing program 8 (id=3683): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x48041, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 1m16.331316889s ago: executing program 39 (id=3683): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x48041, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 1m7.658450488s ago: executing program 4 (id=3695): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = getpgid(0x0) prlimit64(r0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000280)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x29) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000080)={[{@usrquota}, {@data_err_ignore}, {@nouid32}, {@mblk_io_submit}, {@dioread_nolock}]}, 0x1, 0x3ee, &(0x7f0000000440)="$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") r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0xfffff, 0x0, 0x0) fallocate(r4, 0x3, 0x4, 0x8000c60) ptrace(0x10, 0x0) ptrace(0x8, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) 1m7.101588973s ago: executing program 4 (id=3696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000009}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x74c, &(0x7f0000000f40)="$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") linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4004aee0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m6.410395879s ago: executing program 4 (id=3697): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63e477908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059a09aa95a2d433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xf, 0x2a4, &(0x7f0000000480)="$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") openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000009, 0x2013, r3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 1m4.806647308s ago: executing program 4 (id=3698): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = getpgid(0x0) prlimit64(r0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000280)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x29) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000080)={[{@usrquota}, {@data_err_ignore}, {@nouid32}, {@mblk_io_submit}, {@dioread_nolock}]}, 0x1, 0x3ee, &(0x7f0000000440)="$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") r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0xfffff, 0x0, 0x0) fallocate(r4, 0x3, 0x4, 0x8000c60) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m4.275874741s ago: executing program 4 (id=3699): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000180)=0x80009, 0x4) 1m3.66873034s ago: executing program 3 (id=3700): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pread64(r0, &(0x7f0000000340)=""/121, 0x79, 0x7fff) 1m3.246904663s ago: executing program 4 (id=3701): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) 1m2.593770256s ago: executing program 40 (id=3701): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) 1m2.444245898s ago: executing program 3 (id=3703): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@debug}, {@nogrpid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4f2, &(0x7f0000000a40)="$eJzs3V1rHNcZAOB3Rlp/ypVMe+Ea6praRXJb70pWbYteuB+U9srQ1r2urUorIbTSCu3KtoRpZfoDCqW0hUKhV7kJ5AcEgn9CCBiS+5CEhJDYyYUvEm/YL3/Iu5KMV1qhfR4YzTlnZvSed5ed3TMzzATQs05HxJmIeFypVM5FxGCjPW1MP6pW1uvrPXxwZ6o6JVGpXPssiUjqbdVVRp75n0frm8ShiPjDbyP+nLwYt7S6Nj9ZKOSXG/VceWEpV1pdOz+3MDmbn80vjo+PXZq4PHFxYrQjeQ5ExJVff/Svv7/2mytv/eTW+9c/GflL0miPeJpHp9VTz9Rei6b+iFjeiWBd0NfIJ9NsaPFeAwCwdzR/5/8gIs7FYPTVfs0BAAAA+0nl5wPxVRJRAQAAAPattHYNbJJmG9cBDESaZrP1a3i/E0fSQrFU/vFMcWVxun6t7FBk0pm5Qn60ca3wUGSSan2sVn5av7ChPh4RxyPin4OHa/XsVLEw3e2DHwAAANAjjm4Y/385WB//AwAAAPvMULc7AAAAAOw4438AAADY/4z/AQAAYF/73dWr1anSfP719M3VlfnizfPT+dJ8dmFlKjtVXF7KzhaLs7V79i1s9f8KxeLST2Nx5XaunC+Vc6XVtesLxZXF8vW55x6BDQAAAOyi49+/914SEes/O1ybqg50u1PAruh/mZU/3Ll+ALuvr9sdALrmpb7/gX0l0+0OAF2XRMT/Nlne9uKdt3emPwAAQOcNf7f1+f9ky2MD6+kudRHYIY7/Qe9y/h96l/P/0Lsy0RcG8tDbki2Wv/r5/0rlpToEAAB03EBtStJsRO04wECkaTYbcaz2WIBMMjNXyI9GxLci4t3BzMFqfay2ZbLlmAEAAAAAAAAAAAAAAAAAAAAAAAAAqKtUkqgAAAAA+1pE+nHSeP7X8ODZgY3HBw4kjwZr84i49d9r/749WS4vj1XbP3/SXv5Po/1CN45gAAAAABs1x+nNcTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNLDB3emmtNuxv30lxEx1Cp+fxyqzQ9FJiKOfJFE/zPbJRHR14H463cj4ld/ahE/qXYrhhq9aBX/cKfin2iV/+bx04g42oH40MvuVfc/v2j1+UvjdG2+8fN38Mm2/R2I337/lz7Z//W12f8c22aMk/ffyLWNfzfiZH/r/U8zftIm/pltxr/xx7W1dssq/48Ybvn9kzwXK1deWMqVVtfOzy1MzuZn84vj42OXJi5PXJwYzc3MFfKNvy1j/ON7bz7eLP8jbeIPbZH/2W3m//X92w++XS9mWsUfOdP6/T/RJn7a+O77YaNcXT7cLK/Xy8869fo7pzbLf7pN/lu9/yPbzP/c7//2wTZXBQB2QWl1bX6yUMgv93ThlV6N6s+iPZGFwlaFSmPw1mz5617p2B4sND8Tj7qzYwIAADruxTHwdtzYuQ4BAAAAAAAAAAAAAAAAAABAD+rMPcOa98Te/O56Tev12Qv3QgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KZvAgAA//9F0tDB") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0x8, 0x800, 0x1986, 0x0, 0x6, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000000), 0x4001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) read$FUSE(r1, &(0x7f0000000c40)={0x2020}, 0x2020) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r1, &(0x7f0000000000), &(0x7f0000000300)=""/6}, 0x20) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) statx(r1, &(0x7f0000000580)='./file0\x00', 0x4000, 0x80, &(0x7f00000005c0)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80ff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x5000000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x9, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x8000000004) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m0.080490709s ago: executing program 3 (id=3704): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x4) read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) 59.810616491s ago: executing program 3 (id=3705): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = getpgid(0x0) prlimit64(r0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000280)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x29) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000080)={[{@usrquota}, {@data_err_ignore}, {@nouid32}, {@mblk_io_submit}, {@dioread_nolock}]}, 0x1, 0x3ee, &(0x7f0000000440)="$eJzs3M1uG0UcAPD/br5I+uEgcUCFQwQIgoCkDgQoQqJw5eMCPECUpKUibarGSLTkUBAnThwQNw59AQ48QFUhJCRegRdAlSqU5gC3oF3vOm5sh1h26tT5/aSRZ9bjzPy9m9XMencCOLZmIuJ8RIxExEJEVIrtaZHiZj1l9e5vbS5vb20uJ7Gz8/HfSSTFtvJvJcXriaIwm0ak30Y8dbO13Y3rNz5fWltbvVaU52uXr85vXL/xyqXLSxdXL65eqb5xrlpdXHiz+lrfYv3xuRfPjbx3/sxPf1buLI6PT2b9PVm81xxHv8zETOM72Wux340N2PigOwAAwIGkxdh/NB//V2Ikz9VVYn5zoJ0DAAAA+mLnneIVAAAAGGKJuT8AAAAMufI+gPtbm8tlOtCNA5VDuyXhobr3bkRM7z7bvN2IfzQeK+qMHeLzrTMRcfX5pJKlOKTnkAEAmt3Jxj9n243/0niyqd5ERD4emuxz+zN7yq3jn/Run5t8QDb+ezsitlvGf2lZZXqkKJ3Kh4pjyYVLa6tnI+J0RMzG2ERWru7Txvv//PxRp/ey+H9LTp0uU9Z+9rpbI707OvHgZ1aWaku9xNzs3tcRZ0bbxZ80xr9JREz10MbIV7fe6vTe/8d/uHZuRbzQdv/vrtyT7L8+0Xx+PMyXR0Wrf7/55cNO7Q86/mz/T+0f/3TSvF7TRvdt3P7sj6fzTJuomuc/3Rz/48kneb6cl325VKtdq0aMJx+0bl/Y/WxZLutn8c8+2/7/vzz/JcWaVieLc0C3vvv+15f3r1GPP0tZ++Vc8GHI4l/pav93n3n99u+fdmq/ef+3jz/b//U1wGaLLQc5/x20g718dwAAAPCoSPPrGkk618in6dxc/XrHEzGVrq1v1F66sP7FlZX69Y/pGEvrV7om81sAyuuh1frP6I3ywp7yqxHxeET8UJnMy3PL62srgw4eAAAAjokTHeb/mb+G5B5/AAAAoPihHgAAABhu5v8AAAAw1HpZ1+/4ZrJv7gh048hnnjka3RhAZiyORDd6yAz6zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBo+y8AAP//pbCzBQ==") r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0xfffff, 0x0, 0x0) fallocate(r4, 0x3, 0x4, 0x8000c60) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 59.328768329s ago: executing program 3 (id=3706): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f0000000300), 0x0, 0xfffffffffffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 58.398112254s ago: executing program 3 (id=3707): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x80010, r0, 0x8000000) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) r1 = signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x8) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) lseek(r2, 0x8183, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="78e1", @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000000000008608ffffffff0102"], 0x0) socket(0x26, 0x5, 0x8) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) 58.002859656s ago: executing program 41 (id=3707): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x80010, r0, 0x8000000) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) r1 = signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x8) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) lseek(r2, 0x8183, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="78e1", @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000000000008608ffffffff0102"], 0x0) socket(0x26, 0x5, 0x8) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) 20.316736133s ago: executing program 0 (id=3750): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@resgid}, {@noload}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000001540)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 19.036795256s ago: executing program 2 (id=3754): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pread64(r0, &(0x7f0000000340)=""/121, 0x79, 0x7fff) 15.880638011s ago: executing program 6 (id=3759): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@debug}, {@nogrpid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4f2, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0x8, 0x800, 0x1986, 0x0, 0x6, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000000), 0x4001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) read$FUSE(r1, &(0x7f0000000c40)={0x2020}, 0x2020) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r1, &(0x7f0000000000), &(0x7f0000000300)=""/6}, 0x20) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) statx(r1, &(0x7f0000000580)='./file0\x00', 0x4000, 0x80, &(0x7f00000005c0)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80ff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x5000000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 15.630691861s ago: executing program 0 (id=3760): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) socket(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='debugfs\x00', 0x2014800, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0xc6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) 15.626667751s ago: executing program 2 (id=3761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 13.877435332s ago: executing program 0 (id=3763): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) 13.052383749s ago: executing program 1 (id=3764): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f000000bc40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x6f2, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000900)=""/4105, 0x1009) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 12.178892089s ago: executing program 1 (id=3765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x0, [0x5, 0xffff133a, 0x1], [{0x40, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x8}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {0x400}, {0x0, 0x4}], 0xc}) io_setup(0x9, &(0x7f0000000300)=0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) shutdown(r4, 0x1) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0xfffd, 0x0, @private2, 0x7fd}, 0x6c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 10.905690701s ago: executing program 1 (id=3766): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x82) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000140)) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) 10.471111876s ago: executing program 1 (id=3767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() memfd_create(0x0, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000002200)=""/4114, 0x1012}], 0x2, 0x800, 0x4000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r5}) close(0x3) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) 10.230665006s ago: executing program 6 (id=3768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x80) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x3, 0xc5, 0x0, 0x4, 0x9, 0x7, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0xe474, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.19599084s ago: executing program 1 (id=3769): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pread64(r0, &(0x7f0000000340)=""/121, 0x79, 0x7fff) 8.966751038s ago: executing program 2 (id=3770): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='debugfs\x00', 0x2014800, 0x0) chroot(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) 8.542846762s ago: executing program 0 (id=3771): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x5608, 0x3f00) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES16=r4], 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x0, 0x0) futex(&(0x7f0000000100), 0x0, 0x1, &(0x7f0000000240), &(0x7f0000000280), 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], &(0x7f00000005c0), 0x2}, 0x20) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 7.218657479s ago: executing program 6 (id=3772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) socket(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='debugfs\x00', 0x2014800, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0xc6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) 6.246196437s ago: executing program 0 (id=3773): syz_open_dev$sndpcmc(0x0, 0x0, 0x84002) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$vsock_stream(0x28, 0x1, 0x0) shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) futex(&(0x7f0000000100), 0x7, 0x0, 0x0, &(0x7f0000004000)=0x2, 0x92020006) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x38}}}}}, 0x28}}, 0x2000c094) r5 = accept$unix(r4, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x1) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}}, 0x0) unlinkat(r6, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001, 0x0, 0x0, 0x2}) 6.186171562s ago: executing program 1 (id=3774): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.765301976s ago: executing program 6 (id=3775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x0, [0x5, 0xffff133a, 0x1], [{0x40, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x8}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {0x400}, {0x0, 0x4}], 0xc}) io_setup(0x9, &(0x7f0000000300)=0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) shutdown(r4, 0x1) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0xfffd, 0x0, @private2, 0x7fd}, 0x6c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 4.250722318s ago: executing program 2 (id=3776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000100)={'L+'}, 0x16, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f00000016c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) r3 = open(0x0, 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x96, 0x7) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 3.164829486s ago: executing program 2 (id=3777): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f0000000340)={[{@nodelalloc}, {@jqfmt_vfsv0}]}, 0x1, 0x52b, &(0x7f00000015c0)="$eJzs3cFvI1cZAPBvZpO1d5uSFHoAVGgphQVVayfedlX1QjlVCFVC9MhhGxJvFK0dr9ZOacIesv8DEpV6ghNnDkgckHrijsQBblzKAanACtQgcTDyeLx1nHjtNLG9xL+fNPKb9zz+3lvL70WfvfMCmFsvRMRBRFyOiHciYjmvT/Ij3ugened98vD+xuHD+xtJtNtv/yPJ2jt10XdNx1P5axYj4odvRvw4GQj6x4jm3v6d9Vqtei+vKrfqd8vNvf3r2/X1repWdadSubl2c/W1G69Wzm2sz9d//fGViPjdb7/y0R8Ovv3TTreW8rb+cZyn7tAXH8XpWIiI708i2Axcysdz+bNc/Jku4jylEfH5iHgx+/wvx6Xs3Tzq6Nv0nSn2DgCYhHZ7OdrL/ecAwEWXZjmwJC3luYClSNNSqZvDezauprVGs/Xy7cbuzmY3V7YSi+nt7Vp1Nc8VrsRicnt7obqWlXvntWpl4PxGRDwTET8rXMnOSxuN2uYs//ABgDn21MD6/+9Cd/0HAC644qfFwiz7AQBMT/HI2eCvdQGAi6g46w4AAFNn/QeA+WP9B4D5Y/0HgPlj/QeAufKDt97qHO3D/P7Xm+/u7d5pvHt9s9q8U6rvbpQ2GvfulrYaja3snj31Ua9XazTurr0Su++VW9Vmq9zc279Vb+zutG5l9/W+VV2cyqgAgMd55vkP/5xExMHrV7Ij+u73P3Ktfm7SvQMmKZ11B4CZuTTrDgAzc3y3L2BenCIff2WS/QBmp++mXw/6qovHCoPeH+vlU/uGwpPn2pfOkP8H/q/J/8P8OiH/P8ay7295uAjk/2F+tduJPf8BYM7I8QOjNv3q//5/td13MvD9v98TAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAME+WsiNJS/le4EuRpqVSxNMRsRKLye3tWnU1Ij4XEX8qLBY652vjbRIMADyx0r8l+f5f15ZfWhpsvVz4TyF7jIiffPD2z99bb7XurUVcTv75qL71fl5fmUX/AYBReut0bx3v+eTh/Y3eMc3+fPzd7uainbiH+dFtWYiF7LGY5Rqu/ivJz7uSc9pr9OBBRHzxpPEnWW5kJd/5dDB+J/bTU42fHomfZm3dx86/xRfOoS8wbz7szD9vnPT5S+OF7PHkz38xm6HOrjf/HR6b/9JH89+lIfPfgJWhMV75/feOVbaXu20PIr68EHHYe/G++acXPxkS/6Uxx/iX57764rC29i8irsVJ40+OxCq36nfLzb3969v19a3qVnWnUrm5dnP1tRuvVspZjrrcy1Qf9/fXk6HbW3fGf3VI/OKI8X9jzPH/8r/v/Ohrj4n/ra+f/P4/+5j4nTXxm2PGX7/6m+Kwtk78zSHjH/X+vzxm/I/+ur855lMBgClo7u3fWa/VqveOFXby7wJ6NYsnPOcUhfRsl/cK7VHPSSIOzhbiFIXCr5I3pxVrgoWYbtAPImLWQ1YYVZj1zARM2qcf+tNddx65LwAAAAAAAAAAAAAAYDwT+M9DURyomfUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA///yu87n") ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x800080, &(0x7f0000000100)={[], [{@dont_measure}, {@dont_appraise}]}, 0x3, 0x464, &(0x7f0000000380)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 2.298040095s ago: executing program 6 (id=3778): epoll_create1(0x0) r0 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0xa}) 1.711993683s ago: executing program 2 (id=3779): ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000040)) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x2544, &(0x7f0000000400)={0x0, 0x2956, 0x0, 0x6, 0x26a}) socket$alg(0x26, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000018c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x1}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x29000000, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 50.746667ms ago: executing program 0 (id=3780): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = getpgid(0x0) prlimit64(r0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000280)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x29) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 6 (id=3781): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1000000, &(0x7f0000000040)={[{@usrjquota}, {}]}, 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000780)='./bus\x00', 0x8000, &(0x7f0000004380)=ANY=[@ANYRESOCT=r0, @ANYBLOB="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", @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32=r0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYBLOB="171263d59f8cbffd0f9f9a2ef9a5f6f2c8c119f2d43929f3ee0d855e7515bc347d06201637efc696515095ee16034c8ed8bdc0c0fd6ec7dc41f9930a8b2420722f76faf7000000000000000029c9330167f231926712da08cfe34bfbd13b1f10c34104fe0af226f51805ce2ae0e3528544a8d316b2b399737407ccf56665b4a27e5f8c9856d29aed796ed0d8e51b6253074bfff7d11910a8be994780298bcf31176d21c35274c32f39673cc639e0a3f7605ebba065c3c879dd25d39227611cb596abbc901d7778bc7c28f974c0941786141582322aac673d4c113026aed1585a83932473e679c479244e3d9a494d5458f02ce5a84c1cc8118b83c57736eb3eb2518dd342d5b0d662063faee3cc946a910827a7de0286dafa1839706c6e5b305231dd59ae322e4752e711feb4f4daf111cae0caab60bd6088b55bcb456f1ad9c143005c3dd834309224b588b0dda054d14d8cb344be2e8c551a5cdf4e510d2156d2f2a3ad7a31fc5372dc3e6f6ec570933eb4769c38e2300f3ecf8fbf06a0df8c6a76c273b8ed46a890d07e175e0c4a49743bb433cc5aa20b02046064495b07095a6651de2537c12459e2a06c72a6b852fe09498ddb3b95191e14392bb4895759f5416226da247f5590336d5c22164e334d4088a9f3529ed157ad15a27d879be7ddc94f913ff14558a080c24131a27ccf43ac420c0b3ec06f24ffb86a25333da5"], 0x10, 0x1c4, &(0x7f0000000440)="$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") chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x40000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) kernel console output (not intermixed with test programs): 812957][T20768] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1598.865530][ T28] audit: type=1326 audit(1754752388.614:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.4.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd2fd2add9 code=0x7ffc0000 [ 1598.947338][T20768] EXT4-fs (loop4): 1 truncate cleaned up [ 1598.976319][ T28] audit: type=1326 audit(1754752388.624:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.4.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd2fd2add9 code=0x7ffc0000 [ 1598.979502][T20768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1598.999468][ T28] audit: type=1326 audit(1754752388.624:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.4.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd2fd2add9 code=0x7ffc0000 [ 1599.085102][ T28] audit: type=1326 audit(1754752388.624:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.4.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2fd8ebe9 code=0x7ffc0000 [ 1599.138057][T20767] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1599.153516][T20780] loop8: detected capacity change from 0 to 128 [ 1599.197488][T20767] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1599.242137][ T28] audit: type=1326 audit(1754752388.624:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.4.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd2fd2add9 code=0x7ffc0000 [ 1599.458323][ T28] audit: type=1326 audit(1754752388.624:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.4.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd2fd2add9 code=0x7ffc0000 [ 1599.491368][T20780] FAT-fs (loop8): Directory bread(block 32) failed [ 1599.506009][T20780] FAT-fs (loop8): Directory bread(block 33) failed [ 1599.534119][T20780] FAT-fs (loop8): Directory bread(block 34) failed [ 1599.564167][T20780] FAT-fs (loop8): Directory bread(block 35) failed [ 1599.635800][T20780] FAT-fs (loop8): Directory bread(block 36) failed [ 1599.708373][T20780] FAT-fs (loop8): Directory bread(block 37) failed [ 1599.715971][T20780] FAT-fs (loop8): Directory bread(block 38) failed [ 1599.737564][T20780] FAT-fs (loop8): Directory bread(block 39) failed [ 1599.771542][T20780] FAT-fs (loop8): Directory bread(block 40) failed [ 1599.868419][T20780] FAT-fs (loop8): Directory bread(block 41) failed [ 1600.216667][T18275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1600.397765][T20768] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1600.592801][T20784] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1601.401766][T20785] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1601.463047][T20780] syz.8.3371: attempt to access beyond end of device [ 1601.463047][T20780] loop8: rw=524288, sector=4108, nr_sectors = 4 limit=128 [ 1601.512683][T20788] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1601.549209][T20780] syz.8.3371: attempt to access beyond end of device [ 1601.549209][T20780] loop8: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 1603.095815][T20826] IPv6: Can't replace route, no match found [ 1603.560697][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1606.968945][ T5848] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1607.198452][ T5848] usb 8-1: Using ep0 maxpacket: 8 [ 1607.239446][ T5848] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.268231][ T5848] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.288666][ T5848] usb 8-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1607.297734][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.368529][ T5848] usb 8-1: config 0 descriptor?? [ 1607.388987][T20842] loop3: detected capacity change from 0 to 8 [ 1607.471925][T20842] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1607.517987][T20842] SQUASHFS error: Failed to read block 0x91: -5 [ 1607.538292][T20842] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1607.558634][T20842] SQUASHFS error: Unable to read inode 0x11f [ 1607.699627][ T5848] usbhid 8-1:0.0: can't add hid device: -71 [ 1607.728830][ T5848] usbhid: probe of 8-1:0.0 failed with error -71 [ 1607.796870][ T5848] usb 8-1: USB disconnect, device number 3 [ 1607.885593][T20844] loop3: detected capacity change from 0 to 1024 [ 1607.980522][T20844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1608.112334][T20844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1608.221964][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.229156][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.285179][T20853] EXT4-fs warning (device loop3): empty_inline_dir:1838: bad inline directory (dir #12) - no `..' [ 1609.291802][T20856] xt_limit: Overflow, try lower: 687865856/40 [ 1610.142939][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.637194][T20864] xt_time: unknown flags 0xc [ 1613.466432][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1613.466447][ T28] audit: type=1326 audit(1754752404.064:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20871 comm="syz.7.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c898ebe9 code=0x7ffc0000 [ 1613.616155][ T28] audit: type=1326 audit(1754752404.104:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20871 comm="syz.7.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8c892add9 code=0x7ffc0000 [ 1613.698271][ T28] audit: type=1326 audit(1754752404.104:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20871 comm="syz.7.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c898ebe9 code=0x7ffc0000 [ 1613.838264][ T28] audit: type=1326 audit(1754752404.104:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20871 comm="syz.7.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8c892add9 code=0x7ffc0000 [ 1613.997119][ T28] audit: type=1326 audit(1754752404.104:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20871 comm="syz.7.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c898ebe9 code=0x7ffc0000 [ 1614.136713][ T28] audit: type=1326 audit(1754752404.104:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20871 comm="syz.7.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8c892add9 code=0x7ffc0000 [ 1614.195042][T20887] loop4: detected capacity change from 0 to 1024 [ 1614.223116][T20887] EXT4-fs: Ignoring removed nobh option [ 1614.248322][T20887] EXT4-fs: Ignoring removed bh option [ 1614.281548][T20887] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1614.310417][ T28] audit: type=1326 audit(1754752404.104:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20871 comm="syz.7.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8c892add9 code=0x7ffc0000 [ 1614.407260][T20887] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3387: bad orphan inode 32767 [ 1614.446481][ T28] audit: type=1326 audit(1754752404.104:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20871 comm="syz.7.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c898ebe9 code=0x7ffc0000 [ 1614.529914][T20887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1614.615890][ T28] audit: type=1326 audit(1754752404.104:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20871 comm="syz.7.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c898ebe9 code=0x7ffc0000 [ 1614.682933][ T28] audit: type=1326 audit(1754752404.104:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20871 comm="syz.7.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8c892add9 code=0x7ffc0000 [ 1614.811298][T20893] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.3387: iget: bad i_size value: 576460752303423498 [ 1614.915317][T20896] loop7: detected capacity change from 0 to 1024 [ 1614.946273][T20896] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1615.011722][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1615.062215][T20896] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1615.177329][T20896] EXT4-fs warning (device loop7): empty_inline_dir:1838: bad inline directory (dir #12) - no `..' [ 1615.384730][T20904] loop4: detected capacity change from 0 to 512 [ 1615.883111][T18275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1616.130251][T20904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1616.144155][T20904] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1617.219074][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1617.920353][T20934] loop4: detected capacity change from 0 to 1024 [ 1617.952547][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3398'. [ 1618.676592][T20942] loop3: detected capacity change from 0 to 512 [ 1618.708996][T20942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1618.722388][T20942] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1618.809357][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.372655][T20005] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1619.494479][T20955] loop8: detected capacity change from 0 to 1024 [ 1619.535454][T20955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1619.601216][T20955] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1619.624951][T20005] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1619.635032][T20005] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1619.646688][T20005] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.657483][T20005] usb 4-1: config 220 has no interface number 2 [ 1619.664422][T20005] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1619.693428][T20959] loop4: detected capacity change from 0 to 512 [ 1619.707367][T20005] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1619.714315][T20005] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1619.721560][T20005] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1619.732204][T20005] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1619.741562][T20005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.752320][T20005] usb 4-1: Product: syz [ 1619.757210][T20005] usb 4-1: Manufacturer: syz [ 1619.762187][T20005] usb 4-1: SerialNumber: syz [ 1619.802022][T20959] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1619.863083][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.872635][T20959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1619.872773][T20959] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1620.018349][T20005] usb 4-1: selecting invalid altsetting 0 [ 1620.051170][T20005] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1620.057899][T20005] usb 4-1: No valid video chain found. [ 1620.121852][T20005] usb 4-1: selecting invalid altsetting 0 [ 1620.153690][T20005] usbtest: probe of 4-1:220.1 failed with error -22 [ 1620.188858][T20005] usb 4-1: USB disconnect, device number 2 [ 1620.552638][T20968] loop7: detected capacity change from 0 to 2048 [ 1620.585767][T20968] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 1620.649015][T20968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1620.789565][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1623.248248][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 1625.095312][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 1625.095344][ T28] audit: type=1326 audit(1754752415.384:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20987 comm="syz.4.3415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd2fd8ebe9 code=0x0 [ 1625.240528][T20996] loop7: detected capacity change from 0 to 1024 [ 1625.259944][T20996] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1625.276194][T20989] binder: 20987:20989 ioctl c0306201 200000000080 returned -14 [ 1625.314986][T20996] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1626.059770][T18275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.088760][T21007] loop8: detected capacity change from 0 to 512 [ 1626.191556][T21007] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1626.436056][T21007] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1626.604931][T21007] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1626.705495][T21019] loop4: detected capacity change from 0 to 1024 [ 1626.768828][T18277] Bluetooth: hci4: command 0x0406 tx timeout [ 1627.192931][T21019] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1627.352840][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1627.512247][T21019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1627.692389][T21027] loop8: detected capacity change from 0 to 1024 [ 1627.728521][ T28] audit: type=1800 audit(1754752418.294:1261): pid=21019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3421" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1627.835479][T21019] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1628.002526][T21019] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1628.100373][T21019] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 1628.198943][T21019] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1628.198943][T21019] [ 1628.258616][T21019] EXT4-fs (loop4): Total free blocks count 0 [ 1628.264868][T21019] EXT4-fs (loop4): Free/Dirty block details [ 1628.319758][T21019] EXT4-fs (loop4): free_blocks=20480 [ 1628.325253][T21019] EXT4-fs (loop4): dirty_blocks=80 [ 1628.376905][T21019] EXT4-fs (loop4): Block reservation details [ 1628.428238][T21019] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 1628.445115][T21034] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 1630.917485][T18277] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1630.936595][T18277] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 1631.205447][T21055] loop3: detected capacity change from 0 to 128 [ 1631.269160][T21055] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1631.320892][T21055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1633.708791][T18277] Bluetooth: hci3: command 0x0406 tx timeout [ 1635.329536][T21071] loop4: detected capacity change from 0 to 512 [ 1635.419190][T21071] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1635.443294][T21071] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3438: bad orphan inode 131083 [ 1635.511122][T21071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1636.338250][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1637.402954][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.410208][T21082] loop8: detected capacity change from 0 to 1764 [ 1637.755010][T21087] xt_limit: Overflow, try lower: 687865856/40 [ 1638.056668][T21087] tty tty28: ldisc open failed (-12), clearing slot 27 [ 1638.371347][T18277] Bluetooth: hci3: command 0x0406 tx timeout [ 1643.226219][T21119] trusted_key: encrypted_key: insufficient parameters specified [ 1643.535332][T21123] loop8: detected capacity change from 0 to 512 [ 1643.578770][T21123] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1643.591425][T21123] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1644.495106][T21127] loop3: detected capacity change from 0 to 1764 [ 1644.596299][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.600084][T21157] trusted_key: encrypted_key: insufficient parameters specified [ 1651.310278][T21165] loop3: detected capacity change from 0 to 512 [ 1651.347581][T21165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1651.361359][T21165] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1652.354988][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.254890][T21184] loop3: detected capacity change from 0 to 512 [ 1653.404255][T21184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1653.418193][T21184] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1653.434008][T21188] xt_limit: Overflow, try lower: 687865856/40 [ 1653.500420][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.536234][T21190] loop8: detected capacity change from 0 to 1764 [ 1653.637859][T21192] loop3: detected capacity change from 0 to 1024 [ 1653.651939][T21192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1653.722260][T21192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1653.786508][T21197] loop7: detected capacity change from 0 to 512 [ 1653.946668][T21197] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1653.965006][T21197] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1653.977802][T21197] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 1653.994399][T21197] EXT4-fs (loop7): group descriptors corrupted! [ 1654.854039][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1655.005053][T21209] loop3: detected capacity change from 0 to 512 [ 1655.268525][T21209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1655.281381][T21209] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1657.191762][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 1657.275951][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1659.417453][T21224] loop8: detected capacity change from 0 to 512 [ 1659.530704][T21224] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1659.544366][T21224] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1659.892532][T21238] loop4: detected capacity change from 0 to 1024 [ 1659.901194][T21238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1659.916768][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1659.937083][T21238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1660.092845][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1660.338998][T21249] xt_limit: Overflow, try lower: 687865856/40 [ 1660.530520][T21252] loop4: detected capacity change from 0 to 512 [ 1661.738951][T21252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1661.752300][T21252] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1662.865395][T21264] loop7: detected capacity change from 0 to 512 [ 1662.906196][T21264] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1663.001088][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1664.428468][T21269] loop8: detected capacity change from 0 to 8 [ 1664.504849][T21272] loop3: detected capacity change from 0 to 1024 [ 1664.532014][T16866] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1664.561756][T21276] loop4: detected capacity change from 0 to 1024 [ 1664.588606][T21276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1664.617936][T21272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1664.649388][T21276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1664.677855][T21272] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1664.700897][T21264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1664.733471][T21264] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1664.785220][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1664.835502][T14482] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1664.891457][ T1068] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: comm kworker/u4:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 1664.952682][ T1068] EXT4-fs (loop3): Remounting filesystem read-only [ 1664.991826][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1665.008269][T14482] usb 9-1: device descriptor read/64, error -71 [ 1665.640611][T21288] loop3: detected capacity change from 0 to 512 [ 1665.648018][T21288] EXT4-fs: Ignoring removed nobh option [ 1665.702000][T21288] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.3493: corrupted inode contents [ 1665.741256][T21288] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #3: comm syz.3.3493: mark_inode_dirty error [ 1665.767372][T21288] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.3493: corrupted inode contents [ 1665.788318][T21288] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.3493: mark_inode_dirty error [ 1665.802289][T14482] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1665.821220][T21288] Quota error (device loop3): write_blk: dquota write failed [ 1665.830788][T21288] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1665.842263][T21288] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3493: Failed to acquire dquot type 0 [ 1665.885143][T21288] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.3493: corrupted inode contents [ 1665.937910][T21288] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #16: comm syz.3.3493: mark_inode_dirty error [ 1665.958865][T21288] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.3493: corrupted inode contents [ 1665.971889][T14482] usb 9-1: device descriptor read/64, error -71 [ 1665.990368][T21288] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.3493: mark_inode_dirty error [ 1666.000347][T18275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1666.007085][T21288] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.3493: corrupted inode contents [ 1666.126070][T14482] usb usb9-port1: attempt power cycle [ 1666.145681][T21288] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 1666.233297][T21288] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.3493: corrupted inode contents [ 1666.925796][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 1667.207585][T21288] EXT4-fs error (device loop3): ext4_truncate:4288: inode #16: comm syz.3.3493: mark_inode_dirty error [ 1667.409504][T21288] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 1667.443809][T21288] EXT4-fs (loop3): 1 truncate cleaned up [ 1667.470067][T21288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1667.497275][T21288] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1667.538733][T21288] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.3493: iget: bad i_size value: 360287970189639690 [ 1667.590419][T21288] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.3493: iget: bad i_size value: 360287970189639690 [ 1667.637226][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1668.083056][T21303] xt_limit: Overflow, try lower: 687865856/40 [ 1668.104619][T21302] loop3: detected capacity change from 0 to 1024 [ 1668.125158][T21302] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1668.160930][T21302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1668.345708][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.660364][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.666718][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.076653][T21315] xt_hashlimit: max too large, truncated to 1048576 [ 1672.228280][T14482] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1672.552860][T14482] usb 4-1: Using ep0 maxpacket: 16 [ 1672.595204][T14482] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1672.613731][T14482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.656301][T14482] usb 4-1: Product: syz [ 1672.699361][T14482] usb 4-1: Manufacturer: syz [ 1672.704345][T14482] usb 4-1: SerialNumber: syz [ 1674.128946][T14482] usb 4-1: config 0 descriptor?? [ 1674.140130][T14482] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1674.149968][T14482] usb 4-1: Detected FT232H [ 1674.595751][T21331] loop4: detected capacity change from 0 to 2048 [ 1674.608954][T21331] EXT4-fs: Ignoring removed i_version option [ 1675.849416][T21331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1675.861691][T21331] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1676.014993][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.057312][T14482] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1676.071524][T14482] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1676.085620][T14482] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1676.121330][T14482] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1676.150380][T14482] usb 4-1: USB disconnect, device number 3 [ 1676.229996][T14482] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1676.270903][T14482] ftdi_sio 4-1:0.0: device disconnected [ 1676.570502][T21343] xt_limit: Overflow, try lower: 687865856/40 [ 1680.552400][T21363] loop4: detected capacity change from 0 to 1024 [ 1680.608213][T21363] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1680.734515][T21363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1681.783850][T21372] loop3: detected capacity change from 0 to 8 [ 1682.645775][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1682.800539][T17234] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1683.388462][T17234] usb 4-1: device descriptor read/64, error -71 [ 1683.619378][T21384] loop8: detected capacity change from 0 to 1024 [ 1683.656381][T21384] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1683.780043][T17234] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1683.862911][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1683.982857][T21391] loop4: detected capacity change from 0 to 16 [ 1684.008685][T21391] erofs: (device loop4): mounted with root inode @ nid 36. [ 1684.049388][ T28] audit: type=1326 audit(1754752474.654:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21387 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2fd8ebe9 code=0x7ffc0000 [ 1684.090557][ T28] audit: type=1326 audit(1754752474.654:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21387 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2fd8ebe9 code=0x7ffc0000 [ 1684.135449][ T28] audit: type=1326 audit(1754752474.654:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21387 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7efd2fd8ebe9 code=0x7ffc0000 [ 1684.158906][ T28] audit: type=1326 audit(1754752474.654:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21387 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2fd8ebe9 code=0x7ffc0000 [ 1684.181933][ T28] audit: type=1326 audit(1754752474.654:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21387 comm="syz.4.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2fd8ebe9 code=0x7ffc0000 [ 1684.481283][T18277] Bluetooth: hci4: command 0x0406 tx timeout [ 1685.234767][T21404] loop4: detected capacity change from 0 to 1024 [ 1685.282991][T21404] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1686.046735][T21404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1686.232353][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.781551][T21434] loop4: detected capacity change from 0 to 128 [ 1690.849568][T21431] loop8: detected capacity change from 0 to 2048 [ 1690.856651][T21431] EXT4-fs: Ignoring removed i_version option [ 1691.385326][T21435] loop3: detected capacity change from 0 to 2048 [ 1691.391563][T21434] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1691.427194][T21431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1691.439960][T21431] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1691.537813][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.540195][T21435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1691.571583][T21434] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1691.667486][T21434] syz.4.3534 (pid 21434) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1691.694934][T21435] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 3200 lbcount: 4096 extent 56+4096 [ 1691.903256][T21434] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 1692.009176][T16837] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1692.660356][T21457] loop7: detected capacity change from 0 to 256 [ 1693.308327][T17234] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1693.315015][T21465] loop3: detected capacity change from 0 to 1024 [ 1693.391111][T21465] pimreg: entered allmulticast mode [ 1693.409780][T21465] dvmrp0: entered allmulticast mode [ 1693.431528][T21465] dvmrp0: left allmulticast mode [ 1693.438987][T21465] pimreg: left allmulticast mode [ 1693.518365][T17234] usb 9-1: Using ep0 maxpacket: 16 [ 1693.526136][T17234] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1693.548219][T17234] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.561891][T17234] usb 9-1: config 0 has no interface number 0 [ 1693.586160][T17234] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1693.595466][T17234] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.609959][T17234] usb 9-1: Product: syz [ 1693.614641][T17234] usb 9-1: Manufacturer: syz [ 1693.622248][T17234] usb 9-1: SerialNumber: syz [ 1693.658943][T17234] usb 9-1: config 0 descriptor?? [ 1693.680876][T17234] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 1693.692303][T17234] usb 9-1: No valid video chain found. [ 1695.391011][T21478] loop7: detected capacity change from 0 to 512 [ 1695.451609][T21478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1695.464878][T21478] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1695.970002][T18275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1696.393286][T21490] loop7: detected capacity change from 0 to 2048 [ 1696.401519][T21490] EXT4-fs: Ignoring removed i_version option [ 1697.767241][ T785] usb 9-1: USB disconnect, device number 5 [ 1697.895556][T21490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1697.908447][T21490] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1698.091803][T18275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1698.125801][T21499] loop4: detected capacity change from 0 to 1024 [ 1701.646205][T21519] loop4: detected capacity change from 0 to 512 [ 1701.654770][T21519] EXT4-fs: Ignoring removed mblk_io_submit option [ 1701.668481][ T5828] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1701.689449][T21519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1701.858380][ T5828] usb 4-1: Using ep0 maxpacket: 16 [ 1701.872229][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1701.898643][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1701.918465][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1701.925326][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1701.948315][ T5828] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1701.985452][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.022172][ T5828] usb 4-1: config 0 descriptor?? [ 1702.232269][T21527] loop8: detected capacity change from 0 to 512 [ 1702.281724][T21527] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1702.294538][T21527] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1702.358970][T20005] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1702.381853][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1702.482378][ T5828] microsoft 0003:045E:07DA.0001: unbalanced collection at end of report description [ 1702.494519][ T5828] microsoft 0003:045E:07DA.0001: parse failed [ 1702.501014][ T5828] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 1702.548866][T20005] usb 5-1: Using ep0 maxpacket: 16 [ 1702.556623][T20005] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1702.576759][T20005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.587673][T20005] usb 5-1: config 0 has no interface number 0 [ 1702.599090][T20005] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1702.626059][T20005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.637796][T20005] usb 5-1: Product: syz [ 1702.643624][T20005] usb 5-1: Manufacturer: syz [ 1702.651998][T20005] usb 5-1: SerialNumber: syz [ 1702.661960][T20005] usb 5-1: config 0 descriptor?? [ 1706.528473][T20005] usb 5-1: can't set config #0, error -71 [ 1706.543333][T20005] usb 5-1: USB disconnect, device number 4 [ 1706.673246][ T6088] usb 4-1: USB disconnect, device number 6 [ 1710.965407][T21569] loop4: detected capacity change from 0 to 2048 [ 1711.008741][T21569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1711.088231][T21569] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 3200 lbcount: 4096 extent 56+4096 [ 1711.321076][T17234] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1711.453699][T21577] loop4: detected capacity change from 0 to 1024 [ 1711.501295][T16394] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1711.518382][T17234] usb 4-1: Using ep0 maxpacket: 16 [ 1711.535592][T17234] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1711.542623][T21577] pimreg: entered allmulticast mode [ 1711.568328][T17234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.587495][T17234] usb 4-1: config 0 has no interface number 0 [ 1711.597580][T17234] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1711.616845][T21577] dvmrp0: entered allmulticast mode [ 1711.622948][T17234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.631507][T17234] usb 4-1: Product: syz [ 1711.635794][T17234] usb 4-1: Manufacturer: syz [ 1711.642935][T17234] usb 4-1: SerialNumber: syz [ 1711.661818][T21577] dvmrp0: left allmulticast mode [ 1711.666917][T21577] pimreg: left allmulticast mode [ 1711.682088][T17234] usb 4-1: config 0 descriptor?? [ 1711.704359][T17234] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 1711.712458][T17234] usb 4-1: No valid video chain found. [ 1712.556730][T21592] loop7: detected capacity change from 0 to 7 [ 1712.573545][T21592] Dev loop7: unable to read RDB block 7 [ 1712.605526][T21592] loop7: unable to read partition table [ 1712.612044][T21592] loop7: partition table beyond EOD, truncated [ 1712.621663][ T12] loop: Write error at byte offset 4, length 3584. [ 1712.665876][ C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1712.672742][T21592] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1712.675446][ C1] buffer_io_error: 120 callbacks suppressed [ 1712.675460][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1712.746117][ T12] loop: Write error at byte offset 4, length 3584. [ 1712.795858][ C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1712.805568][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1713.008855][ T5157] Dev loop7: unable to read RDB block 7 [ 1713.723343][ T5157] loop7: unable to read partition table [ 1713.741118][ T5157] loop7: partition table beyond EOD, truncated [ 1714.147682][ T8168] usb 4-1: USB disconnect, device number 7 [ 1714.168437][ T785] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1715.653894][ T785] usb 9-1: Using ep0 maxpacket: 32 [ 1715.670289][ T785] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.688368][ T785] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.715780][ T785] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1715.727485][ T785] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1715.747328][ T785] usb 9-1: Product: syz [ 1715.763829][ T785] usb 9-1: Manufacturer: syz [ 1715.784305][ T785] hub 9-1:4.0: USB hub found [ 1715.854646][ T785] hub 9-1:4.0: config failed, can't read hub descriptor (err -22) [ 1715.960203][ T785] usb 9-1: USB disconnect, device number 6 [ 1717.183149][T21618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1717.198586][T21618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1717.227316][T21618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1717.247664][T21618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1717.271123][T21618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1717.281101][T21618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1718.372771][T21621] chnl_net:caif_netlink_parms(): no params data found [ 1718.448354][T18277] Bluetooth: hci4: command 0x0406 tx timeout [ 1718.523890][T21637] loop4: detected capacity change from 0 to 128 [ 1718.538551][T21637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1718.547122][T21637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1718.560371][T21637] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1718.613433][T21637] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1718.673550][T21637] ext4 filesystem being mounted at /251/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1718.758444][T16837] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1718.898822][ T5828] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1719.328367][T18277] Bluetooth: hci2: command tx timeout [ 1719.796716][T21652] loop4: detected capacity change from 0 to 512 [ 1719.822267][T21621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.852938][T21621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.868491][T21621] bridge_slave_0: entered allmulticast mode [ 1719.878299][ T5828] usb 4-1: Using ep0 maxpacket: 16 [ 1719.889969][ T5828] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1719.900137][T21621] bridge_slave_0: entered promiscuous mode [ 1719.920946][T21621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.929044][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.949190][T21621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.967284][ T5828] usb 4-1: config 0 has no interface number 0 [ 1719.970159][T21652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1719.997938][ T5828] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1720.002254][T21621] bridge_slave_1: entered allmulticast mode [ 1720.007417][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.021669][ T5828] usb 4-1: Product: syz [ 1720.026158][ T5828] usb 4-1: Manufacturer: syz [ 1720.030846][ T5828] usb 4-1: SerialNumber: syz [ 1720.037606][ T5828] usb 4-1: config 0 descriptor?? [ 1720.045455][ T5828] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 1720.052085][ T5828] usb 4-1: No valid video chain found. [ 1720.079717][T21621] bridge_slave_1: entered promiscuous mode [ 1720.087073][T21652] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1720.236588][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1721.423051][T18277] Bluetooth: hci2: command tx timeout [ 1721.875319][T21621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1721.931967][T21621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.228570][ T5848] usb 4-1: USB disconnect, device number 8 [ 1722.234541][T21671] loop8: detected capacity change from 0 to 512 [ 1722.380867][T21671] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1722.540021][T21671] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1722.668529][T21671] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1722.710776][T21621] team0: Port device team_slave_0 added [ 1722.735933][T21678] loop4: detected capacity change from 0 to 1024 [ 1722.756364][T21621] team0: Port device team_slave_1 added [ 1722.769634][T21678] EXT4-fs: Ignoring removed orlov option [ 1722.868076][T21678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1723.294539][T21621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1723.301778][T21621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.328009][T21621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1723.568674][T18277] Bluetooth: hci2: command tx timeout [ 1723.588729][T21621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1723.595856][T21621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.624387][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1723.693550][T21621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1723.861391][T21621] hsr_slave_0: entered promiscuous mode [ 1724.426732][T21693] loop8: detected capacity change from 0 to 256 [ 1724.437819][T21693] exfat: Unknown parameter 'iocharse|' [ 1725.648271][T18277] Bluetooth: hci2: command tx timeout [ 1725.693557][T16394] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1725.708848][T21621] hsr_slave_1: entered promiscuous mode [ 1725.737363][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1725.757215][T21621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1725.812966][T21621] Cannot create hsr debugfs directory [ 1726.043989][T21701] IPv6: NLM_F_CREATE should be specified when creating new route [ 1726.128615][T14482] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1727.568409][T14482] usb 4-1: Using ep0 maxpacket: 16 [ 1727.617321][T14482] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1727.636386][T14482] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.669604][T14482] usb 4-1: config 0 has no interface number 0 [ 1727.680713][T14482] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1727.708299][T14482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.716347][T14482] usb 4-1: Product: syz [ 1727.738690][T14482] usb 4-1: Manufacturer: syz [ 1727.743345][T14482] usb 4-1: SerialNumber: syz [ 1727.782803][T21621] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1727.791385][T14482] usb 4-1: config 0 descriptor?? [ 1727.813251][T14482] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 1727.839794][T21621] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1727.853581][T14482] usb 4-1: No valid video chain found. [ 1727.960621][T21621] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1728.658845][T21621] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1729.146753][T21621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1729.174266][T21621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1729.743363][ T5848] usb 4-1: USB disconnect, device number 9 [ 1729.863396][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.870784][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1730.147319][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.155031][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1730.246793][T18277] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1730.281553][T18277] Bluetooth: hci4: Injecting HCI hardware error event [ 1730.310140][T21618] Bluetooth: hci4: hardware error 0x00 [ 1730.726000][T21621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1730.869556][T21743] loop4: detected capacity change from 0 to 512 [ 1730.879619][T21743] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1730.975984][T21743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1730.998387][T21743] ext4 filesystem being mounted at /259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1731.115958][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.123138][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.432461][T21621] veth0_vlan: entered promiscuous mode [ 1731.455653][T21621] veth1_vlan: entered promiscuous mode [ 1731.485300][T21621] veth0_macvtap: entered promiscuous mode [ 1731.496913][T21621] veth1_macvtap: entered promiscuous mode [ 1731.539748][T21621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1731.544730][T21756] loop8: detected capacity change from 0 to 512 [ 1731.554898][T21621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1731.568746][T21756] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1731.577993][T21621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1731.594400][T21621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1731.595115][T21756] EXT4-fs (loop8): 1 truncate cleaned up [ 1731.617808][T21621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1731.617941][T21756] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1731.651322][T21756] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2244: inode #15: comm syz.8.3614: corrupted in-inode xattr: overlapping e_value [ 1731.655559][T21621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1731.676280][T21756] EXT4-fs warning (device loop8): ext4_xattr_set_entry:1781: inode #15: comm syz.8.3614: unable to update i_inline_off [ 1731.706289][T21621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1731.734905][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1731.793188][T21621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1731.825748][T21621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1731.855679][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1731.896534][T21621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1731.929492][T21621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1731.954801][T21621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1731.983027][T21621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1731.993638][T21621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.011989][T21621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.023215][T21621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.034213][T21621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.047634][T21621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1733.768799][T21618] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1733.883431][T21621] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.893124][T21621] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.902005][T21621] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.918273][T21621] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.245176][T21769] loop8: detected capacity change from 0 to 512 [ 1734.253005][T21769] EXT4-fs: Ignoring removed mblk_io_submit option [ 1734.345245][T21769] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1735.952352][T21780] loop3: detected capacity change from 0 to 512 [ 1735.980156][T16910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.008040][T21780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1736.009657][T16910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.077145][T21780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1736.095190][T15571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.110477][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1736.136841][T15571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.149001][T21780] ext4 filesystem being mounted at /289/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1736.359801][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1737.969898][T21795] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1738.153070][T11398] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1738.381079][T11398] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 1738.395855][T11398] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.416354][T11398] usb 9-1: config 0 has no interface number 0 [ 1738.427212][T11398] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1738.458253][T11398] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1738.491201][T11398] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1738.508181][T11398] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.508459][T14482] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1738.516208][T11398] usb 9-1: Product: syz [ 1738.516229][T11398] usb 9-1: Manufacturer: syz [ 1738.516240][T11398] usb 9-1: SerialNumber: syz [ 1738.560832][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 1738.612681][T11398] usb 9-1: config 0 descriptor?? [ 1738.628738][ T5848] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1738.726257][T14482] usb 10-1: device descriptor read/64, error -32 [ 1740.397145][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 1740.406922][ T5848] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1740.417137][ T5848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.448274][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1740.468351][ T5848] usb 5-1: config 0 has no interface number 0 [ 1740.488184][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.513734][T11398] usbtouchscreen: probe of 9-1:0.117 failed with error -71 [ 1740.517399][ T5848] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1740.538325][T14482] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1740.557748][T11398] usb 9-1: USB disconnect, device number 7 [ 1740.568359][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.576630][ T5848] usb 5-1: Product: syz [ 1740.588909][ T5848] usb 5-1: Manufacturer: syz [ 1740.593613][ T5848] usb 5-1: SerialNumber: syz [ 1740.637574][ T5848] usb 5-1: config 0 descriptor?? [ 1740.676171][ T5848] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 1740.721550][ T5848] usb 5-1: No valid video chain found. [ 1740.770351][T14482] usb 10-1: Using ep0 maxpacket: 32 [ 1740.780676][T14482] usb 10-1: config 0 has an invalid interface number: 43 but max is 4 [ 1740.848719][T14482] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1742.047868][T14482] usb 10-1: config 0 has no interface number 0 [ 1742.055135][T14482] usb 10-1: string descriptor 0 read error: -71 [ 1742.061956][T14482] usb 10-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1742.076267][T14482] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.172666][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1742.189684][T14482] usb 10-1: config 0 descriptor?? [ 1742.225027][T14482] usb 10-1: can't set config #0, error -71 [ 1742.227251][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.442522][T14482] usb 10-1: USB disconnect, device number 3 [ 1742.453649][T21813] loop8: detected capacity change from 0 to 512 [ 1742.479416][T21810] loop9: detected capacity change from 0 to 512 [ 1742.487209][T21810] EXT4-fs: Ignoring removed mblk_io_submit option [ 1742.526498][T21813] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1742.567477][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1742.582504][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.617505][T21813] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1742.657969][T21810] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1742.669921][T21813] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1742.921250][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1742.958224][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.993829][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1743.141923][ T5828] usb 5-1: USB disconnect, device number 5 [ 1743.205725][T21621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1746.044110][T21838] loop4: detected capacity change from 0 to 512 [ 1746.290669][T21838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1746.598210][T21838] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1747.244232][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1747.582647][T21857] trusted_key: encrypted_key: keylen parameter is missing [ 1747.619142][T21856] trusted_key: encrypted_key: keylen parameter is missing [ 1748.108445][T21860] loop4: detected capacity change from 0 to 512 [ 1748.168951][T21860] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1748.340906][T21860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1748.482272][T21860] ext4 filesystem being mounted at /264/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1748.550171][T21868] loop8: detected capacity change from 0 to 512 [ 1748.557193][T21868] EXT4-fs: Ignoring removed mblk_io_submit option [ 1748.639978][T21868] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1748.699696][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1748.849979][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1748.899035][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1748.931874][ T9] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1748.998199][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.021299][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1749.078168][ T9] usb 10-1: config 0 has no interface number 0 [ 1749.124143][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1749.198304][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.237138][ T9] usb 10-1: Product: syz [ 1749.253957][ T9] usb 10-1: Manufacturer: syz [ 1749.288339][ T9] usb 10-1: SerialNumber: syz [ 1749.324662][ T9] usb 10-1: config 0 descriptor?? [ 1749.509466][ T9] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 1749.516143][ T9] usb 10-1: No valid video chain found. [ 1749.705947][T21888] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3643'. [ 1750.250727][T21889] xt_limit: Overflow, try lower: 687865856/40 [ 1752.089729][ T5828] usb 10-1: USB disconnect, device number 4 [ 1752.138048][T21898] loop4: detected capacity change from 0 to 1024 [ 1752.157413][T21900] loop8: detected capacity change from 0 to 128 [ 1752.635710][T21905] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 1752.644223][T21905] FAT-fs (loop8): Filesystem has been set read-only [ 1752.650992][T21905] syz.8.3646: attempt to access beyond end of device [ 1752.650992][T21905] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1752.668021][T21905] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 1752.676512][T21905] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 1752.721254][ T28] audit: type=1800 audit(1754752543.214:1267): pid=21905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3646" name="file2" dev="loop8" ino=1048634 res=0 errno=0 [ 1752.806975][T21905] syz.8.3646: attempt to access beyond end of device [ 1752.806975][T21905] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1752.821257][T21905] syz.8.3646: attempt to access beyond end of device [ 1752.821257][T21905] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1752.835793][T21905] syz.8.3646: attempt to access beyond end of device [ 1752.835793][T21905] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1752.849962][T21905] syz.8.3646: attempt to access beyond end of device [ 1752.849962][T21905] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1752.864167][T21905] syz.8.3646: attempt to access beyond end of device [ 1752.864167][T21905] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1752.878338][T21905] syz.8.3646: attempt to access beyond end of device [ 1752.878338][T21905] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1752.892398][T21905] syz.8.3646: attempt to access beyond end of device [ 1752.892398][T21905] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1752.906151][T21905] syz.8.3646: attempt to access beyond end of device [ 1752.906151][T21905] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1752.919867][T21905] syz.8.3646: attempt to access beyond end of device [ 1752.919867][T21905] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1753.573562][T21903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1753.677001][T21911] loop4: detected capacity change from 0 to 512 [ 1753.699583][T21911] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1753.833120][T21911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1753.846266][T21911] ext4 filesystem being mounted at /268/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1754.820416][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1755.124782][T21927] xt_limit: Overflow, try lower: 687865856/40 [ 1755.228052][T21929] loop4: detected capacity change from 0 to 128 [ 1755.365130][T21929] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1755.518277][T21929] ext4 filesystem being mounted at /269/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1755.666594][T16837] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1755.848504][T17234] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1756.128933][T17234] usb 9-1: Using ep0 maxpacket: 16 [ 1756.143463][T17234] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1756.157192][T17234] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.173304][T17234] usb 9-1: config 0 has no interface number 0 [ 1756.203859][T17234] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1756.318308][T17234] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.326481][T17234] usb 9-1: Product: syz [ 1756.331054][T17234] usb 9-1: Manufacturer: syz [ 1756.335742][T17234] usb 9-1: SerialNumber: syz [ 1756.364425][T17234] usb 9-1: config 0 descriptor?? [ 1756.390311][T17234] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 1756.404961][T17234] usb 9-1: No valid video chain found. [ 1757.445237][ T11] hsr_slave_0: left promiscuous mode [ 1757.456591][ T11] hsr_slave_1: left promiscuous mode [ 1757.479006][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1757.488067][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1757.504443][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1757.515818][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1757.525202][ T11] bridge_slave_1: left allmulticast mode [ 1757.531414][ T11] bridge_slave_1: left promiscuous mode [ 1757.538989][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.560305][ T11] bridge_slave_0: left allmulticast mode [ 1757.568772][ T11] bridge_slave_0: left promiscuous mode [ 1757.575001][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.738733][ T11] veth1_macvtap: left promiscuous mode [ 1757.750136][ T11] veth0_macvtap: left promiscuous mode [ 1757.756057][ T11] veth1_vlan: left promiscuous mode [ 1757.761787][ T11] veth0_vlan: left promiscuous mode [ 1759.039919][T21841] usb 9-1: USB disconnect, device number 8 [ 1759.062726][T21959] loop3: detected capacity change from 0 to 16 [ 1759.129259][T21959] erofs: (device loop3): mounted with root inode @ nid 36. [ 1759.190998][T21618] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 1759.274657][T21959] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 1759.360329][ T28] audit: type=1800 audit(1754752549.964:1268): pid=21959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3658" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1759.574795][T21967] loop8: detected capacity change from 0 to 512 [ 1759.582924][T21967] EXT4-fs: Ignoring removed mblk_io_submit option [ 1759.604396][T21967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1760.014368][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1760.173556][T21975] loop8: detected capacity change from 0 to 512 [ 1760.214609][T21975] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1760.239150][T21975] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1760.297240][T21975] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1760.511642][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1760.630856][T17234] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1760.854414][T17234] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1760.880130][T17234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.891446][T17234] usb 5-1: config 0 has no interface number 0 [ 1760.897693][T17234] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1760.907856][T17234] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1760.924924][T17234] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1760.934303][T17234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.945381][T17234] usb 5-1: Product: syz [ 1760.949735][T17234] usb 5-1: Manufacturer: syz [ 1760.954464][T17234] usb 5-1: SerialNumber: syz [ 1760.973963][T17234] usb 5-1: config 0 descriptor?? [ 1761.127946][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1761.324568][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1761.807038][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1762.262282][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1763.789868][ T11] bond0 (unregistering): Released all slaves [ 1764.038635][T17234] usbtouchscreen: probe of 5-1:0.117 failed with error -71 [ 1764.123739][T17234] usb 5-1: USB disconnect, device number 6 [ 1764.392970][T21997] loop8: detected capacity change from 0 to 2048 [ 1764.488300][T21993] loop9: detected capacity change from 0 to 512 [ 1764.495647][T21993] EXT4-fs: Ignoring removed mblk_io_submit option [ 1764.513000][T21993] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1764.542652][T21997] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1764.648342][T21997] UDF-fs: Scanning with blocksize 512 failed [ 1764.695237][T21621] EXT4-fs error (device loop9): ext4_lookup:1858: inode #15: comm syz-executor: iget: bad i_size value: 15393162788874 [ 1764.805649][T21621] EXT4-fs error (device loop9): ext4_lookup:1858: inode #15: comm syz-executor: iget: bad i_size value: 15393162788874 [ 1764.838247][T21997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1764.939322][T22006] loop3: detected capacity change from 0 to 1024 [ 1764.970504][T22006] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1764.995723][T22006] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1765.069685][T22006] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1765.091065][T22006] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1765.107108][T22006] EXT4-fs error (device loop3): ext4_get_journal_inode:5805: comm syz.3.3668: inode #1: comm syz.3.3668: iget: illegal inode # [ 1765.185668][T22006] EXT4-fs (loop3): no journal found [ 1765.530432][T22013] loop8: detected capacity change from 0 to 512 [ 1765.538393][T22013] EXT4-fs: Ignoring removed mblk_io_submit option [ 1765.565242][T22016] loop3: detected capacity change from 0 to 512 [ 1765.589830][T22013] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1765.595481][T21621] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1765.741573][T22016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1765.856914][T22016] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1766.106918][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1766.123571][T22029] loop4: detected capacity change from 0 to 512 [ 1766.245668][ T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.330331][T22029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1766.343954][T22029] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1766.372897][T18957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1766.559575][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1766.583017][ T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.793321][T22040] loop3: detected capacity change from 0 to 128 [ 1766.851105][ T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.121195][T22043] loop8: detected capacity change from 0 to 512 [ 1767.128786][T22043] EXT4-fs: Ignoring removed mblk_io_submit option [ 1767.161299][T22043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1767.297105][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.320447][T18957] EXT4-fs error (device loop8): ext4_lookup:1858: inode #15: comm syz-executor: iget: bad i_size value: 15393162788874 [ 1767.380125][T18957] EXT4-fs error (device loop8): ext4_lookup:1858: inode #15: comm syz-executor: iget: bad i_size value: 15393162788874 [ 1767.635388][T19479] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1768.630604][T18277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1768.649620][T22060] loop4: detected capacity change from 0 to 512 [ 1768.696930][T22064] loop3: detected capacity change from 0 to 512 [ 1768.703614][T18277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1768.713056][T22064] EXT4-fs: Ignoring removed mblk_io_submit option [ 1768.723616][T18277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1768.738466][T18277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1768.746329][T18277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1768.756524][T18277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1768.805444][T22064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1768.842061][T22060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1768.855641][T22060] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1769.269410][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1769.447056][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.856840][T18277] Bluetooth: hci0: command tx timeout [ 1771.161170][T22094] loop3: detected capacity change from 0 to 512 [ 1771.168893][T22094] EXT4-fs: Ignoring removed mblk_io_submit option [ 1771.201089][T22094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1771.277450][T22063] chnl_net:caif_netlink_parms(): no params data found [ 1771.401376][T21618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1771.419488][T21618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1771.443927][T21618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1771.458749][T21618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1771.470397][T21618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1771.499202][T21618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1771.573357][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1772.036241][T22063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.046320][T22063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.058019][T22063] bridge_slave_0: entered allmulticast mode [ 1772.068922][T22063] bridge_slave_0: entered promiscuous mode [ 1772.127837][T22063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.145681][T22063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.164859][T22063] bridge_slave_1: entered allmulticast mode [ 1772.191057][T22063] bridge_slave_1: entered promiscuous mode [ 1772.513556][T22063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1772.618045][T22127] xt_limit: Overflow, try lower: 687865856/40 [ 1772.754612][T22063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1772.888225][ T11] hsr_slave_0: left promiscuous mode [ 1772.923365][ T11] hsr_slave_1: left promiscuous mode [ 1772.929030][T18277] Bluetooth: hci0: command tx timeout [ 1772.940420][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1772.948287][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1772.956741][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1772.965051][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1772.973602][ T11] bridge_slave_1: left allmulticast mode [ 1772.979850][ T11] bridge_slave_1: left promiscuous mode [ 1772.985908][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.995764][ T11] bridge_slave_0: left allmulticast mode [ 1773.002915][ T11] bridge_slave_0: left promiscuous mode [ 1773.008909][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.052639][ T11] veth1_macvtap: left promiscuous mode [ 1773.058444][ T11] veth0_macvtap: left promiscuous mode [ 1773.064533][ T11] veth1_vlan: left promiscuous mode [ 1773.070193][ T11] veth0_vlan: left promiscuous mode [ 1773.583074][T18277] Bluetooth: hci2: command tx timeout [ 1775.199629][T18277] Bluetooth: hci0: command tx timeout [ 1776.193145][T21618] Bluetooth: hci2: command tx timeout [ 1776.875619][T22140] loop3: detected capacity change from 0 to 512 [ 1777.509195][T21618] Bluetooth: hci0: command tx timeout [ 1777.580367][T22140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1777.593132][T22140] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1778.211785][T21618] Bluetooth: hci2: command tx timeout [ 1778.406049][T22151] loop4: detected capacity change from 0 to 512 [ 1778.413826][T22151] EXT4-fs: Ignoring removed mblk_io_submit option [ 1778.481197][T22151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1778.643848][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1778.660558][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1778.798063][T22155] loop4: detected capacity change from 0 to 2048 [ 1778.805952][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1778.890126][T22155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1778.918349][T22155] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1778.940143][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1779.063859][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1779.406424][T16837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1779.566695][T22160] loop4: detected capacity change from 0 to 128 [ 1779.930622][T22162] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1779.938643][T22162] FAT-fs (loop4): Filesystem has been set read-only [ 1779.945568][T22162] bio_check_eod: 408 callbacks suppressed [ 1779.945591][T22162] syz.4.3697: attempt to access beyond end of device [ 1779.945591][T22162] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1779.966509][T22162] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1779.980127][T22162] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1780.072157][T22162] syz.4.3697: attempt to access beyond end of device [ 1780.072157][T22162] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1780.086138][T22162] syz.4.3697: attempt to access beyond end of device [ 1780.086138][T22162] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1780.100010][T22162] syz.4.3697: attempt to access beyond end of device [ 1780.100010][T22162] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1780.113704][T22162] syz.4.3697: attempt to access beyond end of device [ 1780.113704][T22162] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1780.127361][T22162] syz.4.3697: attempt to access beyond end of device [ 1780.127361][T22162] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1780.141984][T22162] syz.4.3697: attempt to access beyond end of device [ 1780.141984][T22162] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1780.156050][T22162] syz.4.3697: attempt to access beyond end of device [ 1780.156050][T22162] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1780.170249][T22162] syz.4.3697: attempt to access beyond end of device [ 1780.170249][T22162] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1780.184036][T22162] syz.4.3697: attempt to access beyond end of device [ 1780.184036][T22162] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1780.810261][ T28] audit: type=1800 audit(1754752570.514:1269): pid=22162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3697" name="file2" dev="loop4" ino=1048638 res=0 errno=0 [ 1780.841768][T21618] Bluetooth: hci2: command tx timeout [ 1781.384901][T22165] loop4: detected capacity change from 0 to 512 [ 1781.408308][T22165] EXT4-fs: Ignoring removed mblk_io_submit option [ 1781.426008][T22165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1781.535429][T16837] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz-executor: iget: bad i_size value: 15393162788874 [ 1781.567409][T16837] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz-executor: iget: bad i_size value: 15393162788874 [ 1781.731989][T17312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1781.965800][ T11] bond0 (unregistering): Released all slaves [ 1782.077041][T22063] team0: Port device team_slave_0 added [ 1782.086061][T22063] team0: Port device team_slave_1 added [ 1782.181278][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1782.295467][T22063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1782.329539][T22063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1782.372846][T22063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1782.623546][T22063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1782.665279][T22063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1782.819170][T22063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.475994][T22102] chnl_net:caif_netlink_parms(): no params data found [ 1783.553443][T22063] hsr_slave_0: entered promiscuous mode [ 1783.580936][T22063] hsr_slave_1: entered promiscuous mode [ 1783.619450][T22063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1783.627077][T22063] Cannot create hsr debugfs directory [ 1783.702900][T18277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1783.728968][T18277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1783.738058][T18277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1783.748324][T18277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1783.756589][T18277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1783.764589][T18277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1784.033400][T22102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.059773][T22102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.067032][T22102] bridge_slave_0: entered allmulticast mode [ 1784.088599][T22102] bridge_slave_0: entered promiscuous mode [ 1784.109828][T22102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.116996][T22102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.161626][T22102] bridge_slave_1: entered allmulticast mode [ 1784.190856][T22102] bridge_slave_1: entered promiscuous mode [ 1784.236988][T22201] loop3: detected capacity change from 0 to 512 [ 1784.246228][T22201] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1784.268916][T22201] [EXT4 FS bs=4096, gc=1, bpg=42, ipg=32, mo=842c018, mo2=0000] [ 1784.276925][T22201] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1784.290852][T22201] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1784.306439][T22201] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1784.322271][T22201] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 1784.349905][T22201] EXT4-fs (loop3): 1 truncate cleaned up [ 1784.356880][T22201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1784.507881][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.605996][T22102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1784.719399][T22102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1784.831658][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.250475][T22102] team0: Port device team_slave_0 added [ 1785.332498][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.605863][T22102] team0: Port device team_slave_1 added [ 1785.643240][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.726904][T16400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1785.808303][T18277] Bluetooth: hci3: command tx timeout [ 1785.845557][T22214] loop3: detected capacity change from 0 to 128 [ 1785.877264][T22214] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1785.906338][ T28] audit: type=1800 audit(1754752576.504:1270): pid=22214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3704" name="file1" dev="loop3" ino=1048639 res=0 errno=0 [ 1786.088508][T22102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1786.099203][T22102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1786.138387][T22102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1786.162825][T22102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1786.173379][T22102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1786.205565][T22102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1786.243065][T22217] loop3: detected capacity change from 0 to 512 [ 1786.250665][T22217] EXT4-fs: Ignoring removed mblk_io_submit option [ 1786.301310][T22217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1786.502384][T16400] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz-executor: iget: bad i_size value: 15393162788874 [ 1786.519597][T16400] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz-executor: iget: bad i_size value: 15393162788874 [ 1786.534957][T22186] chnl_net:caif_netlink_parms(): no params data found [ 1786.563593][T22102] hsr_slave_0: entered promiscuous mode [ 1786.579142][T22102] hsr_slave_1: entered promiscuous mode [ 1786.903388][T22102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1786.935084][T22102] Cannot create hsr debugfs directory [ 1786.954717][T20552] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1787.336286][ T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.487337][ T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.608526][T22186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.615724][T22186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.666263][T22186] bridge_slave_0: entered allmulticast mode [ 1787.673829][T22186] bridge_slave_0: entered promiscuous mode [ 1787.684411][T22186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.691881][T22186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.699142][T22186] bridge_slave_1: entered allmulticast mode [ 1787.706275][T22186] bridge_slave_1: entered promiscuous mode [ 1787.783718][ T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.888352][T18277] Bluetooth: hci3: command tx timeout [ 1787.914521][T22063] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1787.951344][T22063] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1788.002711][ T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.022700][T22186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1788.044361][T22186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1788.088194][T22063] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1788.108891][T21618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1788.122280][T21618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1788.131271][T21618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1788.154126][T22063] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1788.163527][T21618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1788.171673][T21618] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1788.179711][T21618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1788.193328][T22186] team0: Port device team_slave_0 added [ 1788.230080][T22186] team0: Port device team_slave_1 added [ 1788.381054][T22186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.388039][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1788.414349][T22186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1788.446426][T22186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1788.455068][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1788.482028][T22186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1788.625512][T22186] hsr_slave_0: entered promiscuous mode [ 1788.643521][T22186] hsr_slave_1: entered promiscuous mode [ 1788.650691][T22186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1788.665709][T22186] Cannot create hsr debugfs directory [ 1789.363595][T22243] chnl_net:caif_netlink_parms(): no params data found [ 1789.709160][T22063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1789.726638][T22243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.737151][T22243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.750636][T22243] bridge_slave_0: entered allmulticast mode [ 1789.757580][T22243] bridge_slave_0: entered promiscuous mode [ 1789.767341][T22243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.776443][T22243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.783986][T22243] bridge_slave_1: entered allmulticast mode [ 1789.794239][T22243] bridge_slave_1: entered promiscuous mode [ 1789.872139][T22243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1789.931747][T22243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1789.963548][T22063] 8021q: adding VLAN 0 to HW filter on device team0 [ 1789.968537][T18277] Bluetooth: hci3: command tx timeout [ 1790.053677][T22243] team0: Port device team_slave_0 added [ 1790.117888][ T6673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1790.125147][ T6673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1790.137449][T22243] team0: Port device team_slave_1 added [ 1790.285145][ T6673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1790.292488][ T6673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1790.298785][T18277] Bluetooth: hci1: command tx timeout [ 1790.323835][T22243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1790.332074][T22243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1790.364549][T22243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1790.377873][T22243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1790.385673][T22243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1790.412433][T22243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1790.564064][T22243] hsr_slave_0: entered promiscuous mode [ 1790.570892][T22243] hsr_slave_1: entered promiscuous mode [ 1790.577366][T22243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1790.594005][T22243] Cannot create hsr debugfs directory [ 1791.131511][T22063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1791.161473][ T11] hsr_slave_0: left promiscuous mode [ 1791.167567][ T11] hsr_slave_1: left promiscuous mode [ 1791.176639][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1791.184984][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1791.193434][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1791.201060][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1791.209277][ T11] bridge_slave_1: left allmulticast mode [ 1791.215023][ T11] bridge_slave_1: left promiscuous mode [ 1791.220831][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.230055][ T11] bridge_slave_0: left allmulticast mode [ 1791.235726][ T11] bridge_slave_0: left promiscuous mode [ 1791.241748][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.257662][ T11] hsr_slave_0: left promiscuous mode [ 1791.263623][ T11] hsr_slave_1: left promiscuous mode [ 1791.269968][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1791.277524][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1791.286146][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1791.293778][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1791.302690][ T11] bridge_slave_1: left allmulticast mode [ 1791.308676][ T11] bridge_slave_1: left promiscuous mode [ 1791.314653][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.323588][ T11] bridge_slave_0: left allmulticast mode [ 1791.329863][ T11] bridge_slave_0: left promiscuous mode [ 1791.335651][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.377791][ T11] veth1_macvtap: left promiscuous mode [ 1791.384820][ T11] veth0_macvtap: left promiscuous mode [ 1791.391888][ T11] veth1_vlan: left promiscuous mode [ 1791.397190][ T11] veth0_vlan: left promiscuous mode [ 1791.404023][ T11] veth1_macvtap: left promiscuous mode [ 1791.410741][ T11] veth0_macvtap: left promiscuous mode [ 1791.416351][ T11] veth1_vlan: left promiscuous mode [ 1791.421664][ T11] veth0_vlan: left promiscuous mode [ 1792.055860][T18277] Bluetooth: hci3: command tx timeout [ 1792.270695][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1792.345029][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1792.379844][T18277] Bluetooth: hci1: command tx timeout [ 1792.415455][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1792.485304][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1792.531663][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.538746][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.512208][ T11] bond0 (unregistering): Released all slaves [ 1794.259138][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1794.332843][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1794.397121][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1794.448289][T18277] Bluetooth: hci1: command tx timeout [ 1794.470907][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1795.199657][ T11] bond0 (unregistering): Released all slaves [ 1795.532407][T22063] veth0_vlan: entered promiscuous mode [ 1795.583960][T22063] veth1_vlan: entered promiscuous mode [ 1795.697337][T22063] veth0_macvtap: entered promiscuous mode [ 1795.721506][T22063] veth1_macvtap: entered promiscuous mode [ 1795.951742][T22063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1795.980426][T22063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1796.000288][T22063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1796.007826][T22102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1796.049383][T22102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1796.317477][T22063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1796.334943][T22063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1796.351183][T22063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1796.370766][T22102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1796.549448][T18277] Bluetooth: hci1: command tx timeout [ 1796.562669][T22102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1796.582762][T22063] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.591692][T22063] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.601335][T22063] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.610612][T22063] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.946811][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.980610][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1797.017932][T22102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1797.085277][ T1146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1797.096525][ T1146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.118593][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1797.126777][T22102] 8021q: adding VLAN 0 to HW filter on device team0 [ 1797.137519][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1797.192425][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.199813][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1797.211242][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.218875][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1797.252229][ T1146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1797.262818][ T1146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.510559][ T1146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1797.536683][ T1146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.565094][T22186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1797.712503][T22186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1797.731858][T22186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1797.824834][ T1146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1797.835559][T22188] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1797.843992][ T1146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.976660][T22186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1798.029997][T22188] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1798.047452][T22188] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.058240][T22188] usb 3-1: config 0 has no interface number 0 [ 1798.064398][T22188] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1798.079988][T22188] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1798.102514][T22188] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1798.117175][T22188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.129235][T22188] usb 3-1: Product: syz [ 1798.133527][T22188] usb 3-1: Manufacturer: syz [ 1798.142509][T22188] usb 3-1: SerialNumber: syz [ 1798.153637][T22188] usb 3-1: config 0 descriptor?? [ 1800.377206][T22186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1800.385067][T22188] usbtouchscreen: probe of 3-1:0.117 failed with error -71 [ 1800.458434][T22188] usb 3-1: USB disconnect, device number 2 [ 1802.084828][T22102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1802.157747][T22243] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1802.184350][T22243] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1802.237235][T22243] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1802.250146][T22243] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1802.273143][T22186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1802.396111][T16760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.403456][T16760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1802.465123][T22102] veth0_vlan: entered promiscuous mode [ 1802.487747][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.494952][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1802.570747][T22102] veth1_vlan: entered promiscuous mode [ 1802.756191][T22350] loop2: detected capacity change from 0 to 512 [ 1802.784687][T22350] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1802.806131][T22350] [EXT4 FS bs=4096, gc=1, bpg=42, ipg=32, mo=842c018, mo2=0000] [ 1802.821024][T22350] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1802.832242][T22350] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1802.842865][T22350] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1802.903620][T22350] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1802.916926][T22350] EXT4-fs (loop2): 1 truncate cleaned up [ 1802.952726][T22350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1802.974168][T22102] veth0_macvtap: entered promiscuous mode [ 1803.022356][T22102] veth1_macvtap: entered promiscuous mode [ 1803.239935][T22102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1803.287119][T22102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.304647][T22102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1803.318729][T22102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.339726][T22102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1803.385176][T22102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1803.402606][T22102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.415810][T22102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1803.429876][T22102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.452376][T22102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1803.479818][T22243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1803.496740][ T1146] hsr_slave_0: left promiscuous mode [ 1803.509050][ T1146] hsr_slave_1: left promiscuous mode [ 1803.520557][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1803.529944][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1803.541116][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1803.549576][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1803.557650][ T1146] bridge_slave_1: left allmulticast mode [ 1803.565851][ T1146] bridge_slave_1: left promiscuous mode [ 1803.572634][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.593105][ T1146] bridge_slave_0: left allmulticast mode [ 1803.599314][ T1146] bridge_slave_0: left promiscuous mode [ 1803.605836][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.666962][ T1146] veth1_macvtap: left promiscuous mode [ 1803.672733][ T1146] veth0_macvtap: left promiscuous mode [ 1803.678805][ T1146] veth1_vlan: left promiscuous mode [ 1803.684316][ T1146] veth0_vlan: left promiscuous mode [ 1804.497941][T22063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1804.862611][T22361] xt_limit: Overflow, try lower: 687865856/40 [ 1805.079979][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 1805.190178][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 1805.291997][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.416333][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1805.732232][T22363] loop2: detected capacity change from 0 to 512 [ 1805.760981][T22363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1805.774169][T22363] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1806.521442][ T1146] bond0 (unregistering): Released all slaves [ 1806.637962][T22186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.659943][T22102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.677758][T22102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.698232][T22102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.706979][T22102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.725301][T22063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1806.816924][T22243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1806.837732][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.844977][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1806.929692][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.937042][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1806.954447][T22369] loop2: detected capacity change from 0 to 1024 [ 1807.141327][T16760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1807.185304][T16760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1807.220532][ T77] hfsplus: b-tree write err: -5, ino 4 [ 1807.231293][T22186] veth0_vlan: entered promiscuous mode [ 1807.310017][T16760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1807.358518][T16760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1807.385659][T22186] veth1_vlan: entered promiscuous mode [ 1807.543779][T22186] veth0_macvtap: entered promiscuous mode [ 1807.612920][T22186] veth1_macvtap: entered promiscuous mode [ 1807.721763][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1807.782744][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.805462][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1807.821557][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.257663][T22186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1808.269116][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1808.285628][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.305162][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1808.320945][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.342354][T22186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1808.495504][T22186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.526318][T22186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.595220][T22186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.616439][T22186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.838920][T22390] xt_limit: Overflow, try lower: 687865856/40 [ 1809.694630][T22392] loop2: detected capacity change from 0 to 512 [ 1809.747426][T22392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1809.760527][T22392] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1809.781750][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1809.797062][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1809.954227][T22243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1810.830994][T16544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1810.866681][T22063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1810.886512][T16544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.465717][T22405] loop1: detected capacity change from 0 to 512 [ 1811.472967][T22405] EXT4-fs: Ignoring removed mblk_io_submit option [ 1812.761511][T22405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1813.151710][T22186] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1813.345328][T22243] veth0_vlan: entered promiscuous mode [ 1813.530106][T22243] veth1_vlan: entered promiscuous mode [ 1814.579169][T22243] veth0_macvtap: entered promiscuous mode [ 1814.641748][T22243] veth1_macvtap: entered promiscuous mode [ 1814.650003][T22429] xt_limit: Overflow, try lower: 687865856/40 [ 1815.233692][T22243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1815.318167][T22243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.343655][T22243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1815.363424][T22243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.379338][T22243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1815.392481][T22243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.407193][T22243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1815.435320][T22243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1815.447065][T22243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.463386][T22433] loop0: detected capacity change from 0 to 512 [ 1815.952641][T22243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1815.952943][T22433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1815.964129][T22243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.976026][T22433] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1815.986562][T22243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1816.007648][T22243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1816.021809][T22243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1816.081421][T22243] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.135237][T22243] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.197142][T22243] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.252480][T22243] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.693893][T22448] loop1: detected capacity change from 0 to 256 [ 1816.839014][T22102] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1816.849686][T16760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.857621][T16760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.910340][T22448] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 1817.017237][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1817.017248][ T28] audit: type=1800 audit(1754752607.614:1271): pid=22448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3727" name="file2" dev="loop1" ino=1048649 res=0 errno=0 [ 1817.079108][ T28] audit: type=1800 audit(1754752607.684:1272): pid=22452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3727" name="file2" dev="loop1" ino=1048649 res=0 errno=0 [ 1817.089236][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1817.866112][T22461] netlink: 87 bytes leftover after parsing attributes in process `syz.2.3721'. [ 1819.573035][T22490] xt_limit: Overflow, try lower: 687865856/40 [ 1819.939384][T22492] loop6: detected capacity change from 0 to 512 [ 1820.000377][T22495] loop1: detected capacity change from 0 to 512 [ 1820.029895][T22492] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1820.080723][T22492] [EXT4 FS bs=4096, gc=1, bpg=42, ipg=32, mo=842c018, mo2=0000] [ 1820.106996][T22467] loop0: detected capacity change from 0 to 512 [ 1820.109989][T22495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1820.125961][T22495] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1820.145689][T22492] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1820.153811][T22467] EXT4-fs: Ignoring removed mblk_io_submit option [ 1820.241827][T22492] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1820.282464][T22467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1820.332858][T22492] EXT4-fs warning (device loop6): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1820.840792][T22492] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1820.903836][T22492] EXT4-fs (loop6): 1 truncate cleaned up [ 1820.962777][T22492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1821.050873][T22186] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1821.982808][T22102] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1824.611393][T22550] loop0: detected capacity change from 0 to 512 [ 1824.799812][T22550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1824.812510][T22550] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1825.506337][T22554] loop2: detected capacity change from 0 to 512 [ 1825.513463][T22554] EXT4-fs: Ignoring removed mblk_io_submit option [ 1826.031098][T22554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1826.035419][T22102] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1826.319811][T22243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1826.654530][T22574] loop0: detected capacity change from 0 to 512 [ 1826.754938][T22574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1826.858739][T22574] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.3750: Unimplemented hash flags: 0x0001 [ 1826.888578][T22063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1826.951411][T22574] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3750: Corrupt directory, running e2fsck is recommended [ 1827.030335][T22579] binder: 22576:22579 ioctl 4018620d 0 returned -22 [ 1827.060036][T22581] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.3750: Unimplemented hash flags: 0x0001 [ 1827.558333][T22585] binder: 22576:22585 ioctl c018620c 0 returned -14 [ 1827.618341][T22581] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3750: Corrupt directory, running e2fsck is recommended [ 1827.700328][T22582] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.3750: Unimplemented hash flags: 0x0001 [ 1827.818612][T22582] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3750: Corrupt directory, running e2fsck is recommended [ 1827.908601][T22574] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.3750: Unimplemented hash flags: 0x0001 [ 1827.951270][T22574] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3750: Corrupt directory, running e2fsck is recommended [ 1828.179349][T22587] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.3750: Unimplemented hash flags: 0x0001 [ 1829.888312][T22587] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3750: Corrupt directory, running e2fsck is recommended [ 1830.115785][T22606] loop6: detected capacity change from 0 to 512 [ 1830.134175][T22102] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1830.228473][T22606] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1830.327083][T22606] [EXT4 FS bs=4096, gc=1, bpg=42, ipg=32, mo=842c018, mo2=0000] [ 1830.518396][T22606] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1830.570239][T22606] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1831.976541][T22606] EXT4-fs warning (device loop6): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1832.492391][T22606] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1832.564587][T22606] EXT4-fs (loop6): 1 truncate cleaned up [ 1832.645985][T22606] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1833.121446][T22624] loop1: detected capacity change from 0 to 1024 [ 1833.635605][ T77] hfsplus: b-tree write err: -5, ino 8 [ 1835.750439][T22243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1838.865329][T22669] syz_tun: entered allmulticast mode [ 1839.512842][T22672] syz_tun: left allmulticast mode [ 1841.889136][T22682] loop2: detected capacity change from 0 to 256 [ 1842.036169][T22682] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 1843.551241][T22695] loop2: detected capacity change from 0 to 512 [ 1843.642406][T22695] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1843.761876][T22695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1843.849755][T22695] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1844.049921][ T6088] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1844.111726][T22063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1844.240284][ T6088] usb 2-1: Using ep0 maxpacket: 16 [ 1844.271957][ T6088] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1844.293429][ T6088] usb 2-1: config 0 has no interface number 0 [ 1844.322274][ T6088] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1844.344858][ T6088] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1844.360575][ T6088] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1844.389410][ T6088] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1844.398863][ T6088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.414868][ T6088] usb 2-1: Product: syz [ 1844.425000][ T6088] usb 2-1: Manufacturer: syz [ 1844.436662][ T6088] usb 2-1: SerialNumber: syz [ 1844.462372][ T6088] usb 2-1: config 0 descriptor?? [ 1845.759005][T22701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1845.837645][T22701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1846.061281][T22718] loop6: detected capacity change from 0 to 128 [ 1846.127703][T22701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1846.142069][T22718] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1846.207882][T22721] xt_limit: Overflow, try lower: 687865856/40 [ 1846.248283][T22701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1846.260294][T22718] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1846.408855][T22718] general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN [ 1846.420724][T22718] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 1846.429350][T22718] CPU: 1 PID: 22718 Comm: syz.6.3781 Not tainted 6.6.101-syzkaller #0 [ 1846.437607][T22718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1846.447789][T22718] RIP: 0010:utf8nlookup+0x39/0xa50 [ 1846.452940][T22718] Code: 89 44 24 10 49 89 ce 48 89 14 24 89 f5 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 82 36 f8 fe 49 8d 5d 18 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 68 7c 4f ff 48 8b 1b 48 83 c3 30 [ 1846.472740][T22718] RSP: 0018:ffffc900051074a0 EFLAGS: 00010206 [ 1846.478832][T22718] RAX: 0000000000000003 RBX: 0000000000000018 RCX: 0000000000080000 [ 1846.486920][T22718] RDX: ffffc9000c9c1000 RSI: 0000000000001027 RDI: 0000000000001028 [ 1846.495063][T22718] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1846.503150][T22718] R10: ffffc90005107638 R11: fffff52000a20eca R12: dffffc0000000000 [ 1846.511146][T22718] R13: 0000000000000000 R14: ffff88805911f500 R15: dffffc0000000000 [ 1846.519240][T22718] FS: 00007faa524116c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1846.526041][T22331] udevd[22331]: incorrect jbd checksum on /dev/loop6 [ 1846.528520][T22718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1846.528536][T22718] CR2: 00007faa473f7000 CR3: 0000000039cf5000 CR4: 00000000003506e0 [ 1846.528552][T22718] Call Trace: [ 1846.528559][T22718] [ 1846.528567][T22718] ? __kasan_kmalloc+0x8f/0xa0 [ 1846.561255][T22718] ? ext4_fname_prepare_lookup+0x213/0x3a0 [ 1846.567088][T22718] ? ext4_lookup+0xfa/0x6d0 [ 1846.571797][T22718] ? path_openat+0x10b8/0x3190 [ 1846.576683][T22718] ? do_filp_open+0x1c5/0x3d0 [ 1846.581401][T22718] utf8byte+0x34f/0x1370 [ 1846.585917][T22718] ? utf8ncursor+0x170/0x210 [ 1846.590523][T22718] utf8_casefold+0x130/0x230 [ 1846.595145][T22718] ? utf8_strncasecmp_folded+0x250/0x250 [ 1846.600829][T22718] ext4_fname_setup_ci_filename+0x1d5/0x430 [ 1846.606878][T22718] ext4_fname_prepare_lookup+0x213/0x3a0 [ 1846.612546][T22718] ? ext4_fname_free_filename+0xb0/0xb0 [ 1846.618114][T22718] ? aa_get_newest_label+0xf8/0x5c0 [ 1846.623789][T22718] ? from_kgid+0x15d/0x680 [ 1846.628308][T22718] ext4_lookup+0xfa/0x6d0 [ 1846.632647][T22718] ? bpf_lsm_capable+0x9/0x10 [ 1846.637601][T22718] ? security_capable+0x89/0xb0 [ 1846.642470][T22718] ? ext4_add_entry+0xd70/0xd70 [ 1846.647351][T22718] ? generic_permission+0x253/0x590 [ 1846.652745][T22718] ? inode_permission+0xf3/0x480 [ 1846.657909][T22718] ? bpf_lsm_inode_create+0x9/0x10 [ 1846.663085][T22718] ? security_inode_create+0xb7/0x100 [ 1846.668534][T22718] ? ext4_add_entry+0xd70/0xd70 [ 1846.673422][T22718] path_openat+0x10b8/0x3190 [ 1846.678065][T22718] ? do_filp_open+0x3d0/0x3d0 [ 1846.682873][T22718] do_filp_open+0x1c5/0x3d0 [ 1846.687438][T22718] ? vfs_tmpfile+0x490/0x490 [ 1846.692058][T22718] ? _raw_spin_unlock+0x28/0x40 [ 1846.696918][T22718] ? alloc_fd+0x58f/0x630 [ 1846.701351][T22718] do_sys_openat2+0x12c/0x1c0 [ 1846.706120][T22718] ? do_sys_open+0xe0/0xe0 [ 1846.710561][T22718] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1846.716658][T22718] ? lock_chain_count+0x20/0x20 [ 1846.721617][T22718] __x64_sys_openat+0x139/0x160 [ 1846.726583][T22718] do_syscall_64+0x55/0xb0 [ 1846.731101][T22718] ? clear_bhb_loop+0x40/0x90 [ 1846.735799][T22718] ? clear_bhb_loop+0x40/0x90 [ 1846.740497][T22718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1846.746419][T22718] RIP: 0033:0x7faa5158ebe9 [ 1846.750873][T22718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1846.770498][T22718] RSP: 002b:00007faa52411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1846.779515][T22718] RAX: ffffffffffffffda RBX: 00007faa517b5fa0 RCX: 00007faa5158ebe9 [ 1846.787525][T22718] RDX: 0000000000187842 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1846.795970][T22718] RBP: 00007faa51611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1846.804004][T22718] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1846.812157][T22718] R13: 00007faa517b6038 R14: 00007faa517b5fa0 R15: 00007ffc86addf18 [ 1846.820157][T22718] [ 1846.823289][T22718] Modules linked in: [ 1846.883009][ T6088] Error reading MAC address [ 1846.890849][ T6088] sr9700: probe of 2-1:0.41 failed with error -71 [ 1846.919972][ T6088] usb 2-1: USB disconnect, device number 2 [ 1847.086998][T22718] ---[ end trace 0000000000000000 ]--- [ 1847.094679][T22718] RIP: 0010:utf8nlookup+0x39/0xa50 [ 1847.100768][T22718] Code: 89 44 24 10 49 89 ce 48 89 14 24 89 f5 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 82 36 f8 fe 49 8d 5d 18 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 68 7c 4f ff 48 8b 1b 48 83 c3 30 [ 1847.122152][T22718] RSP: 0018:ffffc900051074a0 EFLAGS: 00010206 [ 1847.128822][T22718] RAX: 0000000000000003 RBX: 0000000000000018 RCX: 0000000000080000 [ 1847.137434][T22718] RDX: ffffc9000c9c1000 RSI: 0000000000001027 RDI: 0000000000001028 [ 1847.146895][T22718] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1847.155692][T22718] R10: ffffc90005107638 R11: fffff52000a20eca R12: dffffc0000000000 [ 1847.169709][T22718] R13: 0000000000000000 R14: ffff88805911f500 R15: dffffc0000000000 [ 1847.194544][T22718] FS: 00007faa524116c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1847.208175][T22718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1847.214852][T22718] CR2: 00007ffc68870878 CR3: 0000000039cf5000 CR4: 00000000003506f0 [ 1847.223274][T22718] Kernel panic - not syncing: Fatal exception [ 1847.230065][T22718] Kernel Offset: disabled [ 1847.234421][T22718] Rebooting in 86400 seconds..