last executing test programs: 6m27.144017732s ago: executing program 5 (id=462): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000046c0)={0x50, 0x0, r0, {0x7, 0x9, 0x0, 0x403a1810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0x0) 6m23.598999044s ago: executing program 5 (id=466): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r3}, 0x10) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) 6m21.937695929s ago: executing program 5 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 6m6.652432415s ago: executing program 32 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 1m54.303900069s ago: executing program 6 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1m52.989753741s ago: executing program 6 (id=1151): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r2, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 1m52.435134538s ago: executing program 2 (id=1153): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x6, 0x6, "1a00", 0x2, 0x3a, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @local}}}}}}}}, 0x0) 1m52.165062475s ago: executing program 6 (id=1154): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) close_range(r1, r1, 0x0) 1m51.51592398s ago: executing program 2 (id=1155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 1m50.207846933s ago: executing program 2 (id=1156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) dup2(r0, r1) 1m50.158972086s ago: executing program 6 (id=1157): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) clock_settime(0x1ed5d7404, 0x0) 1m48.946432283s ago: executing program 2 (id=1158): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d4", 0x3, 0x20000000, 0x0, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x48, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 1m48.731019563s ago: executing program 6 (id=1160): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x33) 1m48.547989513s ago: executing program 2 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1m47.357208044s ago: executing program 2 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 1m47.356809425s ago: executing program 6 (id=1166): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") bind$inet6(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x7fff, 0x9b}) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000400}, 0x20000000) 1m31.701480602s ago: executing program 33 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 1m31.463136296s ago: executing program 34 (id=1166): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") bind$inet6(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x7fff, 0x9b}) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000400}, 0x20000000) 1m21.896035236s ago: executing program 3 (id=1231): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24003b84, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x68, 0x0, &(0x7f00000003c0)=[@register_looper, @free_buffer, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x300}, @fda={0x66646185, 0x9, 0x2, 0x8}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x34}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) sendfile(r3, r4, 0x0, 0x8000002b) 1m17.278439133s ago: executing program 3 (id=1238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfd}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) 1m17.075624638s ago: executing program 3 (id=1240): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1, 0x4, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0x2, 0x200, 0x4, 0x2c, 0x80000005, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0xb, 0xa, 0xfffffff6, {0x403, 0x1, 0x3, 0x8, 0x20, 0x7, 0x5, 0x6, 0x22, 0x5, 0x7f, 0x9c14, 0x20000a, 0x8d12074f, "0010b45adb3bdf6bbf43f7e7bdcf42a72e6ca213e20b354ba4e274f7720904f6"}}) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000540)=0xb) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 1m16.705260786s ago: executing program 3 (id=1243): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x8, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m16.538684083s ago: executing program 3 (id=1245): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1m13.711319125s ago: executing program 3 (id=1252): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x200}]}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={0xffffffffffffffff, &(0x7f0000000540)="0c0a23dbb859bf613b74a12e62b7a3b891fe21f86dce0e49a2d781f0e533fb760ca19d85b519782b1d4f849e4bf218bbc2b8b07b06cf2786aad0ed3036feda862e1e87995180028df97436a2e43609c2354686519c711a48692b4704037899afad44dd0ec081d57ca23d90a133d5d8a5f9b25572202edda57023cc1c7761f48ceb", &(0x7f0000000b00)=""/189}, 0x20) 1m13.136767176s ago: executing program 35 (id=1252): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x200}]}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={0xffffffffffffffff, &(0x7f0000000540)="0c0a23dbb859bf613b74a12e62b7a3b891fe21f86dce0e49a2d781f0e533fb760ca19d85b519782b1d4f849e4bf218bbc2b8b07b06cf2786aad0ed3036feda862e1e87995180028df97436a2e43609c2354686519c711a48692b4704037899afad44dd0ec081d57ca23d90a133d5d8a5f9b25572202edda57023cc1c7761f48ceb", &(0x7f0000000b00)=""/189}, 0x20) 1m12.775455821s ago: executing program 0 (id=1255): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x10001}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa76aaaaaaaa5367402d4500"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f041001190444d89df5ef8af4eccf33dd7346027fa605bb5b2812c2514b25a05ea7c7059ef478a3e111594b2c03bb7720a9ffd9293550f9b96d4effd6"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1m12.217374256s ago: executing program 0 (id=1258): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="78000000100003040000", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1c, 0x0, @opaque="ccc6a40934cbddcf9ba6790f55b24154e9a77cf7"}}}}}, 0x0) 1m11.092088003s ago: executing program 0 (id=1259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m9.858426757s ago: executing program 0 (id=1260): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x8, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m9.617249773s ago: executing program 0 (id=1261): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r0, 0x0, 0x0) 1m6.575738869s ago: executing program 0 (id=1270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) accept$unix(r2, &(0x7f0000000640), 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.105247399s ago: executing program 36 (id=1270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) accept$unix(r2, &(0x7f0000000640), 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.117366212s ago: executing program 5 (id=1271): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x8, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 27.656749009s ago: executing program 5 (id=1344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 26.655851803s ago: executing program 5 (id=1347): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24003b84, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x68, 0x0, &(0x7f00000003c0)=[@register_looper, @free_buffer, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x300}, @fda={0x66646185, 0x9, 0x2, 0x8}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x34}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) sendfile(r3, r4, 0x0, 0x8000002b) 25.972410321s ago: executing program 37 (id=1347): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24003b84, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x68, 0x0, &(0x7f00000003c0)=[@register_looper, @free_buffer, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x300}, @fda={0x66646185, 0x9, 0x2, 0x8}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x34}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) sendfile(r3, r4, 0x0, 0x8000002b) 15.866396833s ago: executing program 9 (id=1386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 9.832065983s ago: executing program 1 (id=1395): add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x96) 9.702112614s ago: executing program 7 (id=1396): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 9.223120586s ago: executing program 8 (id=1397): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) 9.161817673s ago: executing program 7 (id=1398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x20000054) 8.028003431s ago: executing program 8 (id=1399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 7.609302362s ago: executing program 8 (id=1400): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x395180, 0x149) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, 0x0, 0x1000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x1, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x0, 0x9, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40010) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) write$vga_arbiter(r4, 0x0, 0xffffffffffffffa8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c0000000000", @ANYRES32], 0x50) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="10000000000000000b000000000000100100000c0000002900000000000000a72a552f08"], 0x28}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 6.571727519s ago: executing program 7 (id=1402): mkdir(&(0x7f0000000080)='./file0\x00', 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') 6.532976791s ago: executing program 1 (id=1403): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r5) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 6.532470849s ago: executing program 9 (id=1404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 5.964015542s ago: executing program 7 (id=1406): syz_emit_ethernet(0x4e, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f041001190444d89df5ef8af4eccf33dd7346027fa605bb5b2812c2514b25a05ea7c7059ef478a3e111594b2c03bb7720a9ffd9293550f9b96d4effd6"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.201115314s ago: executing program 4 (id=1407): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1c, 0x0, @opaque="ccc6a40934cbddcf9ba6790f55b24154e9a77cf7"}}}}}, 0x0) 5.137651766s ago: executing program 1 (id=1408): io_setup(0x8, &(0x7f00000002c0)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000940)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x1000}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x7, r1, &(0x7f0000000080), 0x0, 0x3, 0x0, 0x2}]) 4.86013309s ago: executing program 9 (id=1409): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 4.83210338s ago: executing program 7 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 4.687414386s ago: executing program 8 (id=1411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 4.442119294s ago: executing program 4 (id=1412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4) 4.388591912s ago: executing program 8 (id=1413): socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @info_request={0xf, 0x0, 0x0, 0x8, 0x5}}}}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) landlock_create_ruleset(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xffffffffffffffbd) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x800) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040854}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.650694941s ago: executing program 7 (id=1414): add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x96) 3.520033439s ago: executing program 1 (id=1415): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/129, 0x81}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.285360917s ago: executing program 4 (id=1416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x2c, r7, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002540)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x850) 2.101966284s ago: executing program 8 (id=1417): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x107382, 0x1d0) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201500200000040"], 0x0) truncate(&(0x7f00000013c0)='./file1\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) 2.031977233s ago: executing program 1 (id=1418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @remote, 0x800}, 0x1c) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x80800) mknodat$loop(0xffffffffffffffff, 0x0, 0x2000, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x8, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.873159819s ago: executing program 9 (id=1419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)={0x60, r1, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x35, 0xe, [@rann={0x7e, 0x15, {{0x0, 0x8}, 0x0, 0x62, @device_b, 0xffff, 0x77565b2d, 0x2}}, @peer_mgmt={0x75, 0x18, {0x0, 0x0, @val, @val=0xfffe, @val="669e5eced39f2c34e6904ebbbb27ac48"}}]}]}, 0x60}}, 0x8014) 1.685207304s ago: executing program 4 (id=1420): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f00000006c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c757466383d312c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d77696e6e742c005a086502454ede48cd0c582ac337a877be0c36a8e60d572dbe625e0680a225abe4d4fc79e83de86dce78be26dba8f6ff0abfb9c2fba30a14b3b206ad905e994c27e6d4fc5d74f88b749758f85a07efcf3e17bd78aad46a325ec58b65332fe45ac5db6e722db0a32946415f0b3403d53ad233d1fe2593f1d4fe07041a0091b2f43c1e87fa638a217f4108c00d47c229ae1229250e"], 0x1, 0x373, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x60c41, 0x8) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.533249318s ago: executing program 9 (id=1421): syz_emit_ethernet(0x4e, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f041001190444d89df5ef8af4eccf33dd7346027fa605bb5b2812c2514b25a05ea7c7059ef478a3e111594b2c03bb7720a9ffd9293550f9b96d4effd6"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.027987296s ago: executing program 9 (id=1422): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x395180, 0x149) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, 0x0, 0x1000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x1, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x0, 0x9, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40010) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) write$vga_arbiter(r4, 0x0, 0xffffffffffffffa8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c0000000000", @ANYRES32], 0x50) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="10000000000000000b000000000000100100000c0000002900000000000000a72a552f0864"], 0x28}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 962.361607ms ago: executing program 1 (id=1423): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1c, 0x0, @opaque="ccc6a40934cbddcf9ba6790f55b24154e9a77cf7"}}}}}, 0x0) 399.705638ms ago: executing program 4 (id=1424): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1425): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_4={0x3, 0x2, 0xa, "0da83a81"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0400"}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x1d, 0x4b, 0xc4, 0x40, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3f, 0x0, 0x0, 0xc, 0xdf, 0xa9}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) kernel console output (not intermixed with test programs): gadget: fail, usb_gadget_register_driver returned -16 [ 359.993361][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 360.168345][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 360.179363][ T5929] usb 4-1: USB disconnect, device number 6 [ 360.686335][ T8489] loop2: detected capacity change from 0 to 256 [ 360.720375][ T8489] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 360.785948][ T8489] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 360.831165][ T30] audit: type=1326 audit(1763389583.720:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 360.900298][ T30] audit: type=1326 audit(1763389583.720:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 360.902138][ T8489] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 361.006905][ T30] audit: type=1326 audit(1763389583.730:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 361.175891][ T8489] exFAT-fs (loop2): failed to load alloc-bitmap [ 361.343661][ T8489] exFAT-fs (loop2): failed to recognize exfat type [ 361.400688][ T30] audit: type=1326 audit(1763389583.730:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 361.424253][ T30] audit: type=1326 audit(1763389583.730:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 363.867775][ T8513] x_tables: ip_tables: osf match: only valid for protocol 6 [ 369.224595][ T8540] loop6: detected capacity change from 0 to 256 [ 369.993221][ T8540] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 370.399873][ T5895] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 371.370262][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 371.431996][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.468153][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.478621][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 371.497713][ T5895] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 371.507688][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.522129][ T5895] usb 2-1: config 0 descriptor?? [ 371.573028][ T8560] loop0: detected capacity change from 0 to 256 [ 371.582367][ T8560] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 371.593288][ T8560] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 371.620017][ T8560] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 371.661533][ T8560] exFAT-fs (loop0): failed to load alloc-bitmap [ 371.678205][ T8560] exFAT-fs (loop0): failed to recognize exfat type [ 372.035834][ T8546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.988338][ T8546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.091865][ T5895] usbhid 2-1:0.0: can't add hid device: -71 [ 373.110321][ T5895] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 373.223626][ T5895] usb 2-1: USB disconnect, device number 10 [ 374.726718][ T8583] binfmt_misc: register: failed to install interpreter file ./file0 [ 377.911170][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.917497][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.668298][ T8610] x_tables: ip_tables: osf match: only valid for protocol 6 [ 378.947539][ T8612] loop3: detected capacity change from 0 to 256 [ 379.076031][ T8612] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 380.440211][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 381.443687][ T8624] loop3: detected capacity change from 0 to 256 [ 381.523932][ T8626] netlink: 'syz.2.769': attribute type 30 has an invalid length. [ 381.540253][ T8624] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 381.588658][ T8624] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 381.679556][ T8624] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 381.731658][ T8624] exFAT-fs (loop3): failed to load alloc-bitmap [ 381.737903][ T8624] exFAT-fs (loop3): failed to recognize exfat type [ 383.200586][ T5814] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 383.302626][ T8638] netlink: 'syz.0.773': attribute type 12 has an invalid length. [ 383.385600][ T8638] loop0: detected capacity change from 0 to 512 [ 384.211395][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 384.287324][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.277148][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.142863][ T8638] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 386.143183][ T8638] EXT4-fs: failed to create workqueue [ 386.160230][ T8638] EXT4-fs (loop0): mount failed [ 386.308343][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 386.389205][ T5814] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 386.410480][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.469379][ T5814] usb 4-1: config 0 descriptor?? [ 386.488358][ T5814] usb 4-1: can't set config #0, error -71 [ 389.155529][ T5814] usb 4-1: USB disconnect, device number 7 [ 392.403028][ T8678] 9pnet_virtio: no channels available for device syz [ 393.317824][ T8684] loop2: detected capacity change from 0 to 1024 [ 393.898895][ T8684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.213275][ T8687] loop6: detected capacity change from 0 to 256 [ 394.283873][ T8687] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 394.330413][ T8687] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 394.420910][ T8687] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 394.576170][ T8687] exFAT-fs (loop6): failed to load alloc-bitmap [ 394.690227][ T8687] exFAT-fs (loop6): failed to recognize exfat type [ 394.991562][ T8696] binder: BINDER_SET_CONTEXT_MGR already set [ 394.997582][ T8696] binder: 8695:8696 ioctl 4018620d 200000000100 returned -16 [ 395.912429][ T8702] binder: BINDER_SET_CONTEXT_MGR already set [ 395.918523][ T8702] binder: 8695:8702 ioctl 4018620d 2000000002c0 returned -16 [ 396.440244][ T5895] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 396.791471][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 397.754344][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.779505][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.799779][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 398.580598][ T5895] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 398.596738][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.652728][ T5895] usb 2-1: config 0 descriptor?? [ 398.770323][ T5895] usb 2-1: can't set config #0, error -71 [ 398.827823][ T5895] usb 2-1: USB disconnect, device number 11 [ 400.606716][ T8729] x_tables: ip_tables: osf match: only valid for protocol 6 [ 403.091117][ T5848] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 403.306769][ T8761] netlink: 120 bytes leftover after parsing attributes in process `syz.1.809'. [ 403.656588][ T8763] syz.4.810 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 404.877791][ T8763] netlink: 44 bytes leftover after parsing attributes in process `syz.4.810'. [ 404.928309][ T30] audit: type=1326 audit(1763389627.810:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 405.174584][ T30] audit: type=1326 audit(1763389627.810:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 405.329090][ T8761] syz.1.809 (8761): drop_caches: 2 [ 405.350257][ T30] audit: type=1326 audit(1763389627.820:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 405.490396][ T30] audit: type=1326 audit(1763389627.820:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 405.602877][ T30] audit: type=1326 audit(1763389627.820:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 405.710411][ T30] audit: type=1326 audit(1763389627.820:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 405.933343][ T30] audit: type=1326 audit(1763389627.820:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 405.956464][ T30] audit: type=1326 audit(1763389627.820:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 405.986317][ T30] audit: type=1326 audit(1763389627.820:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 407.710440][ T30] audit: type=1326 audit(1763389627.870:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 408.094388][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.815'. [ 408.980236][ T5922] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 409.150192][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 409.182842][ T5922] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 409.208142][ T5922] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 409.240200][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 409.285577][ T5922] usb 5-1: config 1 has no interface number 0 [ 409.313098][ T5922] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.352570][ T5922] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 409.451734][ T5922] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 409.506551][ T8797] loop0: detected capacity change from 0 to 128 [ 409.510158][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.633889][ T5922] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 409.823586][ T5922] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 410.299520][ T10] usb 5-1: USB disconnect, device number 6 [ 410.350355][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 410.350378][ T30] audit: type=1326 audit(1763389633.240:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.6.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bce18f6c9 code=0x7ffc0000 [ 410.391998][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 410.470078][ T30] audit: type=1326 audit(1763389633.240:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.6.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f4bce18f6c9 code=0x7ffc0000 [ 410.556420][ T30] audit: type=1326 audit(1763389633.240:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.6.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bce18f6c9 code=0x7ffc0000 [ 410.664520][ T30] audit: type=1326 audit(1763389633.240:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.6.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bce18f6c9 code=0x7ffc0000 [ 411.021212][ T5922] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 412.149169][ T5922] usb 7-1: Using ep0 maxpacket: 32 [ 412.157903][ T5922] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.176152][ T5922] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 412.192576][ T5922] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 412.206743][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.490668][ T5922] usb 7-1: config 0 descriptor?? [ 412.548746][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.831'. [ 414.081833][ T5895] usb 7-1: USB disconnect, device number 6 [ 414.367541][ T5922] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 414.454293][ T8844] loop6: detected capacity change from 0 to 512 [ 414.537392][ T8844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.550951][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 414.558209][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.569170][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.580256][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 414.593397][ T5922] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 414.602655][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.612789][ T8844] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.630073][ T5922] usb 5-1: config 0 descriptor?? [ 416.921704][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.211590][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.243771][ T8860] loop3: detected capacity change from 0 to 256 [ 417.259761][ T7569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.295945][ T5922] usbhid 5-1:0.0: can't add hid device: -71 [ 417.329856][ T5922] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 417.337977][ T8860] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 417.398109][ T5922] usb 5-1: USB disconnect, device number 7 [ 417.410948][ T8864] loop4: detected capacity change from 0 to 256 [ 417.447742][ T8864] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 417.550219][ T8864] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 417.595390][ T8864] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 417.649129][ T8864] exFAT-fs (loop4): failed to load alloc-bitmap [ 417.703837][ T8864] exFAT-fs (loop4): failed to recognize exfat type [ 418.870609][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.831163][ T8881] netlink: 71 bytes leftover after parsing attributes in process `syz.6.850'. [ 420.172496][ T8887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.851'. [ 420.330688][ T5833] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 421.160255][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 421.179561][ T5833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.286426][ T5833] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 421.303026][ T5833] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 421.332565][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.423622][ T5833] usb 2-1: config 0 descriptor?? [ 421.600233][ T5895] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 421.651949][ T5833] usb 2-1: USB disconnect, device number 12 [ 421.685428][ T5967] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 421.770262][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 421.793767][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.851934][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.882827][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 421.910231][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 421.917511][ T5895] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 421.932961][ T8909] loop2: detected capacity change from 0 to 256 [ 421.958423][ T5967] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 421.960906][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.007192][ T8909] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 422.020664][ T5967] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 422.048114][ T5895] usb 4-1: config 0 descriptor?? [ 422.067784][ T5967] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 422.087761][ T8909] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 422.112839][ T5967] usb 5-1: config 1 has no interface number 0 [ 422.129360][ T5967] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.157948][ T8909] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 422.179921][ T5967] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 422.271859][ T8909] exFAT-fs (loop2): failed to load alloc-bitmap [ 422.283853][ T8909] exFAT-fs (loop2): failed to recognize exfat type [ 422.290204][ T5967] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 422.340240][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.382745][ T5967] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 422.615655][ T5967] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 423.372778][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.410894][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.445815][ T5895] usbhid 4-1:0.0: can't add hid device: -71 [ 423.467203][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 423.520254][ T5895] usb 4-1: USB disconnect, device number 8 [ 423.673477][ T5833] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 424.125750][ T975] usb 5-1: USB disconnect, device number 8 [ 424.125926][ T8921] loop1: detected capacity change from 0 to 256 [ 424.149106][ T975] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 424.201367][ T8921] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 424.231915][ T8921] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 424.328462][ T8921] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 424.375188][ T8921] exFAT-fs (loop1): failed to load alloc-bitmap [ 424.412154][ T8921] exFAT-fs (loop1): failed to recognize exfat type [ 424.949734][ T8911] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 424.960881][ T8911] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 424.973153][ T8911] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 425.857846][ T30] audit: type=1326 audit(1763389648.700:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x50000 [ 425.910246][ T30] audit: type=1326 audit(1763389648.700:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x50000 [ 425.954621][ T30] audit: type=1326 audit(1763389648.700:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x50000 [ 425.995773][ T30] audit: type=1326 audit(1763389648.700:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x50000 [ 426.068495][ T30] audit: type=1326 audit(1763389648.700:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x50000 [ 426.119351][ T30] audit: type=1326 audit(1763389648.700:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x50000 [ 426.401608][ T30] audit: type=1326 audit(1763389648.700:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x50000 [ 426.595293][ T30] audit: type=1326 audit(1763389648.700:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x50000 [ 426.640435][ T30] audit: type=1326 audit(1763389648.700:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x50000 [ 426.664117][ T8952] overlayfs: missing 'lowerdir' [ 426.824872][ T30] audit: type=1326 audit(1763389648.700:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x50000 [ 426.998221][ T8962] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 427.001154][ T8958] netlink: 28 bytes leftover after parsing attributes in process `syz.6.878'. [ 427.236844][ T5848] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 427.460206][ T5833] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 427.644974][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 427.701314][ T5833] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 427.710000][ T5833] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 427.780158][ T5833] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 427.789151][ T5833] usb 1-1: config 1 has no interface number 0 [ 427.860258][ T5833] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.900982][ T5833] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 427.924350][ T5833] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 427.954684][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.165041][ T5833] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 428.358290][ T5833] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 428.420606][ T5967] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 428.603748][ T5967] usb 5-1: Using ep0 maxpacket: 16 [ 428.632322][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.690251][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.766712][ T5833] usb 1-1: USB disconnect, device number 5 [ 428.795454][ T5967] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 429.420239][ T5922] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 429.431453][ T5833] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 429.590488][ T5967] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 429.610358][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.631606][ T5967] usb 5-1: config 0 descriptor?? [ 430.205588][ T9003] loop0: detected capacity change from 0 to 256 [ 430.214570][ T9003] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 430.226173][ T9003] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 430.281480][ T9003] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 430.395002][ T9003] exFAT-fs (loop0): failed to load alloc-bitmap [ 430.426908][ T9003] exFAT-fs (loop0): failed to recognize exfat type [ 430.692436][ T5967] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 431.330230][ T5967] microsoft 0003:045E:07DA.0002: no inputs found [ 431.381583][ T5967] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 431.432734][ T5848] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 431.475323][ T5967] usb 5-1: USB disconnect, device number 9 [ 431.689856][ T9013] fido_id[9013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 432.516056][ T9029] loop2: detected capacity change from 0 to 128 [ 432.760195][ T5895] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 433.890245][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 434.794158][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.806083][ T5895] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 434.947606][ T5895] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 435.020552][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.104726][ T5895] usb 5-1: config 0 descriptor?? [ 435.146240][ T5895] usb 5-1: selecting invalid altsetting 1 [ 435.423688][ T5895] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 436.198356][ T5895] usb 5-1: USB disconnect, device number 10 [ 436.345319][ T9044] wireguard0: entered promiscuous mode [ 436.371326][ T9044] wireguard0: entered allmulticast mode [ 436.385440][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 436.385469][ T30] audit: type=1326 audit(1763389659.282:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785378f6c9 code=0x7ffc0000 [ 436.524894][ T30] audit: type=1326 audit(1763389659.282:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785378f6c9 code=0x7ffc0000 [ 436.620796][ T30] audit: type=1326 audit(1763389659.292:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9051 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 436.661083][ T30] audit: type=1326 audit(1763389659.292:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9051 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 436.700766][ T30] audit: type=1326 audit(1763389659.292:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9051 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 436.723875][ T30] audit: type=1326 audit(1763389659.292:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9051 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 436.900660][ T30] audit: type=1326 audit(1763389659.332:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f785378f6c9 code=0x7ffc0000 [ 437.070281][ T30] audit: type=1326 audit(1763389659.332:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785378f6c9 code=0x7ffc0000 [ 437.216063][ T30] audit: type=1326 audit(1763389659.332:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f785378f6c9 code=0x7ffc0000 [ 437.435426][ T30] audit: type=1326 audit(1763389659.332:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785378f6c9 code=0x7ffc0000 [ 437.635478][ T9072] loop3: detected capacity change from 0 to 512 [ 438.493535][ T9072] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 438.506797][ T9072] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 440.036043][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.047799][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.081248][ T9059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 440.187428][ T9072] EXT4-fs: error -4 creating inode table initialization thread [ 440.195474][ T9072] EXT4-fs (loop3): mount failed [ 441.820277][ T5895] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 442.000210][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 442.030761][ T5895] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 442.059685][ T5895] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 442.175278][ T5895] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 443.433547][ T5895] usb 1-1: config 1 has no interface number 0 [ 443.562713][ T5895] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 443.646399][ T5895] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 443.699763][ T5895] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 443.752560][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.780892][ T9114] netlink: 44 bytes leftover after parsing attributes in process `syz.3.931'. [ 443.834618][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 443.834640][ T30] audit: type=1326 audit(1763389666.732:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785378f6c9 code=0x7ffc0000 [ 443.876103][ T5895] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 444.032829][ T5895] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 444.041123][ T30] audit: type=1326 audit(1763389666.732:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f785378f6c9 code=0x7ffc0000 [ 444.200299][ T30] audit: type=1326 audit(1763389666.732:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785378f6c9 code=0x7ffc0000 [ 444.398677][ T30] audit: type=1326 audit(1763389666.772:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f785378f6c9 code=0x7ffc0000 [ 444.471545][ T5895] usb 1-1: USB disconnect, device number 6 [ 444.486887][ T5895] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 444.880383][ T30] audit: type=1326 audit(1763389666.772:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785378f6c9 code=0x7ffc0000 [ 444.903133][ T30] audit: type=1326 audit(1763389666.782:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.3.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785378f6c9 code=0x7ffc0000 [ 445.196281][ T9126] loop3: detected capacity change from 0 to 256 [ 445.319124][ T9126] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 446.686789][ T9142] veth1_macvtap: left promiscuous mode [ 446.710262][ T9142] macsec0: entered promiscuous mode [ 447.291896][ T9153] netlink: 44 bytes leftover after parsing attributes in process `syz.1.945'. [ 447.331288][ T30] audit: type=1326 audit(1763389670.222:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 447.539555][ T30] audit: type=1326 audit(1763389670.222:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 447.562286][ T30] audit: type=1326 audit(1763389670.222:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 447.585031][ T30] audit: type=1326 audit(1763389670.262:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 447.671011][ T5833] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 448.340217][ T5833] usb 1-1: Using ep0 maxpacket: 8 [ 448.603020][ T9166] loop6: detected capacity change from 0 to 131072 [ 448.606434][ T5833] usb 1-1: unable to get BOS descriptor or descriptor too short [ 448.672671][ T9166] F2FS-fs (loop6): invalid crc value [ 448.682555][ T5833] usb 1-1: config 50 has an invalid interface number: 90 but max is 0 [ 448.776006][ T9166] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 448.813844][ T9166] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 448.821212][ T5833] usb 1-1: config 50 has an invalid interface number: 1 but max is 0 [ 448.875097][ T5833] usb 1-1: config 50 has 2 interfaces, different from the descriptor's value: 1 [ 448.895068][ T5833] usb 1-1: config 50 has no interface number 0 [ 448.915126][ T5833] usb 1-1: config 50 interface 90 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.070237][ T5833] usb 1-1: config 50 interface 1 altsetting 163 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 449.099435][ T5833] usb 1-1: config 50 interface 90 has no altsetting 0 [ 449.114374][ T5833] usb 1-1: config 50 interface 1 has no altsetting 0 [ 449.135828][ T5833] usb 1-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice=93.f9 [ 449.157638][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.200269][ T5833] usb 1-1: Product: syz [ 449.211216][ T5833] usb 1-1: Manufacturer: syz [ 449.226219][ T5833] usb 1-1: SerialNumber: syz [ 450.027031][ T5833] usb 1-1: selecting invalid altsetting 0 [ 450.154298][ T5833] usb 1-1: USB disconnect, device number 7 [ 450.384196][ T7922] udevd[7922]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:50.90/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.760912][ T9190] loop0: detected capacity change from 0 to 256 [ 451.825093][ T9190] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 452.054342][ T9197] loop4: detected capacity change from 0 to 128 [ 452.256588][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.958'. [ 452.277584][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.958'. [ 453.384278][ T9207] loop0: detected capacity change from 0 to 512 [ 453.425151][ T9207] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 453.470562][ T9207] EXT4-fs (loop0): orphan cleanup on readonly fs [ 453.496424][ T9207] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.963: iget: bad i_size value: 38620345925642 [ 453.514008][ T9207] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.963: couldn't read orphan inode 15 (err -117) [ 453.538209][ T9207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 453.779320][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.321091][ T9232] macvlan0: entered promiscuous mode [ 455.403573][ T9232] netlink: 'syz.6.951': attribute type 1 has an invalid length. [ 455.443504][ T9232] netlink: 'syz.6.951': attribute type 2 has an invalid length. [ 455.610354][ T5895] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 455.950340][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 456.723556][ T5895] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 456.735642][ T5895] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 456.745166][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 456.754405][ T5895] usb 2-1: config 1 has no interface number 0 [ 456.761973][ T5895] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.773279][ T5895] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 456.786486][ T5895] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 456.796297][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.816834][ T5895] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 457.023670][ T5895] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 457.472755][ T5895] usb 2-1: USB disconnect, device number 13 [ 457.490884][ T5895] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 459.006908][ T9294] x_tables: ip_tables: osf match: only valid for protocol 6 [ 459.187285][ T9296] netlink: 'syz.6.983': attribute type 1 has an invalid length. [ 460.708768][ T9312] loop3: detected capacity change from 0 to 512 [ 460.813734][ T9312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.895364][ T9312] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.146028][ T5895] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 462.310391][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 463.017486][ T5895] usb 7-1: config 0 has an invalid interface number: 101 but max is 1 [ 463.028505][ T5895] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.049226][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 463.059071][ T5895] usb 7-1: config 0 has no interface number 0 [ 463.065943][ T5895] usb 7-1: config 0 interface 101 has no altsetting 0 [ 463.073083][ T5895] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 463.082381][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.138022][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.242155][ T5895] usb 7-1: config 0 descriptor?? [ 463.455963][ T5833] usb 7-1: USB disconnect, device number 7 [ 463.572013][ T5967] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 463.937880][ T5967] usb 4-1: Using ep0 maxpacket: 32 [ 463.950963][ T5967] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 463.959323][ T5967] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 464.000235][ T5967] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 464.000541][ T9332] macvlan0: entered promiscuous mode [ 464.047743][ T5967] usb 4-1: config 1 has no interface number 0 [ 464.313094][ T5967] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 464.732047][ T9332] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 464.740408][ T5967] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 464.754731][ T5967] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 464.764062][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.774543][ T9332] netlink: 'syz.4.995': attribute type 2 has an invalid length. [ 464.791667][ T9334] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 464.803954][ T9334] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 464.813665][ T9334] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 464.956409][ T5967] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 465.206611][ T5967] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 466.226451][ T5833] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 466.395579][ T5833] usb 4-1: USB disconnect, device number 9 [ 466.429831][ T5833] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 466.693358][ T9363] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 467.491307][ T9384] loop2: detected capacity change from 0 to 1024 [ 467.602597][ T9384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 467.721798][ T9384] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.847524][ T9384] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1017: inode has both inline data and extents flags [ 467.922947][ T9398] loop0: detected capacity change from 0 to 1024 [ 467.985730][ T9384] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1017'. [ 468.260566][ T9398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.430408][ T30] audit: type=1326 audit(1763389691.322:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 468.500968][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.521300][ T30] audit: type=1326 audit(1763389691.322:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 468.729344][ T30] audit: type=1326 audit(1763389691.352:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 468.814793][ T30] audit: type=1326 audit(1763389691.352:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 468.916143][ T30] audit: type=1326 audit(1763389691.352:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 468.972661][ T30] audit: type=1326 audit(1763389691.352:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 468.995194][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.017490][ T9416] loop6: detected capacity change from 0 to 1024 [ 469.287376][ T9416] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 469.299458][ T30] audit: type=1326 audit(1763389691.352:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 469.322907][ T5929] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 469.339933][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 469.408151][ T30] audit: type=1326 audit(1763389691.352:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 469.510177][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 469.558655][ T5929] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 469.610799][ T30] audit: type=1326 audit(1763389691.352:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 469.640178][ T5929] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 469.680147][ T5929] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 469.709636][ T5929] usb 5-1: config 1 has no interface number 0 [ 469.720695][ T30] audit: type=1326 audit(1763389691.352:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 469.750178][ T5929] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.804571][ T5929] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 469.870187][ T5929] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 469.895296][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.970069][ T5929] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 470.173459][ T5929] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 470.565954][ T5833] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 470.581844][ T5895] usb 5-1: USB disconnect, device number 11 [ 470.591825][ T5895] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 471.764431][ T5814] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 471.821172][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 471.971857][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.010203][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.065052][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 472.144734][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 472.161987][ T5833] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 472.185227][ T5814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.231540][ T5814] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.250397][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.266857][ T9450] loop4: detected capacity change from 0 to 512 [ 472.295554][ T5833] usb 4-1: config 0 descriptor?? [ 472.310534][ T5814] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 472.348037][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.413090][ T5814] usb 1-1: Product: syz [ 472.417311][ T5814] usb 1-1: Manufacturer: syz [ 472.440759][ T9450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.491480][ T5814] usb 1-1: SerialNumber: syz [ 472.528045][ T5814] usb 1-1: config 0 descriptor?? [ 472.533651][ T9450] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 472.624075][ T9450] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1041: corrupted inode contents [ 472.690693][ T9455] loop1: detected capacity change from 0 to 1024 [ 472.736556][ T9450] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1041: mark_inode_dirty error [ 472.753147][ T9450] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1041: corrupted inode contents [ 472.771570][ T9455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.784672][ T9450] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1041: mark_inode_dirty error [ 472.816068][ T9434] loop0: detected capacity change from 0 to 16 [ 472.827893][ T9455] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.871038][ T9434] erofs: Unknown parameter '/dev/input/event#' [ 472.957965][ T9434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.395604][ T9434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.652028][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.663628][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.712924][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.752560][ T5833] usbhid 4-1:0.0: can't add hid device: -71 [ 473.763518][ T5833] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 473.817845][ T9463] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 473.819983][ T5833] usb 4-1: USB disconnect, device number 10 [ 473.915461][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.031156][ T5895] usb 1-1: USB disconnect, device number 8 [ 474.057298][ T9467] loop6: detected capacity change from 0 to 512 [ 474.162872][ T9467] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 474.199333][ T9467] EXT4-fs (loop6): orphan cleanup on readonly fs [ 474.234039][ T9467] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 474.269664][ T9467] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 474.324071][ T9467] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #16: comm syz.6.1048: inode has both inline data and extents flags [ 474.392029][ T9467] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1048: couldn't read orphan inode 16 (err -117) [ 474.443550][ T9467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 474.720552][ T9485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1051'. [ 475.453389][ T9488] overlayfs: failed to resolve './file0': -2 [ 476.161501][ T7569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.238367][ T9496] loop4: detected capacity change from 0 to 512 [ 476.539018][ T9496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 477.102451][ T9496] EXT4-fs error (device loop4): __ext4_fill_super:5512: inode #2: comm syz.4.1056: inode has both inline data and extents flags [ 477.352856][ T9496] EXT4-fs (loop4): get root inode failed [ 477.358542][ T9496] EXT4-fs (loop4): mount failed [ 480.110253][ T5895] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 480.326189][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 480.356333][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.413139][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.442079][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 480.442101][ T30] audit: type=1326 audit(1763389703.342:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 480.494539][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 480.533602][ T9546] process 'syz.1.1071' launched '/dev/fd/6' with NULL argv: empty string added [ 480.542785][ T30] audit: type=1326 audit(1763389703.372:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 480.542845][ T30] audit: type=1326 audit(1763389703.372:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 480.542899][ T30] audit: type=1326 audit(1763389703.372:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 480.542952][ T30] audit: type=1326 audit(1763389703.372:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 480.543003][ T30] audit: type=1326 audit(1763389703.372:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 480.543054][ T30] audit: type=1326 audit(1763389703.372:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 480.543106][ T30] audit: type=1326 audit(1763389703.372:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 480.543158][ T30] audit: type=1326 audit(1763389703.372:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 480.543211][ T30] audit: type=1326 audit(1763389703.372:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 480.603956][ T5895] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 480.766706][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.795286][ T5895] usb 1-1: config 0 descriptor?? [ 481.028303][ T9551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.228562][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.237820][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.248343][ T5895] usbhid 1-1:0.0: can't add hid device: -71 [ 482.257003][ T5895] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 482.276359][ T5895] usb 1-1: USB disconnect, device number 9 [ 482.320709][ T5929] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 482.480280][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 482.499638][ T5929] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 482.527886][ T5929] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 482.554653][ T5929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 482.575377][ T5929] usb 2-1: config 1 has no interface number 0 [ 482.589420][ T5929] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.622723][ T5929] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 482.671162][ T5929] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 482.691638][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.729246][ T5929] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 482.902999][ T9566] binder: BINDER_SET_CONTEXT_MGR already set [ 482.909069][ T9566] binder: 9559:9566 ioctl 4018620d 2000000002c0 returned -16 [ 483.668434][ T5929] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 483.721072][ T9570] netlink: 'syz.0.1078': attribute type 4 has an invalid length. [ 483.735382][ T9570] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1078'. [ 483.895491][ T5814] usb 2-1: USB disconnect, device number 14 [ 483.922142][ T5814] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 483.934157][ T9577] loop6: detected capacity change from 0 to 512 [ 483.980581][ T9577] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 484.018233][ T9577] EXT4-fs (loop6): 1 truncate cleaned up [ 484.086376][ T9577] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.746388][ T9587] EXT4-fs error (device loop6): __ext4_iget:5443: inode #15: block 1803188595: comm syz.6.1081: invalid block [ 484.830719][ T9588] EXT4-fs error (device loop6): __ext4_iget:5443: inode #15: block 1803188595: comm syz.6.1081: invalid block [ 487.144409][ T9605] loop1: detected capacity change from 0 to 1024 [ 487.400292][ T9605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.441007][ T9605] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 487.459265][ T7569] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.473865][ T9605] EXT4-fs (loop1): group descriptors corrupted! [ 488.114807][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 488.114864][ T30] audit: type=1326 audit(1763389711.012:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 488.720274][ T30] audit: type=1326 audit(1763389711.092:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 488.809729][ T30] audit: type=1326 audit(1763389711.132:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 488.958534][ T30] audit: type=1326 audit(1763389711.132:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 489.040390][ T30] audit: type=1326 audit(1763389711.182:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9623 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 490.351471][ T9644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1103'. [ 490.774036][ T9659] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1106'. [ 491.680707][ T9674] loop0: detected capacity change from 0 to 128 [ 491.900008][ T9674] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.916966][ T9674] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 493.672863][ T5829] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 493.966274][ T9659] syz.2.1106 (9659): drop_caches: 2 [ 494.232981][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1119'. [ 494.499401][ T9692] netlink: 'syz.1.1118': attribute type 298 has an invalid length. [ 500.622533][ T30] audit: type=1326 audit(1763389723.512:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.1.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 500.856391][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.856693][ T9719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1128'. [ 500.870312][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.690355][ T30] audit: type=1326 audit(1763389723.512:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.1.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 501.736015][ T30] audit: type=1326 audit(1763389723.512:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.1.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 501.758574][ T9719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1128'. [ 501.817318][ T9719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1128'. [ 501.840160][ T30] audit: type=1326 audit(1763389723.512:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.1.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 501.868609][ T9719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1128'. [ 501.957815][ T9719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1128'. [ 501.972907][ T30] audit: type=1326 audit(1763389723.762:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.1.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 501.997350][ T9719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1128'. [ 502.030363][ T9719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1128'. [ 502.039602][ T9719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1128'. [ 502.068620][ T30] audit: type=1326 audit(1763389723.762:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.1.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 502.151279][ T9719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1128'. [ 502.187765][ T30] audit: type=1326 audit(1763389723.762:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.1.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 502.210989][ T9719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1128'. [ 502.310295][ T30] audit: type=1326 audit(1763389723.762:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.1.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 502.430341][ T30] audit: type=1326 audit(1763389724.682:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.1.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 502.513712][ T30] audit: type=1326 audit(1763389724.682:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.1.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 506.999738][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 506.999758][ T30] audit: type=1326 audit(1763389729.892:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7778b8f6c9 code=0x7ffc0000 [ 507.515606][ T30] audit: type=1326 audit(1763389729.892:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f7778b8f6c9 code=0x7ffc0000 [ 507.618976][ T9794] xt_hashlimit: size too large, truncated to 1048576 [ 507.810052][ T30] audit: type=1326 audit(1763389729.902:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7778b8f6c9 code=0x7ffc0000 [ 507.980145][ T30] audit: type=1326 audit(1763389729.902:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7778b8f6c9 code=0x7ffc0000 [ 508.300143][ T30] audit: type=1326 audit(1763389729.902:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7778b8f6c9 code=0x7ffc0000 [ 508.552653][ T30] audit: type=1326 audit(1763389729.902:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7778b8f6c9 code=0x7ffc0000 [ 509.466353][ T30] audit: type=1326 audit(1763389729.902:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7778b8f6c9 code=0x7ffc0000 [ 509.488731][ T30] audit: type=1326 audit(1763389729.902:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f7778b8f6c9 code=0x7ffc0000 [ 509.535584][ T30] audit: type=1326 audit(1763389729.902:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7778b8f6c9 code=0x7ffc0000 [ 509.571910][ T9807] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 509.619757][ T30] audit: type=1326 audit(1763389729.902:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.2.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7778b8f6c9 code=0x7ffc0000 [ 511.325781][ T9821] x_tables: ip_tables: osf match: only valid for protocol 6 [ 512.646740][ T9833] loop6: detected capacity change from 0 to 512 [ 512.935922][ T9833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.014332][ T9833] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.170361][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 514.170383][ T30] audit: type=1326 audit(1763389737.072:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 514.277454][ T30] audit: type=1326 audit(1763389737.092:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 514.303328][ T30] audit: type=1326 audit(1763389737.092:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 514.494134][ T30] audit: type=1326 audit(1763389737.102:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 514.590179][ T30] audit: type=1326 audit(1763389737.102:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 514.691698][ T30] audit: type=1326 audit(1763389737.332:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 514.760164][ T30] audit: type=1326 audit(1763389737.332:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 514.883635][ T30] audit: type=1326 audit(1763389737.342:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 514.910185][ T30] audit: type=1326 audit(1763389737.342:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 514.932886][ T30] audit: type=1326 audit(1763389737.342:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc1b8f6c9 code=0x7ffc0000 [ 517.784764][ T9884] loop0: detected capacity change from 0 to 1024 [ 517.798551][ T9884] EXT4-fs: Ignoring removed orlov option [ 519.205768][ T9884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.704788][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.934762][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.944793][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.006354][ T9901] binder: BINDER_SET_CONTEXT_MGR already set [ 521.130363][ T9901] binder: 9900:9901 ioctl 4018620d 200000000100 returned -16 [ 521.198630][ T9901] binder: 9900:9901 ioctl c0306201 0 returned -14 [ 521.451775][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 521.451797][ T30] audit: type=1326 audit(1763389744.162:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 521.558948][ T9907] binder: BINDER_SET_CONTEXT_MGR already set [ 521.565103][ T9907] binder: 9900:9907 ioctl 4018620d 2000000002c0 returned -16 [ 522.127395][ T30] audit: type=1326 audit(1763389744.162:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 522.150818][ T30] audit: type=1326 audit(1763389744.162:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 522.210201][ T30] audit: type=1326 audit(1763389744.352:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 522.273341][ T30] audit: type=1326 audit(1763389744.352:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 522.357884][ T30] audit: type=1326 audit(1763389744.352:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 522.470164][ T30] audit: type=1326 audit(1763389744.352:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 522.507507][ T9908] loop0: detected capacity change from 0 to 512 [ 522.588636][ T30] audit: type=1326 audit(1763389744.392:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 522.696238][ T9908] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent [ 522.732683][ T30] audit: type=1326 audit(1763389744.392:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 522.842685][ T9915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.858389][ T30] audit: type=1326 audit(1763389745.052:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 523.801069][ T9921] netlink: 'syz.4.1188': attribute type 1 has an invalid length. [ 523.809169][ T9921] netlink: 'syz.4.1188': attribute type 2 has an invalid length. [ 526.320249][ T9939] x_tables: ip_tables: osf match: only valid for protocol 6 [ 527.016217][ T9947] binder: BINDER_SET_CONTEXT_MGR already set [ 527.032892][ T9947] binder: 9945:9947 ioctl 4018620d 200000000100 returned -16 [ 527.080674][ T9947] binder: 9945:9947 ioctl c0306201 0 returned -14 [ 527.430726][ T9950] binder: BINDER_SET_CONTEXT_MGR already set [ 527.436811][ T9950] binder: 9945:9950 ioctl 4018620d 2000000002c0 returned -16 [ 528.173131][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 528.173147][ T30] audit: type=1326 audit(1763389751.072:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 528.300245][ T30] audit: type=1326 audit(1763389751.072:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 528.426954][ T30] audit: type=1326 audit(1763389751.072:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 528.550301][ T30] audit: type=1326 audit(1763389751.102:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 528.674882][ T30] audit: type=1326 audit(1763389751.102:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 528.856521][ T9957] loop1: detected capacity change from 0 to 256 [ 528.863031][ T30] audit: type=1326 audit(1763389751.102:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 528.990374][ T9957] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 529.034390][ T30] audit: type=1326 audit(1763389751.102:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 529.076920][ T9957] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 529.172984][ T9957] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 529.252554][ T30] audit: type=1326 audit(1763389751.102:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 529.290144][ T9957] exFAT-fs (loop1): failed to load alloc-bitmap [ 529.296413][ T9957] exFAT-fs (loop1): failed to recognize exfat type [ 529.404650][ T30] audit: type=1326 audit(1763389751.102:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 529.560731][ T30] audit: type=1326 audit(1763389751.122:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.1.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 530.138941][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 530.160350][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 530.168604][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 530.187608][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 530.361052][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 530.494029][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 530.514236][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 530.519931][ T9977] __nla_validate_parse: 24 callbacks suppressed [ 530.519949][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1211'. [ 530.541348][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 530.550305][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 530.560757][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 531.681302][ T9996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 532.460650][ T5839] Bluetooth: hci2: command tx timeout [ 532.670266][ T5839] Bluetooth: hci7: command tx timeout [ 533.284047][ T9848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.375873][ T9971] chnl_net:caif_netlink_parms(): no params data found [ 533.917278][T10020] x_tables: ip_tables: osf match: only valid for protocol 6 [ 533.952331][ T9978] chnl_net:caif_netlink_parms(): no params data found [ 534.382715][T10027] loop3: detected capacity change from 0 to 256 [ 534.470204][T10027] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 534.491381][T10027] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 534.540310][ T5839] Bluetooth: hci2: command tx timeout [ 534.691731][T10027] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 534.704382][ T5839] Bluetooth: hci7: command tx timeout [ 534.830781][T10027] exFAT-fs (loop3): failed to load alloc-bitmap [ 534.870537][T10027] exFAT-fs (loop3): failed to recognize exfat type [ 535.152884][ T5994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.226191][ T9971] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.271948][ T9971] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.279193][ T9971] bridge_slave_0: entered allmulticast mode [ 535.320990][ T9971] bridge_slave_0: entered promiscuous mode [ 535.495491][ T5994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.643564][ T9971] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.684119][ T9971] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.702908][T10022] loop0: detected capacity change from 0 to 40427 [ 535.709671][ T9971] bridge_slave_1: entered allmulticast mode [ 535.716895][T10022] f2fs: Unknown parameter 'whint_mode' [ 535.757111][ T9971] bridge_slave_1: entered promiscuous mode [ 536.010835][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 536.010861][ T30] audit: type=1326 audit(1763389758.902:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 536.025792][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 536.039345][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.089034][ T5994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.285280][ T9971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.590807][ T30] audit: type=1326 audit(1763389758.902:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 536.596634][ T9978] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.631688][ T5839] Bluetooth: hci2: command tx timeout [ 536.640130][ T30] audit: type=1326 audit(1763389758.902:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 536.710417][ T30] audit: type=1326 audit(1763389758.902:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 536.757573][ T9978] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.778629][ T9978] bridge_slave_0: entered allmulticast mode [ 536.803688][ T30] audit: type=1326 audit(1763389758.902:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 536.829638][ T9978] bridge_slave_0: entered promiscuous mode [ 536.860175][ T5839] Bluetooth: hci7: command tx timeout [ 536.873955][ T30] audit: type=1326 audit(1763389758.902:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 536.977526][ T30] audit: type=1326 audit(1763389758.902:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 537.976410][ T30] audit: type=1326 audit(1763389758.902:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 538.148139][ T5994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.191034][ T5839] Bluetooth: hci2: command tx timeout [ 539.196478][ T5839] Bluetooth: hci7: command tx timeout [ 539.212686][ T9971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.223435][ T30] audit: type=1326 audit(1763389758.902:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 539.262189][ T30] audit: type=1326 audit(1763389758.902:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f7edbf8f6c9 code=0x7ffc0000 [ 539.678557][T10070] loop0: detected capacity change from 0 to 512 [ 539.722833][T10070] FAT-fs (loop0): bogus number of FAT sectors [ 539.729051][T10070] FAT-fs (loop0): Can't find a valid FAT filesystem [ 540.373141][ T9978] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.388940][ T9978] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.437255][ T9978] bridge_slave_1: entered allmulticast mode [ 540.575497][ T9978] bridge_slave_1: entered promiscuous mode [ 542.338069][T10080] loop4: detected capacity change from 0 to 1024 [ 542.356170][ T9971] team0: Port device team_slave_0 added [ 542.366628][T10075] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 542.376195][T10075] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 542.386285][T10075] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 542.514766][ T9971] team0: Port device team_slave_1 added [ 542.542418][T10080] EXT4-fs: Ignoring removed mblk_io_submit option [ 542.549061][T10080] ext4: Unknown parameter 'noacl' [ 542.558105][ T9978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.616037][ T9978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.648349][T10085] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 542.711541][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1237'. [ 542.840618][T10091] loop1: detected capacity change from 0 to 256 [ 542.870843][T10091] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 542.919570][T10093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1240'. [ 542.920128][T10091] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 542.945015][T10091] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 542.958258][T10091] exFAT-fs (loop1): failed to load alloc-bitmap [ 542.965188][T10091] exFAT-fs (loop1): failed to recognize exfat type [ 542.991706][ T9971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.999608][ T9971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.092592][ T9971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.107285][ T9978] team0: Port device team_slave_0 added [ 543.119755][ T9978] team0: Port device team_slave_1 added [ 543.140362][ T9971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.161640][ T9971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.187562][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.252018][ T9971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.291950][T10103] overlayfs: missing 'lowerdir' [ 543.301059][T10101] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 543.638117][ T9978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.654599][ T9978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.696447][ T9978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.030664][T10109] loop4: detected capacity change from 0 to 16 [ 544.137328][T10109] erofs (device loop4): too large lz4 pclusterblks 16832 [ 544.833039][ T9978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.839999][ T9978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.866409][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.896954][ T9978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.957885][ T9978] hsr_slave_0: entered promiscuous mode [ 545.210340][ T9978] hsr_slave_1: entered promiscuous mode [ 545.220836][ T9978] debugfs: 'hsr0' already exists in 'hsr' [ 545.226568][ T9978] Cannot create hsr debugfs directory [ 546.852237][T10126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1254'. [ 546.898576][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.911181][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.922192][ T5994] bond0 (unregistering): Released all slaves [ 546.955436][ T9971] hsr_slave_0: entered promiscuous mode [ 546.966506][ T9971] hsr_slave_1: entered promiscuous mode [ 546.975339][ T9971] debugfs: 'hsr0' already exists in 'hsr' [ 546.981368][ T9971] Cannot create hsr debugfs directory [ 546.988169][T10112] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 546.997991][T10112] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 547.008880][T10112] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 547.161511][T10121] tipc: New replicast peer: 255.255.255.255 [ 547.168130][T10121] tipc: Enabled bearer , priority 10 [ 547.296605][ T5839] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 547.442491][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 547.452814][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 547.463658][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 547.479058][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 547.491334][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 547.848425][T10145] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1258'. [ 548.730161][ T5833] tipc: Node number set to 4278706390 [ 549.222632][ T5994] hsr_slave_0: left promiscuous mode [ 549.336192][T10153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.916143][ T5839] Bluetooth: hci4: command tx timeout [ 550.186541][T10157] overlayfs: missing 'lowerdir' [ 550.212099][ T5994] hsr_slave_1: left promiscuous mode [ 550.221317][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.228710][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.251542][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.258938][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.585671][ T5994] veth1_macvtap: left promiscuous mode [ 550.593560][ T5994] veth0_macvtap: left promiscuous mode [ 550.599164][ T5994] veth1_vlan: left promiscuous mode [ 550.604610][ T5994] veth0_vlan: left promiscuous mode [ 551.984005][ T5839] Bluetooth: hci4: command tx timeout [ 552.669208][T10179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1267'. [ 552.715759][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 552.752197][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 553.099121][T10172] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 553.108690][T10172] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 553.118798][T10172] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 553.260230][T10184] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1268'. [ 553.445617][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 553.445638][ T30] audit: type=1326 audit(1763389776.342:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 553.510607][ T30] audit: type=1326 audit(1763389776.342:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 553.570174][ T30] audit: type=1326 audit(1763389776.342:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 553.573260][ T9971] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 553.647376][ T30] audit: type=1326 audit(1763389776.342:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 553.741866][ T30] audit: type=1326 audit(1763389776.342:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 553.744464][ T9971] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 553.764228][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.764847][ T30] audit: type=1326 audit(1763389776.342:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 553.878665][ T30] audit: type=1326 audit(1763389776.342:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 553.886181][ T9971] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 553.980897][ T30] audit: type=1326 audit(1763389776.382:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 554.031175][ T9971] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 554.064216][ T5839] Bluetooth: hci4: command tx timeout [ 554.080162][ T30] audit: type=1326 audit(1763389776.382:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 554.277540][ T30] audit: type=1326 audit(1763389776.382:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f71a398f6c9 code=0x7ffc0000 [ 554.309061][T10201] mmap: syz.4.1273 (10201) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 554.638125][T10133] chnl_net:caif_netlink_parms(): no params data found [ 554.696927][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 554.717729][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 554.727293][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 554.738535][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 554.751878][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 555.399188][ T9978] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 555.651281][ T9978] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 555.675778][ T9978] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 555.759074][ T9978] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 556.140715][ T5848] Bluetooth: hci4: command tx timeout [ 556.268828][T10133] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.276337][T10133] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.288455][T10133] bridge_slave_0: entered allmulticast mode [ 556.306109][T10133] bridge_slave_0: entered promiscuous mode [ 556.316269][T10133] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.323553][T10133] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.331102][T10133] bridge_slave_1: entered allmulticast mode [ 556.347265][T10133] bridge_slave_1: entered promiscuous mode [ 556.389309][T10238] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1276'. [ 556.460578][T10239] netlink: 'syz.1.1276': attribute type 4 has an invalid length. [ 556.497053][ T9971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.557792][T10133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.655100][T10133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.863101][ T5848] Bluetooth: hci1: command tx timeout [ 556.934142][T10133] team0: Port device team_slave_0 added [ 556.956132][ T9971] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.221220][T10133] team0: Port device team_slave_1 added [ 557.640421][T10133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.647497][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.675085][T10133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.702442][T10133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.709478][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.736076][T10133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.826862][T10267] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1281'. [ 557.876580][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.883807][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.945750][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.952973][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.123922][ T5994] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.330282][ T5833] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 558.416920][T10133] hsr_slave_0: entered promiscuous mode [ 558.438629][T10133] hsr_slave_1: entered promiscuous mode [ 558.512564][ T5833] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 558.542208][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.586665][ T5994] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.598890][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.620716][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 558.663202][ T5833] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 558.679628][ T5833] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 558.706115][ T5833] usb 5-1: Manufacturer: syz [ 558.728779][ T5833] usb 5-1: config 0 descriptor?? [ 558.889538][ T5994] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.940451][ T5848] Bluetooth: hci1: command tx timeout [ 559.046068][ T9978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.118833][ T5994] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.156655][ T5833] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 559.201763][ T5833] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 559.253876][ T9978] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.276863][T10214] chnl_net:caif_netlink_parms(): no params data found [ 559.448355][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.455567][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.639338][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.646624][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.714980][T10295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.733672][T10295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.775601][T10214] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.792646][T10214] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.807811][T10214] bridge_slave_0: entered allmulticast mode [ 559.825418][T10214] bridge_slave_0: entered promiscuous mode [ 559.993446][T10214] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.018973][T10214] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.028595][T10214] bridge_slave_1: entered allmulticast mode [ 560.044351][T10214] bridge_slave_1: entered promiscuous mode [ 560.129551][ T9978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 560.146240][ T9978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 560.339389][ T5994] bridge_slave_1: left allmulticast mode [ 560.346934][ T5994] bridge_slave_1: left promiscuous mode [ 560.352792][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.363353][ T5994] bridge_slave_0: left allmulticast mode [ 560.369023][ T5994] bridge_slave_0: left promiscuous mode [ 560.631287][ T5814] usb 5-1: reset high-speed USB device number 12 using dummy_hcd [ 560.980394][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.999462][ T5994] bridge_slave_1: left allmulticast mode [ 561.018068][ T5994] bridge_slave_1: left promiscuous mode [ 561.029033][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.059072][ T5994] bridge_slave_0: left allmulticast mode [ 561.070670][ T5848] Bluetooth: hci1: command tx timeout [ 561.086233][ T5994] bridge_slave_0: left promiscuous mode [ 561.096527][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.737774][ T5967] usb 5-1: USB disconnect, device number 12 [ 562.421032][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.427372][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.122123][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.133002][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.143313][ T5994] bond0 (unregistering): Released all slaves [ 563.190237][ T5848] Bluetooth: hci1: command tx timeout [ 564.459975][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.481602][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.492435][ T5994] bond0 (unregistering): Released all slaves [ 564.534227][T10214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.549942][T10214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.634776][T10214] team0: Port device team_slave_0 added [ 564.726745][T10341] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1291'. [ 565.238275][ T9971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.365587][T10214] team0: Port device team_slave_1 added [ 565.912786][T10214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.919852][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.954018][T10214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.977734][T10214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.997585][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.045560][T10214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.097139][ T9978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.089954][T10133] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 567.247897][T10214] hsr_slave_0: entered promiscuous mode [ 567.261570][T10214] hsr_slave_1: entered promiscuous mode [ 567.278358][T10214] debugfs: 'hsr0' already exists in 'hsr' [ 567.287516][T10214] Cannot create hsr debugfs directory [ 567.338385][T10133] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 567.445143][T10133] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 567.484273][T10133] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 567.894780][ T5994] hsr_slave_0: left promiscuous mode [ 567.931931][ T5994] hsr_slave_1: left promiscuous mode [ 567.952692][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.974842][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.991511][ T5994] hsr_slave_0: left promiscuous mode [ 567.997790][ T5994] hsr_slave_1: left promiscuous mode [ 568.004162][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.011647][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.192027][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.262132][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.506415][ T5994] veth1_macvtap: left promiscuous mode [ 568.529256][ T5994] veth0_macvtap: left promiscuous mode [ 568.549527][ T5994] veth1_vlan: left promiscuous mode [ 568.590740][ T5994] veth0_vlan: left promiscuous mode [ 569.193838][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 569.232954][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 569.497897][T10401] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1300'. [ 569.923094][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 569.960389][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 570.430102][ T9971] veth0_vlan: entered promiscuous mode [ 570.467282][ T9971] veth1_vlan: entered promiscuous mode [ 570.555080][ T9971] veth0_macvtap: entered promiscuous mode [ 570.570874][ T9971] veth1_macvtap: entered promiscuous mode [ 570.592443][ T9971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.606892][ T9971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.410355][ T6010] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.459901][ T6010] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.479851][ T6010] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.726392][ T5999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.737455][ T5999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.520390][ T6010] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.700701][ T6002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.720457][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.874651][ T9978] veth0_vlan: entered promiscuous mode [ 573.031798][ T9978] veth1_vlan: entered promiscuous mode [ 573.537127][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 574.347085][ T9978] veth0_macvtap: entered promiscuous mode [ 574.388340][ T9978] veth1_macvtap: entered promiscuous mode [ 574.435896][T10444] loop4: detected capacity change from 0 to 512 [ 574.451678][T10133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.505688][T10133] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.525020][T10444] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 574.582924][T10444] EXT4-fs (loop4): mount failed [ 574.924389][ T9978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.934802][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.942064][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.098738][T10214] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 575.163869][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.171094][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.198968][T10457] loop1: detected capacity change from 0 to 512 [ 575.228619][ T9978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.393806][T10457] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent [ 575.529619][T10214] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 575.573152][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.597120][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.629039][T10214] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 575.670659][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.693997][T10214] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 575.737406][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.937095][ T6010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.963641][ T6010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.267386][T10486] netlink: 'syz.7.1314': attribute type 29 has an invalid length. [ 576.279952][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1314'. [ 576.368346][ T6010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.408116][ T6010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.553646][T10214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.753523][T10214] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.804208][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.811426][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.999137][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.006362][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.326611][T10214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.477669][T10133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.568659][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1318'. [ 578.190180][T10316] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 578.396339][T10316] usb 9-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 578.449132][T10316] usb 9-1: config 1 interface 0 altsetting 5 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 578.530143][T10316] usb 9-1: config 1 interface 0 has no altsetting 0 [ 578.750999][T10316] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.768649][T10316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 578.806792][T10316] usb 9-1: SerialNumber: syz [ 578.836940][T10509] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 578.896756][T10316] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 579.120338][T10316] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 579.163649][T10316] usb 9-1: USB disconnect, device number 2 [ 579.277674][T10214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.854776][T10133] veth0_vlan: entered promiscuous mode [ 581.884164][T10546] loop8: detected capacity change from 0 to 512 [ 581.933142][T10133] veth1_vlan: entered promiscuous mode [ 582.143611][T10133] veth0_macvtap: entered promiscuous mode [ 582.161555][T10546] EXT4-fs (loop8): blocks per group (34) and clusters per group (32768) inconsistent [ 582.239987][T10133] veth1_macvtap: entered promiscuous mode [ 583.135633][T10133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.159319][T10133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.373657][ T5999] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.427555][ T5999] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.953427][ T5999] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.001103][ T5999] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.350317][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.358174][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.681931][T10214] veth0_vlan: entered promiscuous mode [ 584.696656][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.033533][T10214] veth1_vlan: entered promiscuous mode [ 585.445897][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.587004][T10214] veth0_macvtap: entered promiscuous mode [ 585.880017][T10214] veth1_macvtap: entered promiscuous mode [ 587.389074][T10214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.434882][T10214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.622176][ T5987] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.632070][ T5987] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.693753][ T6002] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.739968][ T6002] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.505803][T10615] loop9: detected capacity change from 0 to 16 [ 589.154168][T10615] erofs (device loop9): too large lz4 pclusterblks 16832 [ 590.340356][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.419738][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.460566][T10619] loop1: detected capacity change from 0 to 512 [ 590.616961][T10619] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent [ 590.645981][ T5981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.515326][ T5981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.144181][T10637] overlayfs: missing 'lowerdir' [ 593.505055][ T6010] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.852545][ T6010] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.104447][T10663] loop7: detected capacity change from 0 to 256 [ 594.105615][ T6010] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.145231][T10663] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 594.229361][T10663] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 594.341086][T10663] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 594.398288][T10663] exFAT-fs (loop7): failed to load alloc-bitmap [ 594.423195][T10663] exFAT-fs (loop7): failed to recognize exfat type [ 594.720177][T10682] overlayfs: missing 'lowerdir' [ 595.905755][ T5896] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 595.916648][ T6010] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.650469][ T5896] usb 10-1: Using ep0 maxpacket: 32 [ 596.665210][ T5896] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 596.694658][ T5896] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 596.728563][ T5896] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 596.770207][ T5896] usb 10-1: config 1 has no interface number 0 [ 596.796169][ T5896] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 596.860307][ T5896] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 596.906118][ T5896] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 596.934502][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.025758][ T5896] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 597.239408][ T5896] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 597.381862][ T6010] bridge_slave_1: left allmulticast mode [ 597.387598][ T6010] bridge_slave_1: left promiscuous mode [ 597.426371][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.494460][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 597.496499][ T6010] bridge_slave_0: left allmulticast mode [ 597.520882][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 597.545391][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.554854][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.563080][ T6010] bridge_slave_0: left promiscuous mode [ 597.569072][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.569090][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 597.648837][ T43] usb 10-1: USB disconnect, device number 2 [ 597.708664][ T43] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 599.231852][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.246653][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.277193][ T6010] bond0 (unregistering): Released all slaves [ 599.329672][T10740] overlayfs: missing 'lowerdir' [ 599.662945][ T5839] Bluetooth: hci1: command tx timeout [ 601.740946][ T5839] Bluetooth: hci1: command tx timeout [ 603.860144][ T5839] Bluetooth: hci1: command tx timeout [ 604.112106][ T6010] hsr_slave_0: left promiscuous mode [ 604.196526][ T6010] hsr_slave_1: left promiscuous mode [ 604.291969][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.404846][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.015389][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.050256][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.427827][ T6010] veth1_macvtap: left promiscuous mode [ 605.443574][ T6010] veth0_macvtap: left promiscuous mode [ 605.466208][ T6010] veth1_vlan: left promiscuous mode [ 605.484307][ T6010] veth0_vlan: left promiscuous mode [ 605.900193][ T5839] Bluetooth: hci1: command tx timeout [ 610.043696][T10822] loop8: detected capacity change from 0 to 4096 [ 610.060339][T10822] EXT4-fs (loop8): Test dummy encryption mode enabled [ 610.150435][T10822] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 610.158664][T10822] System zones: 0-5 [ 610.185489][T10822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.382215][T10822] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 610.827259][ T9978] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.841913][ T6010] team0 (unregistering): Port device team_slave_1 removed [ 611.196943][ T6010] team0 (unregistering): Port device team_slave_0 removed [ 613.134045][T10841] tipc: Started in network mode [ 613.138944][T10841] tipc: Node identity ac14141b, cluster identity 4711 [ 613.146965][T10841] tipc: New replicast peer: 255.255.255.255 [ 613.153604][T10841] tipc: Enabled bearer , priority 10 [ 613.541386][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 613.541408][ T30] audit: type=1326 audit(1763389836.442:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.7.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69d98f6c9 code=0x7ffc0000 [ 614.611357][ T30] audit: type=1326 audit(1763389836.442:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.7.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69d98f6c9 code=0x7ffc0000 [ 614.750508][ T30] audit: type=1326 audit(1763389836.442:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.7.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fc69d98f6c9 code=0x7ffc0000 [ 614.819345][ T30] audit: type=1326 audit(1763389836.442:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.7.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69d98f6c9 code=0x7ffc0000 [ 614.843071][T10316] tipc: Node number set to 2886997019 [ 614.879320][ T30] audit: type=1326 audit(1763389836.442:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.7.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69d98f6c9 code=0x7ffc0000 [ 614.930755][T10877] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1407'. [ 614.964670][T10709] chnl_net:caif_netlink_parms(): no params data found [ 617.305790][T10905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.978548][T10709] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.982829][T10922] loop8: detected capacity change from 0 to 2048 [ 617.993493][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.015650][T10709] bridge_slave_0: entered allmulticast mode [ 618.018203][T10922] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=2362, location=2362 [ 618.034458][T10924] overlayfs: missing 'lowerdir' [ 618.062087][T10922] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 618.075654][T10709] bridge_slave_0: entered promiscuous mode [ 618.111287][T10922] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 618.141012][T10709] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.183375][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.211245][T10709] bridge_slave_1: entered allmulticast mode [ 618.240556][T10922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 618.262210][T10709] bridge_slave_1: entered promiscuous mode [ 618.386044][T10933] loop4: detected capacity change from 0 to 512 [ 618.471621][T10933] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 618.493390][ T30] audit: type=1800 audit(1763389841.392:652): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1417" name="file1" dev="loop8" ino=1346 res=0 errno=0 [ 618.579951][T10709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.633372][T10933] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 618.659196][T10933] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 618.669868][T10709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.690852][T10933] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 618.760439][T10933] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 618.784140][T10933] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 618.853704][T10933] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 618.885352][T10933] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 618.906691][T10933] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 618.930229][ T5833] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 618.980712][T10933] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 618.989174][T10933] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 619.031981][T10709] team0: Port device team_slave_0 added [ 619.054095][T10709] team0: Port device team_slave_1 added [ 619.086425][T10933] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 619.133394][T10933] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 619.416009][T10933] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 619.462806][T10950] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1423'. [ 619.499451][T10709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.537171][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.857818][T10709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.077508][T10709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.121470][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.260239][T10316] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 620.278182][T10709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.349772][T10938] [ 620.352132][T10938] ============================================ [ 620.358272][T10938] WARNING: possible recursive locking detected [ 620.364412][T10938] syzkaller #0 Not tainted [ 620.368809][T10938] -------------------------------------------- [ 620.374938][T10938] syz.8.1417/10938 is trying to acquire lock: [ 620.380984][T10938] ffff8880546bf528 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_free_blocks+0x9e2/0x17f0 [ 620.390652][T10938] [ 620.390652][T10938] but task is already holding lock: [ 620.397998][T10938] ffff8880546bf528 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_new_block+0xfab/0x1ba0 [ 620.407486][T10938] [ 620.407486][T10938] other info that might help us debug this: [ 620.415530][T10938] Possible unsafe locking scenario: [ 620.415530][T10938] [ 620.422965][T10938] CPU0 [ 620.426228][T10938] ---- [ 620.429491][T10938] lock(&sbi->s_alloc_mutex); [ 620.434249][T10938] lock(&sbi->s_alloc_mutex); [ 620.439007][T10938] [ 620.439007][T10938] *** DEADLOCK *** [ 620.439007][T10938] [ 620.447136][T10938] May be due to missing lock nesting notation [ 620.447136][T10938] [ 620.455439][T10938] 4 locks held by syz.8.1417/10938: [ 620.460623][T10938] #0: ffff888053972420 (sb_writers#17){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 620.470407][T10938] #1: ffff888058449590 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: udf_file_write_iter+0x6e/0x6c0 [ 620.481391][T10938] #2: ffff8880584493c0 (&ei->i_data_sem#2){++++}-{4:4}, at: udf_map_block+0x283/0x45f0 [ 620.491158][T10938] #3: ffff8880546bf528 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_new_block+0xfab/0x1ba0 [ 620.501087][T10938] [ 620.501087][T10938] stack backtrace: [ 620.506959][T10938] CPU: 0 UID: 0 PID: 10938 Comm: syz.8.1417 Not tainted syzkaller #0 PREEMPT(full) [ 620.506983][T10938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 620.506997][T10938] Call Trace: [ 620.507007][T10938] [ 620.507017][T10938] dump_stack_lvl+0x189/0x250 [ 620.507050][T10938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.507080][T10938] ? __pfx__printk+0x10/0x10 [ 620.507102][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.507127][T10938] ? print_lock_name+0xde/0x100 [ 620.507149][T10938] print_deadlock_bug+0x28b/0x2a0 [ 620.507178][T10938] validate_chain+0x1a3f/0x2140 [ 620.507203][T10938] ? try_to_wake_up+0x7f5/0x12b0 [ 620.507236][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.507263][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.507290][T10938] __lock_acquire+0xab9/0xd20 [ 620.507314][T10938] ? udf_free_blocks+0x9e2/0x17f0 [ 620.507333][T10938] lock_acquire+0x120/0x360 [ 620.507353][T10938] ? udf_free_blocks+0x9e2/0x17f0 [ 620.507375][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.507404][T10938] __mutex_lock+0x187/0x1350 [ 620.507437][T10938] ? udf_free_blocks+0x9e2/0x17f0 [ 620.507458][T10938] ? folio_mark_accessed+0x42c/0x8b0 [ 620.507480][T10938] ? save_fpregs_to_fpstate+0xa3/0x210 [ 620.507509][T10938] ? __pfx_folio_mark_accessed+0x10/0x10 [ 620.507533][T10938] ? rcu_is_watching+0x15/0xb0 [ 620.507557][T10938] ? udf_free_blocks+0x9e2/0x17f0 [ 620.507579][T10938] ? __pfx___mutex_lock+0x10/0x10 [ 620.507623][T10938] ? __pfx___might_resched+0x10/0x10 [ 620.507645][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.507672][T10938] udf_free_blocks+0x9e2/0x17f0 [ 620.507692][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.507721][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.507746][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.507770][T10938] ? udf_get_fileshortad+0x6e/0x1b0 [ 620.507790][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.507815][T10938] ? udf_current_aext+0x698/0xb00 [ 620.507839][T10938] ? __pfx_udf_free_blocks+0x10/0x10 [ 620.507862][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.507897][T10938] udf_delete_aext+0x4df/0xbc0 [ 620.507929][T10938] ? __pfx_udf_delete_aext+0x10/0x10 [ 620.507953][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.507986][T10938] udf_new_block+0x1404/0x1ba0 [ 620.508013][T10938] ? fs_reclaim_acquire+0x7d/0x100 [ 620.508048][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.508072][T10938] ? bdev_getblk+0x80/0x660 [ 620.508100][T10938] ? __pfx_udf_new_block+0x10/0x10 [ 620.508135][T10938] udf_map_block+0x13a8/0x45f0 [ 620.508174][T10938] ? __pfx_udf_map_block+0x10/0x10 [ 620.508197][T10938] ? mlock_drain_local+0x79/0x490 [ 620.508218][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.508242][T10938] ? mlock_drain_local+0x28e/0x490 [ 620.508286][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.508310][T10938] ? do_raw_spin_unlock+0x122/0x240 [ 620.508341][T10938] __udf_get_block+0x52/0x250 [ 620.508368][T10938] __block_write_begin_int+0x6b5/0x1900 [ 620.508396][T10938] ? __pfx_workingset_update_node+0x10/0x10 [ 620.508428][T10938] ? __pfx_udf_get_block+0x10/0x10 [ 620.508453][T10938] ? __pfx___block_write_begin_int+0x10/0x10 [ 620.508485][T10938] ? __pfx_udf_get_block+0x10/0x10 [ 620.508507][T10938] block_write_begin+0x8a/0x120 [ 620.508534][T10938] ? udf_write_begin+0x92/0x270 [ 620.508558][T10938] udf_write_begin+0x115/0x270 [ 620.508583][T10938] generic_perform_write+0x2c5/0x900 [ 620.508617][T10938] ? __pfx_generic_perform_write+0x10/0x10 [ 620.508641][T10938] ? file_update_time+0x416/0x490 [ 620.508668][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.508692][T10938] ? __generic_file_write_iter+0xf9/0x230 [ 620.508715][T10938] ? udf_file_write_iter+0x1a3/0x6c0 [ 620.508738][T10938] udf_file_write_iter+0x2d5/0x6c0 [ 620.508764][T10938] iter_file_splice_write+0x975/0x10e0 [ 620.508811][T10938] ? __pfx_iter_file_splice_write+0x10/0x10 [ 620.508846][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.508870][T10938] ? rcu_read_lock_any_held+0xb3/0x120 [ 620.508900][T10938] ? direct_splice_actor+0x10c/0x160 [ 620.508934][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.508959][T10938] ? __pfx_iter_file_splice_write+0x10/0x10 [ 620.508993][T10938] direct_splice_actor+0x101/0x160 [ 620.509029][T10938] splice_direct_to_actor+0x5a8/0xcc0 [ 620.509073][T10938] ? __pfx_direct_splice_actor+0x10/0x10 [ 620.509106][T10938] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 620.509145][T10938] do_splice_direct+0x181/0x270 [ 620.509177][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.509203][T10938] ? __pfx_do_splice_direct+0x10/0x10 [ 620.509237][T10938] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 620.509262][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.509286][T10938] ? rw_verify_area+0x255/0x4d0 [ 620.509315][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.509341][T10938] do_sendfile+0x4da/0x7e0 [ 620.509363][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.509392][T10938] ? __pfx_do_sendfile+0x10/0x10 [ 620.509417][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.509441][T10938] ? __se_sys_futex+0x36f/0x400 [ 620.509474][T10938] __se_sys_sendfile64+0x13e/0x190 [ 620.509497][T10938] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 620.509520][T10938] ? do_syscall_64+0xbe/0xfa0 [ 620.509552][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.509578][T10938] do_syscall_64+0xfa/0xfa0 [ 620.509608][T10938] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.509643][T10938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.509664][T10938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.509688][T10938] ? exc_page_fault+0xab/0x100 [ 620.509719][T10938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.509739][T10938] RIP: 0033:0x7fb4f778f6c9 [ 620.509758][T10938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.509776][T10938] RSP: 002b:00007fb4f85f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 620.509798][T10938] RAX: ffffffffffffffda RBX: 00007fb4f79e6090 RCX: 00007fb4f778f6c9 [ 620.509814][T10938] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 620.509827][T10938] RBP: 00007fb4f7811f91 R08: 0000000000000000 R09: 0000000000000000 [ 620.509841][T10938] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 620.509855][T10938] R13: 00007fb4f79e6128 R14: 00007fb4f79e6090 R15: 00007ffc6d992818 [ 620.509880][T10938] [ 621.150128][T10316] usb 5-1: Using ep0 maxpacket: 16 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 621.179532][T10316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.333147][T10316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.650274][T10316] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 621.740396][T10316] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 621.749505][T10316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.850817][T10316] usb 5-1: config 0 descriptor?? [ 621.920178][T10316] usb 5-1: can't set config #0, error -71 [ 621.962664][T10316] usb 5-1: USB disconnect, device number 13 [ 622.726871][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.805816][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.913389][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.976345][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.117094][ T13] bridge_slave_1: left allmulticast mode [ 623.130215][ T13] bridge_slave_1: left promiscuous mode [ 623.135927][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.213723][ T13] bridge_slave_0: left allmulticast mode [ 623.219391][ T13] bridge_slave_0: left promiscuous mode [ 623.240357][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.667123][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.675954][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.694404][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.705558][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.715687][ T13] bond0 (unregistering): Released all slaves [ 623.991810][ T13] hsr_slave_0: left promiscuous mode [ 623.998925][ T13] hsr_slave_1: left promiscuous mode [ 624.010640][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.018051][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.035700][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.043671][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.055875][ T13] veth1_macvtap: left promiscuous mode [ 624.062339][ T13] veth0_macvtap: left promiscuous mode [ 624.067947][ T13] veth1_vlan: left promiscuous mode [ 624.073593][ T13] veth0_vlan: left promiscuous mode [ 624.220603][ T5833] usb 9-1: unable to get BOS descriptor or descriptor too short [ 624.228304][ T5833] usb 9-1: no configurations [ 624.246876][ T5833] usb 9-1: can't read configurations, error -22 [ 624.294638][ T13] team0 (unregistering): Port device team_slave_1 removed [ 624.318164][ T13] team0 (unregistering): Port device team_slave_0 removed [ 624.382898][ T5833] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 624.531093][ T5833] usb 9-1: device descriptor read/64, error -32 [ 624.650251][ T5833] usb usb9-port1: attempt power cycle [ 624.808600][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.877144][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.938569][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.005705][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.020127][ T5833] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 625.050896][ T5833] usb 9-1: device descriptor read/8, error -32 [ 625.123446][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.167578][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.211747][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.287401][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.324248][ T5833] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 625.350365][ T5833] usb 9-1: device descriptor read/8, error -32 [ 625.400513][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.460459][ T5833] usb usb9-port1: unable to enumerate USB device [ 625.467935][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.544676][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.599366][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.704818][ T13] bridge_slave_1: left allmulticast mode [ 625.712472][ T13] bridge_slave_1: left promiscuous mode [ 625.718219][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.728344][ T13] bridge_slave_0: left allmulticast mode [ 625.734297][ T13] bridge_slave_0: left promiscuous mode [ 625.739975][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.751498][ T13] bridge_slave_1: left allmulticast mode [ 625.757146][ T13] bridge_slave_1: left promiscuous mode [ 625.763863][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.777259][ T13] bridge_slave_0: left allmulticast mode [ 625.785499][ T13] bridge_slave_0: left promiscuous mode [ 625.791470][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.801461][ T13] bridge_slave_1: left allmulticast mode [ 625.807099][ T13] bridge_slave_1: left promiscuous mode [ 625.814263][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.823664][ T13] bridge_slave_0: left allmulticast mode [ 625.829299][ T13] bridge_slave_0: left promiscuous mode [ 625.837363][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.127342][ T13] bond0 (unregistering): Released all slaves [ 626.239176][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.250630][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.261604][ T13] bond0 (unregistering): Released all slaves [ 626.374698][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.385484][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.396627][ T13] bond0 (unregistering): Released all slaves [ 626.484544][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.495149][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.505330][ T13] bond0 (unregistering): Released all slaves [ 626.606252][ T13] tipc: Disabling bearer [ 626.617839][ T13] tipc: Left network mode [ 626.628031][ T13] tipc: Disabling bearer [ 626.635708][ T13] tipc: Left network mode [ 626.974012][ T13] hsr_slave_0: left promiscuous mode [ 626.983252][ T13] hsr_slave_1: left promiscuous mode [ 626.995185][ T13] hsr_slave_0: left promiscuous mode [ 627.000982][ T13] hsr_slave_1: left promiscuous mode [ 627.006745][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.014511][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.022406][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.029786][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.046704][ T13] hsr_slave_0: left promiscuous mode [ 627.054042][ T13] hsr_slave_1: left promiscuous mode [ 627.059836][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.068122][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.076161][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.083748][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.092265][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.099873][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.118500][ T13] veth0_macvtap: left promiscuous mode [ 627.128062][ T13] veth1_vlan: left promiscuous mode [ 627.133623][ T13] veth0_vlan: left promiscuous mode [ 627.144884][ T13] veth1_macvtap: left promiscuous mode [ 627.150988][ T13] veth0_macvtap: left promiscuous mode [ 627.156553][ T13] veth1_vlan: left promiscuous mode [ 627.164587][ T13] veth0_vlan: left promiscuous mode [ 627.171550][ T13] veth1_macvtap: left promiscuous mode [ 627.177049][ T13] veth0_macvtap: left promiscuous mode [ 627.183571][ T13] veth1_vlan: left promiscuous mode [ 627.188865][ T13] veth0_vlan: left promiscuous mode [ 627.689229][ T13] team0 (unregistering): Port device team_slave_1 removed [ 627.705072][ T13] team0 (unregistering): Port device team_slave_0 removed [ 627.880741][ T13] team0 (unregistering): Port device team_slave_1 removed [ 627.898766][ T13] team0 (unregistering): Port device team_slave_0 removed [ 627.986163][ T13] team0 (unregistering): Port device team_slave_1 removed [ 628.000419][ T13] team0 (unregistering): Port device team_slave_0 removed [ 628.859101][ T13] ------------[ cut here ]------------ [ 628.864701][ T13] WARNING: CPU: 0 PID: 13 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100 [ 628.874676][ T13] Modules linked in: [ 628.878576][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 628.887915][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.898028][ T13] Workqueue: netns cleanup_net [ 628.903158][ T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100 [ 628.909447][ T13] Code: a8 c7 17 f8 4b 83 3c 2c 00 75 19 e8 fc 04 b2 f7 49 81 fd f8 07 00 00 74 1d e8 ee 04 b2 f7 49 83 c5 08 eb c9 e8 e3 04 b2 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6 [ 628.929388][ T13] RSP: 0018:ffffc90000127890 EFLAGS: 00010293 [ 628.935843][ T13] RAX: ffffffff8a0dff2d RBX: ffff88807aefc000 RCX: ffff88801c6b0000 [ 628.944084][ T13] RDX: 0000000000000000 RSI: ffffffff8bbf0740 RDI: ffff88807aefc000 [ 628.952102][ T13] RBP: ffffc90000127990 R08: ffffffff8f7ceb77 R09: 1ffffffff1ef9d6e [ 628.960171][ T13] R10: dffffc0000000000 R11: fffffbfff1ef9d6f R12: ffff88807aefc000 [ 628.968147][ T13] R13: 0000000000000000 R14: ffff88803270c900 R15: dffffc0000000000 [ 628.976153][ T13] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 628.985113][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.991774][ T13] CR2: 0000555b28712950 CR3: 000000000dd38000 CR4: 0000000000350ef0 [ 628.999749][ T13] Call Trace: [ 629.003064][ T13] [ 629.005994][ T13] ops_undo_list+0x49a/0x990 [ 629.010653][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 629.015783][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.021467][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.027123][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 629.032391][ T13] cleanup_net+0x4d8/0x820 [ 629.036812][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 629.041828][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.047480][ T13] ? rcu_is_watching+0x15/0xb0 [ 629.052290][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 629.058018][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 629.064028][ T13] process_scheduled_works+0xae1/0x17b0 [ 629.069598][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 629.075636][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.081312][ T13] worker_thread+0x8a0/0xda0 [ 629.085925][ T13] kthread+0x711/0x8a0 [ 629.090047][ T13] ? __pfx_worker_thread+0x10/0x10 [ 629.095168][ T13] ? __pfx_kthread+0x10/0x10 [ 629.099766][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.105463][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.110704][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.116347][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.121612][ T13] ? __pfx_kthread+0x10/0x10 [ 629.126224][ T13] ret_from_fork+0x4bc/0x870 [ 629.130870][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 629.135989][ T13] ? __switch_to_asm+0x39/0x70 [ 629.140788][ T13] ? __switch_to_asm+0x33/0x70 [ 629.145547][ T13] ? __pfx_kthread+0x10/0x10 [ 629.150199][ T13] ret_from_fork_asm+0x1a/0x30 [ 629.154974][ T13] [ 629.157988][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 629.165262][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 629.174535][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 629.184578][ T13] Workqueue: netns cleanup_net [ 629.189344][ T13] Call Trace: [ 629.192609][ T13] [ 629.195528][ T13] dump_stack_lvl+0x99/0x250 [ 629.200116][ T13] ? __asan_memcpy+0x40/0x70 [ 629.204702][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.209895][ T13] ? __pfx__printk+0x10/0x10 [ 629.214479][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.220111][ T13] vpanic+0x237/0x6d0 [ 629.224091][ T13] ? __pfx_vpanic+0x10/0x10 [ 629.228594][ T13] panic+0xb9/0xc0 [ 629.232316][ T13] ? __pfx_panic+0x10/0x10 [ 629.236736][ T13] __warn+0x31b/0x4b0 [ 629.240715][ T13] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 629.246082][ T13] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 629.251449][ T13] report_bug+0x2be/0x4f0 [ 629.255774][ T13] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 629.261158][ T13] ? xfrm6_tunnel_net_exit+0x7e/0x100 [ 629.266523][ T13] ? xfrm6_tunnel_net_exit+0x80/0x100 [ 629.271889][ T13] handle_bug+0x84/0x160 [ 629.276125][ T13] exc_invalid_op+0x1a/0x50 [ 629.280614][ T13] asm_exc_invalid_op+0x1a/0x20 [ 629.285456][ T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100 [ 629.291429][ T13] Code: a8 c7 17 f8 4b 83 3c 2c 00 75 19 e8 fc 04 b2 f7 49 81 fd f8 07 00 00 74 1d e8 ee 04 b2 f7 49 83 c5 08 eb c9 e8 e3 04 b2 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6 [ 629.311022][ T13] RSP: 0018:ffffc90000127890 EFLAGS: 00010293 [ 629.317080][ T13] RAX: ffffffff8a0dff2d RBX: ffff88807aefc000 RCX: ffff88801c6b0000 [ 629.325037][ T13] RDX: 0000000000000000 RSI: ffffffff8bbf0740 RDI: ffff88807aefc000 [ 629.332995][ T13] RBP: ffffc90000127990 R08: ffffffff8f7ceb77 R09: 1ffffffff1ef9d6e [ 629.340965][ T13] R10: dffffc0000000000 R11: fffffbfff1ef9d6f R12: ffff88807aefc000 [ 629.348929][ T13] R13: 0000000000000000 R14: ffff88803270c900 R15: dffffc0000000000 [ 629.356896][ T13] ? xfrm6_tunnel_net_exit+0x7d/0x100 [ 629.362277][ T13] ops_undo_list+0x49a/0x990 [ 629.366861][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 629.371962][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.377590][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.383220][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 629.388421][ T13] cleanup_net+0x4d8/0x820 [ 629.392825][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 629.397745][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.403372][ T13] ? rcu_is_watching+0x15/0xb0 [ 629.408123][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 629.413835][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 629.419609][ T13] process_scheduled_works+0xae1/0x17b0 [ 629.425166][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 629.431143][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.436772][ T13] worker_thread+0x8a0/0xda0 [ 629.441369][ T13] kthread+0x711/0x8a0 [ 629.445437][ T13] ? __pfx_worker_thread+0x10/0x10 [ 629.450537][ T13] ? __pfx_kthread+0x10/0x10 [ 629.455123][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.460750][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.465944][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.471564][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.476762][ T13] ? __pfx_kthread+0x10/0x10 [ 629.481348][ T13] ret_from_fork+0x4bc/0x870 [ 629.486019][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 629.491125][ T13] ? __switch_to_asm+0x39/0x70 [ 629.495874][ T13] ? __switch_to_asm+0x33/0x70 [ 629.500623][ T13] ? __pfx_kthread+0x10/0x10 [ 629.505208][ T13] ret_from_fork_asm+0x1a/0x30 [ 629.509964][ T13] [ 629.513203][ T13] Kernel Offset: disabled [ 629.517510][ T13] Rebooting in 86400 seconds..