last executing test programs: 5m50.661151856s ago: executing program 2 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) unshare(0x68040200) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b1a, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r6, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x5}}, [{0x8}, {0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 5m50.149178973s ago: executing program 2 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m48.723093461s ago: executing program 2 (id=483): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x0, 0x0, 0x80003ff}}, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008700)=ANY=[@ANYBLOB="3000000000000000000000000000000000000000643b1475000000000000000006"], 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f000000ce00)={0x2020, 0x0, 0x0}, 0x2020) getdents64(r1, 0x0, 0x300) getdents64(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r4}, 0x10) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getdents64(r1, &(0x7f0000002200)=""/78, 0x4e) 5m48.086814439s ago: executing program 2 (id=486): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@discard}, {@abort}, {@dioread_lock}, {@norecovery}, {@nombcache}, {@lazytime}, {@noload}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@grpquota}, {@init_itable_val}, {@jqfmt_vfsv1}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) setxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000640)=@random={'user.', 'usrquota'}, &(0x7f0000000680)='#]-[\x00', 0x5, 0x1) getdents64(r0, &(0x7f0000000300)=""/217, 0xd9) 5m46.880026153s ago: executing program 2 (id=490): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 5m45.791472647s ago: executing program 2 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x202000) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000380)={0x5, 0x8, '\x00', 0x1, &(0x7f0000000340)=[0x0]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00), &(0x7f0000001c40)=r6}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000540)="ae", 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 5m45.110713646s ago: executing program 32 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x202000) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000380)={0x5, 0x8, '\x00', 0x1, &(0x7f0000000340)=[0x0]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00), &(0x7f0000001c40)=r6}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000540)="ae", 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 8.255550018s ago: executing program 4 (id=1618): r0 = socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x5a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="829ce7f6e374f78770b2545511a098900ba16acc0cfbd7d46d6db8fd05c70fde74d74b356eb20b50a3bc7fc51a14347faa4c9fa2e2c4a4a5ed0d7ada47d68f3c5efc58f6e0b3b0862b485229aa2389a8b705fbde24982a00479dcdf418efeeff8737d28b937bf6171f20ec8f3c8e4f0f88c776919109b2b4c6b628c7db25de3e46eaa2720cbbf9"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES8=0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @loopback, @mcast2, 0x1, 0x7, 0x2, 0x8}}) 8.250532778s ago: executing program 1 (id=1619): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000380)}, 0x10) socket(0x1e, 0x80004, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400001021d010902640002010000000904010001020d0000052406000105240000000d240f0100000800000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x1, 0x4, 0x7, 0x40, 0x2, 0xe, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) keyctl$clear(0x7, r4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4044845) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 8.043689561s ago: executing program 5 (id=1621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x4, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/170, &(0x7f0000000000)=0xaa) 7.354250379s ago: executing program 0 (id=1624): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007", @ANYBLOB], 0x28}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x80400, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x9a) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.227361521s ago: executing program 4 (id=1625): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) unshare(0x68040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b1a, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x5}}, [{0x8}, {0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 6.877495495s ago: executing program 5 (id=1627): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007", @ANYBLOB], 0x28}}, 0x0) 6.46629166s ago: executing program 4 (id=1628): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x0, 0x0, 0x80003ff}}, 0x20) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008700)=ANY=[@ANYBLOB="3000000000000000000000000000000000000000643b1475000000000000000006"], 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f000000ce00)={0x2020, 0x0, 0x0}, 0x2020) getdents64(r1, 0x0, 0x300) getdents64(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r4}, 0x10) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getdents64(r1, &(0x7f0000002200)=""/78, 0x4e) 6.142288384s ago: executing program 0 (id=1629): openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbfs(0x0, 0x204, 0x2) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000ac0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)={0x1, 0x0, [{0x4, 0x5a, &(0x7f00000006c0)=""/90}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1) 5.860011168s ago: executing program 5 (id=1631): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) fallocate(r4, 0x0, 0x0, 0x1001f0) 5.796827139s ago: executing program 3 (id=1632): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 5.69551395s ago: executing program 1 (id=1633): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000002c000000000000000600000018110000", @ANYBLOB="00000000005f4f3727d227e157000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001d950c0010000000bf91000000000000b7020000020000008500000084"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") 4.667532533s ago: executing program 0 (id=1634): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x80000, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0xda}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 4.667056513s ago: executing program 4 (id=1635): r0 = socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x5a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="829ce7f6e374f78770b2545511a098900ba16acc0cfbd7d46d6db8fd05c70fde74d74b356eb20b50a3bc7fc51a14347faa4c9fa2e2c4a4a5ed0d7ada47d68f3c5efc58f6e0b3b0862b485229aa2389a8b705fbde24982a00479dcdf418efeeff8737d28b937bf6171f20ec8f3c8e4f0f88c776919109b2b4c6b628c7db25de3e46eaa2720cbbf9"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES8=0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @loopback, @mcast2, 0x1, 0x7, 0x2, 0x8}}) 4.634350843s ago: executing program 3 (id=1636): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) readlink(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=""/92, 0x5c) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x112, 0x2, 0x0, 0x0) epoll_create(0xbd) 3.819631543s ago: executing program 3 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x4, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/170, &(0x7f0000000000)=0xaa) 3.607198206s ago: executing program 1 (id=1638): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) unshare(0x68040200) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b1a, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x5}}, [{0x8}, {0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 3.536341257s ago: executing program 4 (id=1639): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007", @ANYBLOB], 0x28}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x80400, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x9a) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.059638652s ago: executing program 3 (id=1640): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)="dd", 0x1}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000700)="194fca6c0000", 0x6}, {&(0x7f0000000200)="01e1abb9aa", 0x5}, {&(0x7f0000000280)="87", 0x1}, {&(0x7f00000010c0)='n', 0x1}, {&(0x7f0000000900)="364e88c8a075cc0032b20294ec612db4464951c55f390cc90d297c7f0f1f5c9a86deba358f9e6e9ad9ec1e59f14ae798327ce5fc969b90d8089c8f00016688225e2acdce6e273eb31800275f239374ef801cd151c1e0441e0afa736f5357fa046fc759", 0x63}, {&(0x7f00000002c0)="55eec406a070b683687c9eecec2c5b8d5cf49efaf2", 0x15}], 0xa}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f00000008c0)="ce90bf", 0x3}, {&(0x7f0000000540)="f2e659a0b00d26c2ee", 0x9}, {&(0x7f0000000340)="247a5fb720b5a76efaf58e", 0xb}], 0x3}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aa", 0x15}, {&(0x7f0000000600)="cf599f5e426c2a270704435f7c82ba005496bf8a62063f7f74ef694e72fd5dd6a0b44750f335b3b1fdcc847dfb5bb8b8e6435c7725de726d6c2be8d3acf3cd52086ba98307a5c38c6b714139c9a238b42df4094f7e9180e74ad95e3af90d5ffbbe94f8ddeabd2bea079000f9c00abcd7084f14bfdb8af7e864b987fcc53695dfacdbb967a66c40e19d611fab8a1871bb80b2b3ba5713b8c192b8a74f0ec1e1bdef22b7d67041499a294cff7805603c9dfbc16c1c7117d5ef04f35c5db5d2bfdc87cf85eeca4e18fa831376f4e43e3f", 0xcf}, {&(0x7f0000000440)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000000400)='-', 0x1}], 0x5}}], 0x3, 0x4000000) 2.800372966s ago: executing program 1 (id=1641): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007", @ANYBLOB], 0x28}}, 0x0) 2.604791059s ago: executing program 0 (id=1642): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.379707251s ago: executing program 5 (id=1643): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"]) 2.190325073s ago: executing program 0 (id=1644): pipe(&(0x7f00000001c0)) r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0xffffffff}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4}}) sendmsg$key(r7, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800"], 0xa8}}, 0x2) 2.131051854s ago: executing program 5 (id=1645): openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbfs(0x0, 0x204, 0x2) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000ac0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)={0x1, 0x0, [{0x4, 0x5a, &(0x7f00000006c0)=""/90}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1) 2.121151714s ago: executing program 3 (id=1646): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x0, 0x0, 0x80003ff}}, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, 0x0) read$FUSE(r0, &(0x7f000000ce00)={0x2020, 0x0, 0x0}, 0x2020) getdents64(r1, 0x0, 0x300) getdents64(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r4}, 0x10) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getdents64(r1, &(0x7f0000002200)=""/78, 0x4e) 1.659877221s ago: executing program 1 (id=1647): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) readlink(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=""/92, 0x5c) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x112, 0x2, 0x0, 0x0) epoll_create(0xbd) 1.079786477s ago: executing program 4 (id=1648): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000400)={[{@nogrpid}, {@noblock_validity}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@orlov}]}, 0x4, 0x4f5, &(0x7f0000000c00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 927.580749ms ago: executing program 5 (id=1649): r0 = socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x5a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="829ce7f6e374f78770b2545511a098900ba16acc0cfbd7d46d6db8fd05c70fde74d74b356eb20b50a3bc7fc51a14347faa4c9fa2e2c4a4a5ed0d7ada47d68f3c5efc58f6e0b3b0862b485229aa2389a8b705fbde24982a00479dcdf418efeeff8737d28b937bf6171f20ec8f3c8e4f0f88c776919109b2b4c6b628c7db25de3e46eaa2720cbbf9"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES8=0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @loopback, @mcast2, 0x1, 0x7, 0x2, 0x8}}) 927.325669ms ago: executing program 3 (id=1650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x4, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/170, &(0x7f0000000000)=0xaa) 468.684005ms ago: executing program 1 (id=1651): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) unshare(0x68040200) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b1a, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x5}}, [{0x8}, {0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 0s ago: executing program 0 (id=1652): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x80000, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0xda}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): memory! [ 291.662501][ T7396] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.759146][ T7399] loop4: detected capacity change from 0 to 512 [ 291.762493][ T7399] EXT4-fs: Ignoring removed bh option [ 292.094182][ T7399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 292.094693][ T7399] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.649076][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 295.106127][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 295.233465][ T7396] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.325735][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 295.340796][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 295.489658][ T7396] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.638465][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'. [ 296.548218][ T7396] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.624365][ T7443] syz.4.824[7443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.624814][ T7443] syz.4.824[7443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.956981][ T7473] loop0: detected capacity change from 0 to 16 [ 298.988751][ T7473] erofs: Unknown parameter '01777777777777777777777ÿ' [ 299.026481][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.833'. [ 299.648762][ T7473] loop0: detected capacity change from 0 to 512 [ 299.703587][ T4338] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 299.841453][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 299.903487][ T7481] bond0: (slave wlan1): Releasing backup interface [ 300.031929][ T7488] loop3: detected capacity change from 0 to 512 [ 300.041511][ T7488] EXT4-fs: Ignoring removed bh option [ 300.115272][ T7408] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 300.305494][ T7408] usb 1-1: Using ep0 maxpacket: 16 [ 300.356316][ T7408] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.372035][ T7485] netlink: 'syz.4.836': attribute type 10 has an invalid length. [ 300.404047][ T7488] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 300.413901][ T7488] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.663709][ T7408] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.169058][ T7408] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.231208][ T7485] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 301.306684][ T7408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.436391][ T7408] usb 1-1: Product: syz [ 301.506578][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 301.535001][ T7408] usb 1-1: Manufacturer: syz [ 301.542645][ T7408] usb 1-1: SerialNumber: syz [ 301.871212][ T7396] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.939639][ T7396] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.051161][ T7396] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.067060][ T7408] usb 1-1: cannot find UAC_HEADER [ 302.133662][ T7408] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 302.161976][ T7396] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.182526][ T4338] udevd[4338]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.208168][ T7408] usb 1-1: USB disconnect, device number 3 [ 302.383420][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 302.774623][ T7511] loop3: detected capacity change from 0 to 1024 [ 302.798328][ T4299] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 302.820844][ T4338] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.833203][ T4299] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 303.173197][ T7512] device syzkaller0 entered promiscuous mode [ 303.902486][ T7521] fido_id[7521]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 306.202322][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 306.215548][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.848'. [ 306.228798][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 306.272032][ T7547] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 306.315014][ T7547] bond0: (slave wlan1): Releasing backup interface [ 306.337044][ T7543] netlink: 'syz.1.850': attribute type 10 has an invalid length. [ 306.368050][ T7543] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 306.386620][ T7551] loop4: detected capacity change from 0 to 256 [ 306.403496][ T7551] exfat: Deprecated parameter 'namecase' [ 306.436247][ T7551] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x45563ead, utbl_chksum : 0xe619d30d) [ 306.642085][ T7556] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.793482][ T7556] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.899716][ T7556] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.064155][ T7556] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.057966][ T7556] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.200646][ T7556] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.442918][ T7556] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.675330][ T4256] Bluetooth: hci4: command 0x0406 tx timeout [ 308.914291][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 309.079795][ T7594] device syzkaller0 entered promiscuous mode [ 309.111567][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.201490][ T7595] bond0: (slave wlan1): Releasing backup interface [ 309.240847][ T7556] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.262203][ T7596] netlink: 'syz.4.864': attribute type 10 has an invalid length. [ 309.281062][ T7596] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 311.147054][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 311.469571][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.866'. [ 311.924245][ T26] audit: type=1326 audit(1748186122.373:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 311.979447][ T26] audit: type=1326 audit(1748186122.383:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 312.015298][ T4305] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 312.060909][ T26] audit: type=1326 audit(1748186122.383:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 312.120233][ T26] audit: type=1326 audit(1748186122.383:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 312.147247][ T26] audit: type=1326 audit(1748186122.383:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 312.173798][ T26] audit: type=1326 audit(1748186122.383:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 312.198514][ T26] audit: type=1326 audit(1748186122.383:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 312.221353][ T26] audit: type=1326 audit(1748186122.383:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 312.245299][ T26] audit: type=1326 audit(1748186122.383:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 312.275874][ T4305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.287342][ T4305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.298288][ T4305] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.311947][ T26] audit: type=1326 audit(1748186122.383:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 312.334666][ T4305] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.344559][ T4305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.364291][ T4305] usb 1-1: config 0 descriptor?? [ 312.781096][ T4305] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 312.800799][ T4305] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 312.958774][ T7630] loop3: detected capacity change from 0 to 512 [ 312.996070][ T7630] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.002597][ T7630] ext4: Unknown parameter 'seclabel' [ 313.028710][ T4305] usb 1-1: USB disconnect, device number 4 [ 313.267534][ T7607] loop1: detected capacity change from 0 to 131072 [ 313.286809][ T7607] F2FS-fs (loop1): invalid crc value [ 313.302735][ T7607] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 313.388734][ T7607] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 313.937916][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 314.235761][ T7646] device syzkaller0 entered promiscuous mode [ 316.844422][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.850956][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.067260][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.084781][ T7653] bond0: (slave wlan1): Releasing backup interface [ 317.101852][ T7659] netlink: 'syz.1.876': attribute type 10 has an invalid length. [ 317.112789][ T7659] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 317.141388][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.882'. [ 317.478406][ T7701] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.513500][ T7701] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.533314][ T7701] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.558979][ T7701] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.695194][ T952] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 318.017166][ T952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.032160][ T952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.043599][ T952] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.136869][ T952] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.146891][ T952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.415639][ T952] usb 6-1: config 0 descriptor?? [ 319.148932][ T952] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 319.161148][ T952] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 319.959466][ T952] usb 6-1: USB disconnect, device number 2 [ 320.080526][ T7728] fido_id[7728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 320.281412][ T7731] device syzkaller0 entered promiscuous mode [ 322.819416][ T7738] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.838707][ T7738] bond0: (slave wlan1): Releasing backup interface [ 322.850791][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 322.863517][ T7740] netlink: 'syz.1.898': attribute type 10 has an invalid length. [ 322.880165][ T7740] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 322.897414][ T7749] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.009906][ T7749] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.148008][ T7749] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.230444][ T7766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.902'. [ 323.277532][ T7749] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.413290][ T7749] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.458650][ T7749] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.490230][ T7749] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.526418][ T7749] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.412440][ T952] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 324.540974][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.913'. [ 324.563803][ T7794] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 324.573277][ T7794] FAT-fs (loop11): unable to read boot sector [ 324.626630][ T952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.756837][ T952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.922621][ T952] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 325.165947][ T7796] fuse: Unknown parameter 'user_id00000000000000000000' [ 325.173107][ T952] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 325.216285][ T952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.301692][ T952] usb 4-1: config 0 descriptor?? [ 325.501978][ T7798] device syzkaller0 entered promiscuous mode [ 325.743462][ T952] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 325.764628][ T952] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 325.976328][ T952] usb 4-1: USB disconnect, device number 7 [ 326.884871][ T7788] loop0: detected capacity change from 0 to 131072 [ 326.924870][ T7788] F2FS-fs (loop0): invalid crc value [ 326.974485][ T7788] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 327.121871][ T7788] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 328.539011][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 328.550706][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.586395][ T7808] bond0: (slave wlan1): Releasing backup interface [ 328.609780][ T7810] netlink: 'syz.1.916': attribute type 10 has an invalid length. [ 328.637794][ T7810] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 328.668135][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.917'. [ 328.693884][ T7829] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.807690][ T7829] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.880660][ T7829] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.949616][ T7829] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.978844][ T7843] loop5: detected capacity change from 0 to 2048 [ 329.046667][ T7843] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 329.090382][ T7829] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.107113][ T7829] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.122668][ T7829] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.139086][ T7829] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.179433][ T5921] EXT4-fs (loop5): unmounting filesystem. [ 330.955559][ T7870] loop3: detected capacity change from 0 to 512 [ 330.972451][ T7870] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 331.102594][ T7870] EXT4-fs (loop3): 1 truncate cleaned up [ 331.108390][ T7870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 331.771818][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 332.030455][ T7875] bond0: (slave wlan1): Releasing backup interface [ 332.110006][ T7876] netlink: 'syz.4.930': attribute type 10 has an invalid length. [ 332.249573][ T7876] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 332.819262][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 333.304450][ T7895] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.354685][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.934'. [ 333.468058][ T7895] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.554898][ T7895] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.593710][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 333.663753][ T7895] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.801123][ T7912] loop1: detected capacity change from 0 to 512 [ 333.864307][ T7912] EXT4-fs (loop1): 1 orphan inode deleted [ 333.871971][ T7912] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 333.881999][ T4408] __quota_error: 12 callbacks suppressed [ 333.882030][ T4408] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 333.902304][ T7912] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.943013][ T4408] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:8: Failed to release dquot type 1 [ 335.041233][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 335.980666][ T7930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 336.004477][ T7930] bond0: (slave wlan1): Releasing backup interface [ 336.017014][ T7931] netlink: 'syz.1.941': attribute type 10 has an invalid length. [ 336.105555][ T7931] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 336.127800][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.942'. [ 336.726587][ T7948] loop4: detected capacity change from 0 to 512 [ 336.801457][ T7948] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 337.010530][ T7948] EXT4-fs (loop4): 1 truncate cleaned up [ 337.016390][ T7948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 338.619755][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 341.420069][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 341.444686][ T7895] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.464580][ T7895] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.501575][ T7895] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.541570][ T7895] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.880328][ T7991] loop4: detected capacity change from 0 to 256 [ 341.900952][ T7991] FAT-fs (loop4): Directory bread(block 64) failed [ 341.907656][ T7991] FAT-fs (loop4): Directory bread(block 65) failed [ 341.914315][ T7991] FAT-fs (loop4): Directory bread(block 66) failed [ 341.920930][ T7991] FAT-fs (loop4): Directory bread(block 67) failed [ 341.927643][ T7991] FAT-fs (loop4): Directory bread(block 68) failed [ 341.934181][ T7991] FAT-fs (loop4): Directory bread(block 69) failed [ 341.940827][ T7991] FAT-fs (loop4): Directory bread(block 70) failed [ 341.947428][ T7991] FAT-fs (loop4): Directory bread(block 71) failed [ 341.954012][ T7991] FAT-fs (loop4): Directory bread(block 72) failed [ 341.960595][ T7991] FAT-fs (loop4): Directory bread(block 73) failed [ 342.033215][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 343.454733][ T7994] bond0: (slave wlan1): Releasing backup interface [ 343.595105][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.954'. [ 343.708203][ T8010] loop1: detected capacity change from 0 to 256 [ 343.743719][ T8010] exfat: Deprecated parameter 'namecase' [ 343.819858][ T8010] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 343.935621][ T8012] loop3: detected capacity change from 0 to 512 [ 344.220898][ T8012] EXT4-fs (loop3): 1 orphan inode deleted [ 344.226779][ T8012] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 344.240881][ T8012] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.377418][ T4429] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 345.411679][ T4429] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:10: Failed to release dquot type 1 [ 345.828649][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 345.981598][ T8023] loop1: detected capacity change from 0 to 8192 [ 346.055282][ T8023] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 346.774909][ T8023] overlayfs: filesystem on './file1' not supported [ 346.812797][ T8029] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.984286][ T8029] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.081385][ T8029] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.192144][ T8029] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.399557][ T8029] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.414084][ T8029] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.434771][ T8029] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.454130][ T8029] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.508753][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.968'. [ 348.499186][ T8061] loop0: detected capacity change from 0 to 256 [ 348.516336][ T8061] FAT-fs (loop0): Directory bread(block 64) failed [ 348.522915][ T8061] FAT-fs (loop0): Directory bread(block 65) failed [ 348.529628][ T8061] FAT-fs (loop0): Directory bread(block 66) failed [ 348.536273][ T8061] FAT-fs (loop0): Directory bread(block 67) failed [ 348.543090][ T8061] FAT-fs (loop0): Directory bread(block 68) failed [ 348.549704][ T8061] FAT-fs (loop0): Directory bread(block 69) failed [ 348.556377][ T8061] FAT-fs (loop0): Directory bread(block 70) failed [ 348.562919][ T8061] FAT-fs (loop0): Directory bread(block 71) failed [ 348.569558][ T8061] FAT-fs (loop0): Directory bread(block 72) failed [ 348.576115][ T8061] FAT-fs (loop0): Directory bread(block 73) failed [ 348.660844][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.880554][ T8067] bond0: (slave wlan1): Releasing backup interface [ 350.465896][ T8081] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 350.804091][ T8082] loop0: detected capacity change from 0 to 512 [ 351.112277][ T8082] EXT4-fs (loop0): 1 orphan inode deleted [ 351.118180][ T8082] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 351.130845][ T8082] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.556688][ T4533] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 351.585344][ T4533] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:13: Failed to release dquot type 1 [ 352.039980][ T8087] loop1: detected capacity change from 0 to 512 [ 352.096827][ T8087] EXT4-fs: Ignoring removed oldalloc option [ 352.340392][ T8087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.270976][ T8091] loop4: detected capacity change from 0 to 8192 [ 353.283880][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 353.297158][ T8087] EXT4-fs (loop1): orphan cleanup on readonly fs [ 353.317719][ T8087] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 353.348857][ T8091] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.359498][ T8087] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 353.359590][ T8087] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.979: Failed to acquire dquot type 1 [ 353.361944][ T8087] EXT4-fs (loop1): 1 truncate cleaned up [ 353.424655][ T8087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 353.549251][ T8091] overlayfs: filesystem on './file1' not supported [ 353.666188][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 354.129003][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 354.950263][ T8113] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.101311][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'. [ 355.158932][ T8113] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.896848][ T8113] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.943207][ T8137] loop5: detected capacity change from 0 to 256 [ 356.020818][ T8113] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.296623][ T8113] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.345075][ T8113] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.390079][ T8113] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.431928][ T8113] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.539116][ T8148] kvm [8147]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 356.618419][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 357.203399][ T8148] kvm [8147]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 357.235983][ T8148] kvm [8147]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80 [ 357.306841][ T8148] kvm [8147]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x186 data 0x80 [ 358.274086][ T8165] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.608286][ T8165] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.630288][ T8172] loop5: detected capacity change from 0 to 8192 [ 358.669457][ T8172] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 358.801328][ T8172] overlayfs: filesystem on './file1' not supported [ 358.831346][ T8165] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.910811][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1000'. [ 359.165088][ T8165] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.305806][ T8195] binder: 8182:8195 ioctl 4018620d 0 returned -22 [ 359.331525][ T8195] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1003'. [ 359.827846][ T4302] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 359.857961][ T8165] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.893622][ T8165] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.912027][ T8165] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.106730][ T4302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.119731][ T4302] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 360.129401][ T4302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.171803][ T8206] loop3: detected capacity change from 0 to 512 [ 360.208552][ T4302] usb 6-1: config 0 descriptor?? [ 360.224667][ T8165] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.080620][ T8206] EXT4-fs (loop3): 1 orphan inode deleted [ 361.094270][ T8206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 361.103913][ T11] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 361.118384][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:1: Failed to release dquot type 1 [ 361.131450][ T8206] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.468364][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 362.409203][ T4302] uclogic 0003:2179:0053.000D: interface is invalid, ignoring [ 362.624436][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 362.655070][ T5801] usb 6-1: USB disconnect, device number 3 [ 363.849975][ T8247] loop4: detected capacity change from 0 to 1024 [ 363.920604][ T8247] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 364.778163][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 366.015347][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 366.495254][ T26] audit: type=1326 audit(1748186176.943:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3478e969 code=0x7fc00000 [ 366.689908][ T8280] loop1: detected capacity change from 0 to 512 [ 366.979382][ T8280] EXT4-fs (loop1): 1 orphan inode deleted [ 366.985276][ T8280] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 366.998598][ T8280] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.385492][ T4432] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 367.490165][ T4432] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:12: Failed to release dquot type 1 [ 367.532407][ T26] audit: type=1326 audit(1748186176.943:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc3478e969 code=0x7fc00000 [ 367.700675][ T8286] loop3: detected capacity change from 0 to 512 [ 367.756124][ T26] audit: type=1326 audit(1748186176.943:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3478e969 code=0x7fc00000 [ 367.796163][ T8286] EXT4-fs: Ignoring removed oldalloc option [ 367.854849][ T8286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 367.944371][ T8286] EXT4-fs (loop3): orphan cleanup on readonly fs [ 367.974364][ T26] audit: type=1326 audit(1748186176.943:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3478e969 code=0x7fc00000 [ 368.026240][ T8286] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 368.070319][ T8286] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 368.115082][ T26] audit: type=1326 audit(1748186176.943:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3478e969 code=0x7fc00000 [ 368.148180][ T8286] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1026: Failed to acquire dquot type 1 [ 368.213120][ T8286] EXT4-fs (loop3): 1 truncate cleaned up [ 368.251151][ T26] audit: type=1326 audit(1748186176.943:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3478e969 code=0x7fc00000 [ 368.312821][ T26] audit: type=1326 audit(1748186176.943:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3478e969 code=0x7fc00000 [ 368.386209][ T8286] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 368.551347][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 368.584103][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 368.804739][ T8297] loop3: detected capacity change from 0 to 256 [ 368.962438][ T8303] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 374.217279][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 375.414579][ T8375] binder: 8368:8375 ioctl 4018620d 0 returned -22 [ 375.426082][ T8375] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1052'. [ 376.557547][ T8391] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 376.983234][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 377.111336][ T8409] loop3: detected capacity change from 0 to 512 [ 377.125583][ T8409] EXT4-fs: Ignoring removed oldalloc option [ 377.209738][ T8409] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 378.035869][ T8409] EXT4-fs (loop3): orphan cleanup on readonly fs [ 378.049062][ T8409] __quota_error: 53 callbacks suppressed [ 378.049104][ T8409] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 378.064716][ T8409] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 378.074218][ T8409] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1064: Failed to acquire dquot type 1 [ 378.095034][ T8409] EXT4-fs (loop3): 1 truncate cleaned up [ 378.252170][ T8409] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 378.387465][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.393827][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.909709][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1066'. [ 380.101985][ T8430] loop1: detected capacity change from 0 to 1024 [ 380.150299][ T8430] EXT4-fs: Ignoring removed orlov option [ 380.258000][ T8430] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 380.599297][ T8438] binder: 8432:8438 ioctl 4018620d 0 returned -22 [ 380.611151][ T8436] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1071'. [ 380.622791][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 380.843688][ T8445] serio: Serial port ptm0 [ 380.934222][ T8447] loop4: detected capacity change from 0 to 512 [ 380.953507][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 381.069858][ T8454] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 381.091278][ T8447] EXT4-fs (loop4): 1 orphan inode deleted [ 381.116179][ T6143] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 381.160597][ T8447] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 381.194082][ T6143] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:15: Failed to release dquot type 1 [ 381.201217][ T8447] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.397173][ T8454] bond0: (slave wlan1): Releasing backup interface [ 382.140724][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 383.570453][ T8504] xt_TPROXY: Can be used only with -p tcp or -p udp [ 383.690260][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1087'. [ 383.948996][ T8517] loop0: detected capacity change from 0 to 512 [ 384.099809][ T8517] EXT4-fs (loop0): 1 orphan inode deleted [ 384.116393][ T8517] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 384.129975][ T4430] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 384.144446][ T4430] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:11: Failed to release dquot type 1 [ 384.187200][ T8517] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.229309][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 385.448208][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 385.807607][ T8535] device syzkaller0 entered promiscuous mode [ 388.072416][ T8565] loop1: detected capacity change from 0 to 512 [ 388.131129][ T8565] EXT4-fs (loop1): 1 orphan inode deleted [ 388.140043][ T8565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 388.150851][ T11] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 388.156395][ T8565] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.167807][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:1: Failed to release dquot type 1 [ 390.031884][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1105'. [ 390.181387][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 392.315558][ T8602] serio: Serial port ptm0 [ 392.634198][ T8614] loop4: detected capacity change from 0 to 512 [ 392.777246][ T8614] EXT4-fs (loop4): 1 orphan inode deleted [ 392.808769][ T6143] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 392.838285][ T8614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 392.839210][ T6143] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:15: Failed to release dquot type 1 [ 392.905246][ T8625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1120'. [ 392.923488][ T8614] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.183824][ T8631] overlayfs: failed to resolve './file2': -2 [ 393.305255][ T8626] device syzkaller0 entered promiscuous mode [ 394.387548][ T4301] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 394.635480][ T4301] usb 6-1: Using ep0 maxpacket: 16 [ 394.651069][ T4301] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.704717][ T4301] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.760899][ T4301] usb 6-1: config 0 interface 0 has no altsetting 0 [ 394.797532][ T4301] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 394.844121][ T4301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.004863][ T4301] usb 6-1: config 0 descriptor?? [ 395.622496][ T4301] usb 6-1: USB disconnect, device number 4 [ 396.742842][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 397.064243][ T8668] loop0: detected capacity change from 0 to 1024 [ 397.071623][ T8668] EXT4-fs: Ignoring removed mblk_io_submit option [ 397.083936][ T8668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 397.127229][ T8668] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.1132: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 397.146538][ T8668] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1132: couldn't read orphan inode 11 (err -117) [ 397.158855][ T8668] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 397.261004][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 397.586232][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 398.273054][ T8699] loop1: detected capacity change from 0 to 512 [ 398.410706][ T8700] device syzkaller0 entered promiscuous mode [ 398.435858][ T8699] EXT4-fs (loop1): 1 orphan inode deleted [ 398.441849][ T8699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 398.455506][ T4430] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 398.470101][ T8699] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.481125][ T4430] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:11: Failed to release dquot type 1 [ 399.439961][ T26] audit: type=1326 audit(1748186209.893:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.5.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3478e969 code=0x7ffc0000 [ 399.528372][ T26] audit: type=1326 audit(1748186209.923:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.5.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3478e969 code=0x7ffc0000 [ 399.609466][ T26] audit: type=1326 audit(1748186209.923:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.5.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7efc3478e969 code=0x7ffc0000 [ 399.671426][ T26] audit: type=1326 audit(1748186209.923:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.5.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3478e969 code=0x7ffc0000 [ 399.711769][ T26] audit: type=1326 audit(1748186209.923:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.5.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3478e969 code=0x7ffc0000 [ 399.855251][ T8243] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 400.149388][ T8243] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 400.157918][ T8243] usb 6-1: config 0 has no interface number 0 [ 400.176653][ T8243] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 400.196821][ T8243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.204943][ T8243] usb 6-1: Product: syz [ 400.209238][ T8243] usb 6-1: Manufacturer: syz [ 400.213860][ T8243] usb 6-1: SerialNumber: syz [ 400.236376][ T8243] usb 6-1: config 0 descriptor?? [ 400.872652][ T8243] asix 6-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 400.884672][ T8243] asix: probe of 6-1:0.239 failed with error -71 [ 400.898748][ T8243] usb 6-1: USB disconnect, device number 5 [ 402.364494][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 402.445724][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1153'. [ 402.684775][ T8759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.851800][ T8763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 402.861470][ T8763] FAT-fs (loop1): unable to read boot sector [ 403.538919][ T8759] bond0: (slave wlan1): Releasing backup interface [ 403.806664][ T8758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1156'. [ 405.108897][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1167'. [ 405.135803][ T41] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 405.391972][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.532262][ T41] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 405.730220][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.781793][ T8795] loop1: detected capacity change from 0 to 256 [ 405.819444][ T8795] FAT-fs (loop1): Directory bread(block 64) failed [ 405.826895][ T8795] FAT-fs (loop1): Directory bread(block 65) failed [ 405.833519][ T8795] FAT-fs (loop1): Directory bread(block 66) failed [ 405.840205][ T8795] FAT-fs (loop1): Directory bread(block 67) failed [ 405.846824][ T8795] FAT-fs (loop1): Directory bread(block 68) failed [ 405.853362][ T8795] FAT-fs (loop1): Directory bread(block 69) failed [ 405.859978][ T8795] FAT-fs (loop1): Directory bread(block 70) failed [ 405.866578][ T8795] FAT-fs (loop1): Directory bread(block 71) failed [ 405.873150][ T8795] FAT-fs (loop1): Directory bread(block 72) failed [ 405.879733][ T8795] FAT-fs (loop1): Directory bread(block 73) failed [ 405.896913][ T41] usb 1-1: config 0 descriptor?? [ 406.191313][ T8801] device syzkaller0 entered promiscuous mode [ 406.747392][ T41] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 406.814494][ T41] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000F/input/input9 [ 406.991275][ T41] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 407.332384][ T8824] binder: binder_mmap: 8782 200000000000-200000b36000 bad vm_flags failed -1 [ 407.521425][ T8828] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 407.530981][ T8828] FAT-fs (loop9): unable to read boot sector [ 410.352775][ T8813] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 410.402492][ T8784] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 410.619256][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1180'. [ 410.667948][ T4301] usb 1-1: USB disconnect, device number 5 [ 410.733245][ T8852] fuse: Bad value for 'fd' [ 411.246761][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 411.861453][ T8870] loop3: detected capacity change from 0 to 512 [ 411.982322][ T8870] EXT4-fs (loop3): 1 orphan inode deleted [ 412.019718][ T6143] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 412.030050][ T6143] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:15: Failed to release dquot type 1 [ 412.042209][ T8870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 412.090975][ T8870] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.161518][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1188'. [ 412.173215][ T8883] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 412.182621][ T8883] FAT-fs (loop11): unable to read boot sector [ 413.206431][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 413.326784][ T8891] device syzkaller0 entered promiscuous mode [ 416.078054][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 416.096012][ T8901] bond0: (slave wlan1): Releasing backup interface [ 417.224929][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 417.262745][ T8942] loop4: detected capacity change from 0 to 256 [ 417.308239][ T8942] FAT-fs (loop4): Directory bread(block 64) failed [ 417.314838][ T8942] FAT-fs (loop4): Directory bread(block 65) failed [ 417.321555][ T8942] FAT-fs (loop4): Directory bread(block 66) failed [ 417.329228][ T8942] FAT-fs (loop4): Directory bread(block 67) failed [ 417.336136][ T8942] FAT-fs (loop4): Directory bread(block 68) failed [ 417.343009][ T8942] FAT-fs (loop4): Directory bread(block 69) failed [ 417.349626][ T8942] FAT-fs (loop4): Directory bread(block 70) failed [ 417.356361][ T8942] FAT-fs (loop4): Directory bread(block 71) failed [ 417.362934][ T8942] FAT-fs (loop4): Directory bread(block 72) failed [ 417.369500][ T8942] FAT-fs (loop4): Directory bread(block 73) failed [ 417.404810][ T8945] loop3: detected capacity change from 0 to 512 [ 417.535921][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1200'. [ 417.728956][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 417.739990][ T8939] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 417.749221][ T8939] FAT-fs (loop1): unable to read boot sector [ 417.958811][ T8945] EXT4-fs (loop3): 1 orphan inode deleted [ 417.976925][ T60] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 417.997439][ T8945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 418.019556][ T60] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:4: Failed to release dquot type 1 [ 418.031778][ T8945] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.018223][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 419.268501][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 420.724807][ T8999] fuse: Bad value for 'fd' [ 421.014721][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1217'. [ 421.589970][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1218'. [ 422.002645][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 422.014111][ T9027] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 422.023392][ T9027] FAT-fs (loop7): unable to read boot sector [ 422.244023][ T9031] loop4: detected capacity change from 0 to 512 [ 422.342069][ T9031] EXT4-fs (loop4): 1 orphan inode deleted [ 422.356448][ T4432] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 422.380030][ T4432] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:12: Failed to release dquot type 1 [ 422.395978][ T9031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 422.473637][ T9031] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.198628][ T9043] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.402562][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 423.868212][ T9060] loop1: detected capacity change from 0 to 256 [ 424.448238][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 424.660942][ T9060] FAT-fs (loop1): Directory bread(block 64) failed [ 424.667683][ T9060] FAT-fs (loop1): Directory bread(block 65) failed [ 424.674299][ T9060] FAT-fs (loop1): Directory bread(block 66) failed [ 424.681042][ T9060] FAT-fs (loop1): Directory bread(block 67) failed [ 424.687649][ T9060] FAT-fs (loop1): Directory bread(block 68) failed [ 424.694180][ T9060] FAT-fs (loop1): Directory bread(block 69) failed [ 424.700814][ T9060] FAT-fs (loop1): Directory bread(block 70) failed [ 424.707388][ T9060] FAT-fs (loop1): Directory bread(block 71) failed [ 424.713975][ T9060] FAT-fs (loop1): Directory bread(block 72) failed [ 424.720551][ T9060] FAT-fs (loop1): Directory bread(block 73) failed [ 425.594546][ T9078] fuse: Bad value for 'fd' [ 425.907132][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'. [ 426.080530][ T9093] loop3: detected capacity change from 0 to 512 [ 426.223704][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1237'. [ 426.235324][ T9096] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 426.244518][ T9096] FAT-fs (loop9): unable to read boot sector [ 426.253876][ T9093] EXT4-fs (loop3): 1 orphan inode deleted [ 426.280889][ T60] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 426.294177][ T9093] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 426.306538][ T60] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:4: Failed to release dquot type 1 [ 426.329792][ T9093] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.361182][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 427.319897][ T9110] loop0: detected capacity change from 0 to 1024 [ 427.363269][ T9110] EXT4-fs: Ignoring removed orlov option [ 427.390010][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 427.576083][ T9110] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 428.645680][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 428.924448][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1245'. [ 430.001514][ T9144] loop0: detected capacity change from 0 to 256 [ 430.025084][ T9144] FAT-fs (loop0): Directory bread(block 64) failed [ 430.031834][ T9144] FAT-fs (loop0): Directory bread(block 65) failed [ 430.038637][ T9144] FAT-fs (loop0): Directory bread(block 66) failed [ 430.045287][ T9144] FAT-fs (loop0): Directory bread(block 67) failed [ 430.052042][ T9144] FAT-fs (loop0): Directory bread(block 68) failed [ 430.058765][ T9144] FAT-fs (loop0): Directory bread(block 69) failed [ 430.065588][ T9144] FAT-fs (loop0): Directory bread(block 70) failed [ 430.072142][ T9144] FAT-fs (loop0): Directory bread(block 71) failed [ 430.078815][ T9144] FAT-fs (loop0): Directory bread(block 72) failed [ 430.085412][ T9144] FAT-fs (loop0): Directory bread(block 73) failed [ 430.200967][ T9150] fuse: Bad value for 'fd' [ 430.351465][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1249'. [ 431.564152][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 431.719097][ T9178] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 431.728346][ T9178] FAT-fs (loop1): unable to read boot sector [ 431.768438][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 432.268212][ T9188] loop0: detected capacity change from 0 to 512 [ 432.325964][ T9188] EXT4-fs (loop0): 1 orphan inode deleted [ 432.342699][ T9188] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 432.352893][ T2927] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 432.368959][ T2927] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:5: Failed to release dquot type 1 [ 432.390265][ T9188] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.652610][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 433.542468][ T9205] fuse: Bad value for 'fd' [ 433.682829][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 433.706888][ T9214] loop5: detected capacity change from 0 to 256 [ 433.739522][ T9214] FAT-fs (loop5): Directory bread(block 64) failed [ 433.746166][ T9214] FAT-fs (loop5): Directory bread(block 65) failed [ 433.752817][ T9214] FAT-fs (loop5): Directory bread(block 66) failed [ 433.759419][ T9214] FAT-fs (loop5): Directory bread(block 67) failed [ 433.766031][ T9214] FAT-fs (loop5): Directory bread(block 68) failed [ 433.772569][ T9214] FAT-fs (loop5): Directory bread(block 69) failed [ 433.779199][ T9214] FAT-fs (loop5): Directory bread(block 70) failed [ 433.785762][ T9214] FAT-fs (loop5): Directory bread(block 71) failed [ 433.792355][ T9214] FAT-fs (loop5): Directory bread(block 72) failed [ 433.799384][ T9214] FAT-fs (loop5): Directory bread(block 73) failed [ 434.725438][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1265'. [ 435.132215][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 435.184017][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 435.196448][ T9241] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 435.205693][ T9241] FAT-fs (loop7): unable to read boot sector [ 435.670904][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 437.089123][ T9266] loop3: detected capacity change from 0 to 512 [ 437.288226][ T9266] EXT4-fs (loop3): 1 orphan inode deleted [ 437.306426][ T4350] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 437.319487][ T9266] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 437.352753][ T4350] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:7: Failed to release dquot type 1 [ 437.402701][ T9266] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.212967][ T9279] loop1: detected capacity change from 0 to 256 [ 438.247647][ T9279] FAT-fs (loop1): Directory bread(block 64) failed [ 438.254267][ T9279] FAT-fs (loop1): Directory bread(block 65) failed [ 438.261015][ T9279] FAT-fs (loop1): Directory bread(block 66) failed [ 438.267590][ T9279] FAT-fs (loop1): Directory bread(block 67) failed [ 438.274241][ T9279] FAT-fs (loop1): Directory bread(block 68) failed [ 438.280847][ T9279] FAT-fs (loop1): Directory bread(block 69) failed [ 438.287455][ T9279] FAT-fs (loop1): Directory bread(block 70) failed [ 438.293999][ T9279] FAT-fs (loop1): Directory bread(block 71) failed [ 438.300728][ T9279] FAT-fs (loop1): Directory bread(block 72) failed [ 438.307308][ T9279] FAT-fs (loop1): Directory bread(block 73) failed [ 438.823262][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 439.215455][ T9291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 439.294169][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1281'. [ 439.586793][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 439.598129][ T9308] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 439.607350][ T9308] FAT-fs (loop3): unable to read boot sector [ 439.709696][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.873869][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.005324][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'. [ 440.857857][ T26] audit: type=1326 audit(1748186251.313:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214b8e969 code=0x7ffc0000 [ 440.891862][ T9329] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.949944][ T26] audit: type=1326 audit(1748186251.373:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2214b8e969 code=0x7ffc0000 [ 441.014706][ T9329] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.022102][ T26] audit: type=1326 audit(1748186251.373:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214b8e969 code=0x7ffc0000 [ 441.043760][ T9334] loop4: detected capacity change from 0 to 512 [ 441.078814][ T26] audit: type=1326 audit(1748186251.373:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2214b8e969 code=0x7ffc0000 [ 441.104177][ T26] audit: type=1326 audit(1748186251.373:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214b8e969 code=0x7ffc0000 [ 441.106256][ T9329] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.140848][ T26] audit: type=1326 audit(1748186251.373:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f2214b8e969 code=0x7ffc0000 [ 441.165866][ T26] audit: type=1326 audit(1748186251.373:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214b8e969 code=0x7ffc0000 [ 441.186126][ T9334] EXT4-fs (loop4): 1 orphan inode deleted [ 441.188681][ T26] audit: type=1326 audit(1748186251.373:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2214b8e969 code=0x7ffc0000 [ 441.194224][ T9334] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 441.216748][ T26] audit: type=1326 audit(1748186251.373:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.1.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214b8e969 code=0x7ffc0000 [ 441.231807][ T11] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 441.262359][ T9334] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.282545][ T9329] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.292617][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:1: Failed to release dquot type 1 [ 441.508727][ T9329] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.538572][ T9329] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.561795][ T9329] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.623157][ T9329] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.685940][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 442.946631][ T9352] loop5: detected capacity change from 0 to 256 [ 442.981438][ T9352] FAT-fs (loop5): Directory bread(block 64) failed [ 442.988113][ T9352] FAT-fs (loop5): Directory bread(block 65) failed [ 442.994699][ T9352] FAT-fs (loop5): Directory bread(block 66) failed [ 443.001351][ T9352] FAT-fs (loop5): Directory bread(block 67) failed [ 443.008001][ T9352] FAT-fs (loop5): Directory bread(block 68) failed [ 443.014548][ T9352] FAT-fs (loop5): Directory bread(block 69) failed [ 443.021170][ T9352] FAT-fs (loop5): Directory bread(block 70) failed [ 443.027731][ T9352] FAT-fs (loop5): Directory bread(block 71) failed [ 443.034327][ T9352] FAT-fs (loop5): Directory bread(block 72) failed [ 443.041010][ T9352] FAT-fs (loop5): Directory bread(block 73) failed [ 443.110965][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1298'. [ 443.122244][ T9357] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 443.131551][ T9357] FAT-fs (loop1): unable to read boot sector [ 443.498053][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 443.782838][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1301'. [ 444.081249][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1302'. [ 444.933928][ T9390] loop0: detected capacity change from 0 to 512 [ 444.993954][ T9390] EXT4-fs (loop0): 1 orphan inode deleted [ 445.020056][ T9390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 445.046624][ T4432] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:12: Failed to release dquot type 1 [ 445.115751][ T9390] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.131222][ T9396] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.250308][ T9396] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.340495][ T9396] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.808444][ T9396] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.891914][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 447.065942][ T9413] loop4: detected capacity change from 0 to 256 [ 447.106972][ T9413] FAT-fs (loop4): Directory bread(block 64) failed [ 447.113576][ T9413] FAT-fs (loop4): Directory bread(block 65) failed [ 447.120450][ T9413] FAT-fs (loop4): Directory bread(block 66) failed [ 447.127055][ T9413] FAT-fs (loop4): Directory bread(block 67) failed [ 447.133642][ T9413] FAT-fs (loop4): Directory bread(block 68) failed [ 447.140257][ T9413] FAT-fs (loop4): Directory bread(block 69) failed [ 447.147005][ T9413] FAT-fs (loop4): Directory bread(block 70) failed [ 447.153802][ T9413] FAT-fs (loop4): Directory bread(block 71) failed [ 447.160448][ T9413] FAT-fs (loop4): Directory bread(block 72) failed [ 447.167329][ T9413] FAT-fs (loop4): Directory bread(block 73) failed [ 447.280757][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 447.848950][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 448.711272][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1317'. [ 448.909438][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1313'. [ 448.970558][ T9448] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 448.979784][ T9448] FAT-fs (loop3): unable to read boot sector [ 449.409398][ T9459] loop4: detected capacity change from 0 to 512 [ 449.472892][ T9459] EXT4-fs (loop4): 1 orphan inode deleted [ 449.483125][ T9459] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 449.493366][ T4429] __quota_error: 10 callbacks suppressed [ 449.493382][ T4429] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 449.581046][ T9459] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.596918][ T4429] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:10: Failed to release dquot type 1 [ 449.655446][ T4305] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 449.761205][ T9468] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.848739][ T4305] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 449.867211][ T4305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.893582][ T4305] usb 2-1: config 0 descriptor?? [ 449.909631][ T9468] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.990536][ T9468] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.200557][ T9468] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.360152][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 451.607917][ T9468] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.645741][ T9468] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.676022][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 451.734891][ T9468] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.790699][ T9468] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.159787][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 452.171986][ T9499] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 452.181433][ T9499] FAT-fs (loop7): unable to read boot sector [ 452.328986][ T4305] usb 2-1: Cannot set autoneg [ 452.333996][ T4305] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 452.409648][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1334'. [ 452.434082][ T4305] usb 2-1: USB disconnect, device number 8 [ 452.604209][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 452.787862][ T9516] loop5: detected capacity change from 0 to 256 [ 452.817703][ T9516] FAT-fs (loop5): Directory bread(block 64) failed [ 452.824278][ T9516] FAT-fs (loop5): Directory bread(block 65) failed [ 452.831532][ T9516] FAT-fs (loop5): Directory bread(block 66) failed [ 452.838139][ T9516] FAT-fs (loop5): Directory bread(block 67) failed [ 452.844718][ T9516] FAT-fs (loop5): Directory bread(block 68) failed [ 452.851334][ T9516] FAT-fs (loop5): Directory bread(block 69) failed [ 452.858039][ T9516] FAT-fs (loop5): Directory bread(block 70) failed [ 452.864578][ T9516] FAT-fs (loop5): Directory bread(block 71) failed [ 452.871273][ T9516] FAT-fs (loop5): Directory bread(block 72) failed [ 452.877869][ T9516] FAT-fs (loop5): Directory bread(block 73) failed [ 453.202414][ T9523] loop4: detected capacity change from 0 to 512 [ 453.332037][ T9523] EXT4-fs (loop4): 1 orphan inode deleted [ 453.340103][ T9523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 453.353577][ T4350] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 453.389174][ T4350] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:7: Failed to release dquot type 1 [ 453.415332][ T9523] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.955455][ T9541] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.089932][ T9541] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.110112][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 454.193044][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 454.290158][ T9541] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.404807][ T9541] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.478129][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 454.489563][ T9553] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 454.498787][ T9553] FAT-fs (loop9): unable to read boot sector [ 454.585699][ T9541] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.600866][ T9541] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.729203][ T9541] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.774931][ T9541] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.842900][ T9566] loop0: detected capacity change from 0 to 256 [ 454.868233][ T9566] FAT-fs (loop0): Directory bread(block 64) failed [ 454.874791][ T9566] FAT-fs (loop0): Directory bread(block 65) failed [ 454.881517][ T9566] FAT-fs (loop0): Directory bread(block 66) failed [ 454.888113][ T9566] FAT-fs (loop0): Directory bread(block 67) failed [ 454.894702][ T9566] FAT-fs (loop0): Directory bread(block 68) failed [ 454.901339][ T9566] FAT-fs (loop0): Directory bread(block 69) failed [ 454.907964][ T9566] FAT-fs (loop0): Directory bread(block 70) failed [ 454.914554][ T9566] FAT-fs (loop0): Directory bread(block 71) failed [ 454.921211][ T9566] FAT-fs (loop0): Directory bread(block 72) failed [ 454.927793][ T9566] FAT-fs (loop0): Directory bread(block 73) failed [ 455.131450][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1348'. [ 456.022328][ T9585] loop0: detected capacity change from 0 to 512 [ 456.029629][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 456.059873][ T9585] EXT4-fs (loop0): 1 orphan inode deleted [ 456.068108][ T9585] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 456.078684][ T6143] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 456.099133][ T6143] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:15: Failed to release dquot type 1 [ 456.111394][ T9585] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.040335][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 457.051981][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 457.118621][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 457.129762][ T9604] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 457.139502][ T9604] FAT-fs (loop11): unable to read boot sector [ 457.319862][ T9613] loop5: detected capacity change from 0 to 256 [ 457.367583][ T9613] FAT-fs (loop5): Directory bread(block 64) failed [ 457.374217][ T9613] FAT-fs (loop5): Directory bread(block 65) failed [ 457.380945][ T9613] FAT-fs (loop5): Directory bread(block 66) failed [ 457.387581][ T9613] FAT-fs (loop5): Directory bread(block 67) failed [ 457.394470][ T9613] FAT-fs (loop5): Directory bread(block 68) failed [ 457.401120][ T9613] FAT-fs (loop5): Directory bread(block 69) failed [ 457.407787][ T9613] FAT-fs (loop5): Directory bread(block 70) failed [ 457.414326][ T9613] FAT-fs (loop5): Directory bread(block 71) failed [ 457.420987][ T9613] FAT-fs (loop5): Directory bread(block 72) failed [ 457.427590][ T9613] FAT-fs (loop5): Directory bread(block 73) failed [ 457.460857][ T9616] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.534344][ T9616] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.669506][ T9616] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.932388][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1365'. [ 457.963611][ T9616] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.692451][ T9655] loop5: detected capacity change from 0 to 512 [ 459.768835][ T9655] EXT4-fs (loop5): 1 orphan inode deleted [ 459.774619][ T9655] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 459.786303][ T4432] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 459.806320][ T4432] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:12: Failed to release dquot type 1 [ 459.836015][ T9655] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.096139][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 460.107513][ T9663] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 460.116828][ T9663] FAT-fs (loop9): unable to read boot sector [ 460.291097][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 460.389256][ T9673] loop3: detected capacity change from 0 to 256 [ 460.416912][ T9673] FAT-fs (loop3): Directory bread(block 64) failed [ 460.423506][ T9673] FAT-fs (loop3): Directory bread(block 65) failed [ 460.430175][ T9673] FAT-fs (loop3): Directory bread(block 66) failed [ 460.436793][ T9673] FAT-fs (loop3): Directory bread(block 67) failed [ 460.443429][ T9673] FAT-fs (loop3): Directory bread(block 68) failed [ 460.450028][ T9673] FAT-fs (loop3): Directory bread(block 69) failed [ 460.456749][ T9673] FAT-fs (loop3): Directory bread(block 70) failed [ 460.463472][ T9673] FAT-fs (loop3): Directory bread(block 71) failed [ 460.470197][ T9673] FAT-fs (loop3): Directory bread(block 72) failed [ 460.476829][ T9673] FAT-fs (loop3): Directory bread(block 73) failed [ 460.643882][ T5921] EXT4-fs (loop5): unmounting filesystem. [ 460.880148][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'. [ 462.450869][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 462.462115][ T9707] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 462.471448][ T9707] FAT-fs (loop9): unable to read boot sector [ 462.621992][ T9711] loop4: detected capacity change from 0 to 512 [ 462.641525][ T9711] EXT4-fs: inline encryption not supported [ 462.656406][ T9711] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1389: inode #1: comm syz.4.1389: iget: illegal inode # [ 462.679305][ T9711] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1389: error while reading EA inode 1 err=-117 [ 462.700356][ T9711] EXT4-fs (loop4): 1 orphan inode deleted [ 462.731223][ T9711] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 462.758932][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 463.147970][ T9722] loop1: detected capacity change from 0 to 512 [ 463.240292][ T9722] EXT4-fs (loop1): 1 orphan inode deleted [ 463.259568][ T11] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 463.261496][ T9722] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 463.282582][ T9722] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.358312][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:1: Failed to release dquot type 1 [ 463.538667][ T9729] loop5: detected capacity change from 0 to 256 [ 463.566365][ T9729] FAT-fs (loop5): Directory bread(block 64) failed [ 463.573039][ T9729] FAT-fs (loop5): Directory bread(block 65) failed [ 463.579698][ T9729] FAT-fs (loop5): Directory bread(block 66) failed [ 463.586316][ T9729] FAT-fs (loop5): Directory bread(block 67) failed [ 463.592905][ T9729] FAT-fs (loop5): Directory bread(block 68) failed [ 463.599587][ T9729] FAT-fs (loop5): Directory bread(block 69) failed [ 463.606333][ T9729] FAT-fs (loop5): Directory bread(block 70) failed [ 463.612904][ T9729] FAT-fs (loop5): Directory bread(block 71) failed [ 463.619554][ T9729] FAT-fs (loop5): Directory bread(block 72) failed [ 463.626232][ T9729] FAT-fs (loop5): Directory bread(block 73) failed [ 463.689685][ T9616] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.739506][ T9616] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.769096][ T9616] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.788921][ T9616] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.035517][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1394'. [ 464.129820][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 465.057199][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 465.069109][ T9749] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 465.078584][ T9749] FAT-fs (loop7): unable to read boot sector [ 465.171368][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 465.418359][ T9761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 465.737067][ T9768] loop4: detected capacity change from 0 to 256 [ 465.751078][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 465.792398][ T9768] FAT-fs (loop4): Directory bread(block 64) failed [ 465.799368][ T9768] FAT-fs (loop4): Directory bread(block 65) failed [ 465.806074][ T9768] FAT-fs (loop4): Directory bread(block 66) failed [ 465.812595][ T9768] FAT-fs (loop4): Directory bread(block 67) failed [ 465.819288][ T9768] FAT-fs (loop4): Directory bread(block 68) failed [ 465.825889][ T9768] FAT-fs (loop4): Directory bread(block 69) failed [ 465.832490][ T9768] FAT-fs (loop4): Directory bread(block 70) failed [ 465.839141][ T9768] FAT-fs (loop4): Directory bread(block 71) failed [ 465.845790][ T9768] FAT-fs (loop4): Directory bread(block 72) failed [ 465.852308][ T9768] FAT-fs (loop4): Directory bread(block 73) failed [ 466.331061][ T9780] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.349031][ T9782] loop0: detected capacity change from 0 to 512 [ 466.443260][ T9782] EXT4-fs (loop0): 1 orphan inode deleted [ 466.455461][ T6129] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 466.467064][ T9780] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.469358][ T9782] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 466.487044][ T9782] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.520970][ T6129] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:14: Failed to release dquot type 1 [ 466.678343][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'. [ 466.752857][ T9780] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.860976][ T9780] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.001672][ T9780] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.164180][ T9780] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.279371][ T9780] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.299584][ T9780] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.358005][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 468.177389][ T9809] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.246863][ T9809] FAT-fs (loop11): unable to read boot sector [ 468.286658][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 468.894018][ T9831] loop1: detected capacity change from 0 to 256 [ 468.919315][ T9831] FAT-fs (loop1): Directory bread(block 64) failed [ 468.926350][ T9831] FAT-fs (loop1): Directory bread(block 65) failed [ 468.932952][ T9831] FAT-fs (loop1): Directory bread(block 66) failed [ 468.939648][ T9831] FAT-fs (loop1): Directory bread(block 67) failed [ 468.946289][ T9831] FAT-fs (loop1): Directory bread(block 68) failed [ 468.952815][ T9831] FAT-fs (loop1): Directory bread(block 69) failed [ 468.959445][ T9831] FAT-fs (loop1): Directory bread(block 70) failed [ 468.966157][ T9831] FAT-fs (loop1): Directory bread(block 71) failed [ 468.972733][ T9831] FAT-fs (loop1): Directory bread(block 72) failed [ 468.979309][ T9831] FAT-fs (loop1): Directory bread(block 73) failed [ 468.995862][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 469.698518][ T9849] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.763715][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1421'. [ 469.819745][ T9849] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.916372][ T9849] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.986293][ T9849] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.054325][ T9858] loop1: detected capacity change from 0 to 512 [ 470.123210][ T9858] EXT4-fs (loop1): 1 orphan inode deleted [ 470.145600][ T2927] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 470.155149][ T9858] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 470.155699][ T2927] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:5: Failed to release dquot type 1 [ 470.176924][ T9849] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.188375][ T9858] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.266488][ T9849] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.334955][ T9849] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.389619][ T9849] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.997452][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 471.084205][ T9869] device wg2 entered promiscuous mode [ 471.220378][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 471.591737][ T9884] loop4: detected capacity change from 0 to 256 [ 471.616749][ T9884] FAT-fs (loop4): Directory bread(block 64) failed [ 471.623667][ T9884] FAT-fs (loop4): Directory bread(block 65) failed [ 471.631551][ T9884] FAT-fs (loop4): Directory bread(block 66) failed [ 471.638170][ T9884] FAT-fs (loop4): Directory bread(block 67) failed [ 471.644757][ T9884] FAT-fs (loop4): Directory bread(block 68) failed [ 471.651485][ T9884] FAT-fs (loop4): Directory bread(block 69) failed [ 471.658261][ T9884] FAT-fs (loop4): Directory bread(block 70) failed [ 471.664797][ T9884] FAT-fs (loop4): Directory bread(block 71) failed [ 471.671444][ T9884] FAT-fs (loop4): Directory bread(block 72) failed [ 471.678288][ T9884] FAT-fs (loop4): Directory bread(block 73) failed [ 472.071731][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1435'. [ 472.115346][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1434'. [ 472.139737][ T9901] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.224765][ T9901] FAT-fs (loop11): unable to read boot sector [ 472.384009][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 472.873548][ T9913] loop0: detected capacity change from 0 to 512 [ 472.895802][ T9916] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.951176][ T9913] EXT4-fs (loop0): 1 orphan inode deleted [ 472.965248][ T9913] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 472.974348][ T4430] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 472.984584][ T9913] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.007795][ T4430] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:11: Failed to release dquot type 1 [ 473.130024][ T9916] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.234607][ T9916] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.603693][ T9916] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.658521][ T9927] loop3: detected capacity change from 0 to 2048 [ 473.688061][ T9927] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.1441: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 473.727762][ T9927] EXT4-fs (loop3): get root inode failed [ 473.733439][ T9927] EXT4-fs (loop3): mount failed [ 473.846482][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 474.188119][ T9941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 476.311269][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 476.456770][ T9960] loop3: detected capacity change from 0 to 256 [ 476.505399][ T9960] FAT-fs (loop3): Directory bread(block 64) failed [ 476.512005][ T9960] FAT-fs (loop3): Directory bread(block 65) failed [ 476.518704][ T9960] FAT-fs (loop3): Directory bread(block 66) failed [ 476.525316][ T9960] FAT-fs (loop3): Directory bread(block 67) failed [ 476.531902][ T9960] FAT-fs (loop3): Directory bread(block 68) failed [ 476.538547][ T9960] FAT-fs (loop3): Directory bread(block 69) failed [ 476.545382][ T9960] FAT-fs (loop3): Directory bread(block 70) failed [ 476.551918][ T9960] FAT-fs (loop3): Directory bread(block 71) failed [ 476.558569][ T9960] FAT-fs (loop3): Directory bread(block 72) failed [ 476.565130][ T9960] FAT-fs (loop3): Directory bread(block 73) failed [ 476.992075][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 477.641648][ T9976] loop1: detected capacity change from 0 to 512 [ 477.649387][ T9916] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.728587][ T9916] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.766796][ T9976] EXT4-fs (loop1): 1 orphan inode deleted [ 477.772715][ T9976] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 477.781428][ T9916] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.795356][ T4408] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 477.803440][ T9976] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.813670][ T4408] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:8: Failed to release dquot type 1 [ 477.849051][ T9916] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.989860][ T9989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 478.988998][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 479.288061][T10000] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 479.386384][T10000] FAT-fs (loop11): unable to read boot sector [ 479.474121][T10006] loop3: detected capacity change from 0 to 256 [ 479.538517][T10006] FAT-fs (loop3): Directory bread(block 64) failed [ 479.545299][T10006] FAT-fs (loop3): Directory bread(block 65) failed [ 479.551924][T10006] FAT-fs (loop3): Directory bread(block 66) failed [ 479.558531][T10006] FAT-fs (loop3): Directory bread(block 67) failed [ 479.565207][T10006] FAT-fs (loop3): Directory bread(block 68) failed [ 479.571746][T10006] FAT-fs (loop3): Directory bread(block 69) failed [ 479.578425][T10006] FAT-fs (loop3): Directory bread(block 70) failed [ 479.584965][T10006] FAT-fs (loop3): Directory bread(block 71) failed [ 479.591645][T10006] FAT-fs (loop3): Directory bread(block 72) failed [ 479.598235][T10006] FAT-fs (loop3): Directory bread(block 73) failed [ 480.055580][ T4299] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 480.102972][T10002] loop4: detected capacity change from 0 to 40427 [ 480.171805][T10002] F2FS-fs (loop4): Found nat_bits in checkpoint [ 480.248954][T10002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 480.265632][ T4299] usb 4-1: Using ep0 maxpacket: 16 [ 480.272839][ T4299] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 480.294090][ T26] audit: type=1326 audit(1748186290.743:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1338e969 code=0x7ffc0000 [ 480.317461][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.360556][ T26] audit: type=1326 audit(1748186290.743:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1338e969 code=0x7ffc0000 [ 480.457450][ T26] audit: type=1326 audit(1748186290.743:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1c1338e969 code=0x7ffc0000 [ 480.529349][ T26] audit: type=1326 audit(1748186290.743:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1338e969 code=0x7ffc0000 [ 480.781742][ T4299] usb 4-1: config 0 descriptor?? [ 481.219125][ T26] audit: type=1326 audit(1748186290.743:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1338e969 code=0x7ffc0000 [ 481.266772][ T4299] cypress 0003:04B4:BCA1.0010: invalid report_count 45347 [ 481.279428][ T4299] cypress 0003:04B4:BCA1.0010: item 0 2 1 9 parsing failed [ 481.289034][ T26] audit: type=1326 audit(1748186290.743:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1c1338e969 code=0x7ffc0000 [ 481.319857][ T4299] cypress 0003:04B4:BCA1.0010: parse failed [ 481.328025][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1463'. [ 481.344569][ T4299] cypress: probe of 0003:04B4:BCA1.0010 failed with error -22 [ 481.391775][ T26] audit: type=1326 audit(1748186290.743:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1338e969 code=0x7ffc0000 [ 481.510363][ T14] usb 4-1: USB disconnect, device number 8 [ 481.540319][ T26] audit: type=1326 audit(1748186290.743:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1338e969 code=0x7ffc0000 [ 481.563127][ T26] audit: type=1326 audit(1748186290.753:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1c1338e969 code=0x7ffc0000 [ 481.695668][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1464'. [ 482.554992][T10045] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 482.557787][T10043] loop0: detected capacity change from 0 to 512 [ 482.659825][T10043] EXT4-fs (loop0): 1 orphan inode deleted [ 482.671750][T10043] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 482.681270][T10043] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.682904][ T4408] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:8: Failed to release dquot type 1 [ 482.967678][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 483.068327][T10059] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.132818][T10059] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.172741][T10065] loop1: detected capacity change from 0 to 256 [ 483.197286][T10065] FAT-fs (loop1): Directory bread(block 64) failed [ 483.203924][T10065] FAT-fs (loop1): Directory bread(block 65) failed [ 483.210803][T10065] FAT-fs (loop1): Directory bread(block 66) failed [ 483.217444][T10065] FAT-fs (loop1): Directory bread(block 67) failed [ 483.224037][T10065] FAT-fs (loop1): Directory bread(block 68) failed [ 483.230667][T10065] FAT-fs (loop1): Directory bread(block 69) failed [ 483.237300][T10065] FAT-fs (loop1): Directory bread(block 70) failed [ 483.243832][T10065] FAT-fs (loop1): Directory bread(block 71) failed [ 483.250441][T10065] FAT-fs (loop1): Directory bread(block 72) failed [ 483.257163][T10065] FAT-fs (loop1): Directory bread(block 73) failed [ 483.341852][T10059] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.420759][T10059] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.153419][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1475'. [ 484.176279][T10076] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 484.185928][T10076] FAT-fs (loop11): unable to read boot sector [ 485.070824][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'. [ 485.856501][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1479'. [ 485.934329][T10096] loop1: detected capacity change from 0 to 512 [ 486.030657][T10096] EXT4-fs (loop1): 1 orphan inode deleted [ 486.036629][T10096] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 486.046399][ T6129] __quota_error: 16 callbacks suppressed [ 486.046414][ T6129] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 486.062973][T10096] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.094339][ T6129] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:14: Failed to release dquot type 1 [ 486.368501][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 486.418827][T10107] loop5: detected capacity change from 0 to 256 [ 486.460247][T10107] FAT-fs (loop5): Directory bread(block 64) failed [ 486.467265][T10107] FAT-fs (loop5): Directory bread(block 65) failed [ 486.474082][T10107] FAT-fs (loop5): Directory bread(block 66) failed [ 486.480704][T10107] FAT-fs (loop5): Directory bread(block 67) failed [ 486.487371][T10107] FAT-fs (loop5): Directory bread(block 68) failed [ 486.493915][T10107] FAT-fs (loop5): Directory bread(block 69) failed [ 486.500621][T10107] FAT-fs (loop5): Directory bread(block 70) failed [ 486.507233][T10107] FAT-fs (loop5): Directory bread(block 71) failed [ 486.513826][T10107] FAT-fs (loop5): Directory bread(block 72) failed [ 486.520416][T10107] FAT-fs (loop5): Directory bread(block 73) failed [ 486.594009][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 486.691658][T10118] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 486.820041][T10118] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 486.945816][T10123] device syzkaller0 entered promiscuous mode [ 486.963547][T10059] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.978492][T10059] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.994939][T10059] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.009834][T10059] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.305997][T10130] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 487.315435][T10130] FAT-fs (loop3): unable to read boot sector [ 490.069885][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'. [ 490.102084][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1490'. [ 490.291668][T10149] loop3: detected capacity change from 0 to 512 [ 490.419617][T10149] EXT4-fs (loop3): 1 orphan inode deleted [ 490.426319][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1493'. [ 490.435943][T10149] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 490.437274][ T9] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 490.744184][T10165] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 490.765459][T10165] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 490.772972][T10165] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 490.812798][T10149] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.026852][T10165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.254035][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:0: Failed to release dquot type 1 [ 492.420176][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 492.517600][T10178] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 492.540818][T10178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 492.603864][T10181] netlink: 'syz.0.1498': attribute type 10 has an invalid length. [ 492.670074][T10181] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 492.951068][T10191] loop5: detected capacity change from 0 to 256 [ 492.982230][T10191] FAT-fs (loop5): Directory bread(block 64) failed [ 492.988926][T10191] FAT-fs (loop5): Directory bread(block 65) failed [ 492.995567][T10191] FAT-fs (loop5): Directory bread(block 66) failed [ 493.002098][T10191] FAT-fs (loop5): Directory bread(block 67) failed [ 493.008796][T10191] FAT-fs (loop5): Directory bread(block 68) failed [ 493.015371][T10191] FAT-fs (loop5): Directory bread(block 69) failed [ 493.021982][T10191] FAT-fs (loop5): Directory bread(block 70) failed [ 493.028779][T10191] FAT-fs (loop5): Directory bread(block 71) failed [ 493.035468][T10191] FAT-fs (loop5): Directory bread(block 72) failed [ 493.042009][T10191] FAT-fs (loop5): Directory bread(block 73) failed [ 493.221955][T10199] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.294400][T10199] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.369619][T10199] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.479406][T10199] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.780385][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1504'. [ 493.800624][T10209] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 493.809959][T10209] FAT-fs (loop9): unable to read boot sector [ 494.352842][T10210] loop1: detected capacity change from 0 to 512 [ 494.486438][T10199] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.520645][T10210] EXT4-fs (loop1): 1 orphan inode deleted [ 494.536511][T10210] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 494.545643][ T4328] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 494.567031][T10199] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.575177][ T4328] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:6: Failed to release dquot type 1 [ 494.601090][T10199] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.614880][T10199] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.692806][T10210] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.844042][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 494.861421][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1509'. [ 494.933727][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1508'. [ 495.508394][T10243] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 495.548606][T10243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 495.628980][T10243] bond0: (slave wlan1): Releasing backup interface [ 495.701563][T10244] netlink: 'syz.0.1512': attribute type 10 has an invalid length. [ 495.752941][T10244] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 496.753461][T10270] loop0: detected capacity change from 0 to 512 [ 496.765171][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 496.807349][T10272] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 496.832111][T10272] FAT-fs (loop9): unable to read boot sector [ 496.907930][T10274] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.956057][T10270] EXT4-fs (loop0): 1 orphan inode deleted [ 496.961824][T10270] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 496.981188][ T11] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 496.999868][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:1: Failed to release dquot type 1 [ 497.031474][T10270] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.063742][T10274] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.128151][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1522'. [ 497.188694][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 497.244714][T10274] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.329973][T10274] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.483884][T10274] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.531443][T10274] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.709738][T10274] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.792695][T10274] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.082052][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 498.127342][T10305] bond0: (slave wlan1): Releasing backup interface [ 498.177999][T10307] netlink: 'syz.1.1528': attribute type 10 has an invalid length. [ 498.236299][T10307] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 498.561364][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'. [ 499.549711][T10327] loop1: detected capacity change from 0 to 512 [ 499.579488][T10327] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 499.618384][T10327] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 499.633306][T10327] System zones: 1-12 [ 499.658551][T10327] EXT4-fs (loop1): 1 truncate cleaned up [ 499.664237][T10327] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 499.712534][T10331] loop4: detected capacity change from 0 to 512 [ 499.764582][T10331] EXT4-fs (loop4): 1 orphan inode deleted [ 499.776997][ T60] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 499.791510][T10331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 499.809740][ T60] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:4: Failed to release dquot type 1 [ 499.833142][T10331] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.644579][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 500.717388][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 500.899302][T10347] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 500.949560][T10347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 501.152206][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.159845][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.201192][T10347] bond0: (slave wlan1): Releasing backup interface [ 501.314839][T10350] netlink: 'syz.0.1540': attribute type 10 has an invalid length. [ 501.334313][T10361] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.364602][T10350] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 501.383928][T10361] FAT-fs (loop3): unable to read boot sector [ 501.392054][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 501.408773][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 502.588796][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'. [ 502.771372][T10384] loop1: detected capacity change from 0 to 512 [ 502.854036][T10384] EXT4-fs (loop1): 1 orphan inode deleted [ 502.866091][T10384] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 502.867401][ T9] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 502.885480][T10384] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.936286][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:0: Failed to release dquot type 1 [ 503.067104][T10393] loop4: detected capacity change from 0 to 256 [ 503.136915][T10393] FAT-fs (loop4): Directory bread(block 64) failed [ 503.165655][T10393] FAT-fs (loop4): Directory bread(block 65) failed [ 503.172908][T10393] FAT-fs (loop4): Directory bread(block 66) failed [ 503.179757][T10393] FAT-fs (loop4): Directory bread(block 67) failed [ 503.187161][T10393] FAT-fs (loop4): Directory bread(block 68) failed [ 503.193721][T10393] FAT-fs (loop4): Directory bread(block 69) failed [ 503.200529][T10393] FAT-fs (loop4): Directory bread(block 70) failed [ 503.207190][T10393] FAT-fs (loop4): Directory bread(block 71) failed [ 503.213890][T10393] FAT-fs (loop4): Directory bread(block 72) failed [ 503.230914][T10393] FAT-fs (loop4): Directory bread(block 73) failed [ 503.408823][T10400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 503.567772][T10401] netlink: 'syz.5.1551': attribute type 10 has an invalid length. [ 503.636545][T10401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.706632][T10401] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 503.741736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 503.978000][T10416] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 504.567035][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 504.774975][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'. [ 504.959455][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 505.440096][T10444] loop5: detected capacity change from 0 to 256 [ 505.531672][T10444] FAT-fs (loop5): Directory bread(block 64) failed [ 505.550524][T10444] FAT-fs (loop5): Directory bread(block 65) failed [ 505.568287][T10444] FAT-fs (loop5): Directory bread(block 66) failed [ 505.583872][T10444] FAT-fs (loop5): Directory bread(block 67) failed [ 505.599371][T10444] FAT-fs (loop5): Directory bread(block 68) failed [ 505.621783][T10444] FAT-fs (loop5): Directory bread(block 69) failed [ 505.647664][T10444] FAT-fs (loop5): Directory bread(block 70) failed [ 505.664306][T10444] FAT-fs (loop5): Directory bread(block 71) failed [ 505.680212][T10444] FAT-fs (loop5): Directory bread(block 72) failed [ 505.696097][T10444] FAT-fs (loop5): Directory bread(block 73) failed [ 505.805949][T10448] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.921042][T10448] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.032987][T10448] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.121282][T10448] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.173955][T10457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 506.372899][T10457] netlink: 'syz.4.1565': attribute type 10 has an invalid length. [ 506.450881][T10457] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 506.762390][T10448] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.833567][T10448] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.854135][T10448] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.912955][T10448] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.234437][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 507.282729][T10481] loop1: detected capacity change from 0 to 512 [ 507.362635][ T26] audit: type=1326 audit(1748186317.813:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 507.428729][ T26] audit: type=1326 audit(1748186317.813:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 507.479865][T10481] EXT4-fs (loop1): 1 orphan inode deleted [ 507.492516][T10481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 507.529133][ T4408] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 507.544929][T10481] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.571282][ T4408] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:8: Failed to release dquot type 1 [ 507.589022][ T26] audit: type=1326 audit(1748186317.813:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 507.741147][ T26] audit: type=1326 audit(1748186317.813:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 507.887203][ T26] audit: type=1326 audit(1748186317.813:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 507.917186][ T26] audit: type=1326 audit(1748186317.813:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 507.948495][ T26] audit: type=1326 audit(1748186317.813:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 507.971248][ T26] audit: type=1326 audit(1748186317.813:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748598e969 code=0x7ffc0000 [ 508.463416][T10511] loop4: detected capacity change from 0 to 256 [ 508.510600][T10511] FAT-fs (loop4): Directory bread(block 64) failed [ 508.537666][T10511] FAT-fs (loop4): Directory bread(block 65) failed [ 508.564612][T10511] FAT-fs (loop4): Directory bread(block 66) failed [ 508.581543][T10511] FAT-fs (loop4): Directory bread(block 67) failed [ 508.591707][T10511] FAT-fs (loop4): Directory bread(block 68) failed [ 508.608859][T10511] FAT-fs (loop4): Directory bread(block 69) failed [ 508.615836][T10511] FAT-fs (loop4): Directory bread(block 70) failed [ 508.632538][T10511] FAT-fs (loop4): Directory bread(block 71) failed [ 508.642703][T10511] FAT-fs (loop4): Directory bread(block 72) failed [ 508.652755][T10511] FAT-fs (loop4): Directory bread(block 73) failed [ 508.863943][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1577'. [ 508.876356][T10514] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 508.885702][T10514] FAT-fs (loop11): unable to read boot sector [ 509.028661][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 509.220059][T10519] netlink: 'syz.3.1579': attribute type 10 has an invalid length. [ 509.261779][T10519] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 509.472157][T10530] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.667341][T10530] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.085735][T10530] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.103336][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 510.211462][T10530] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.508909][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'. [ 510.662722][T10530] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.850908][T10530] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.884337][T10543] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1585'. [ 512.623191][T10567] loop3: detected capacity change from 0 to 256 [ 512.731584][T10567] FAT-fs (loop3): Directory bread(block 64) failed [ 512.738414][T10567] FAT-fs (loop3): Directory bread(block 65) failed [ 512.745117][T10567] FAT-fs (loop3): Directory bread(block 66) failed [ 512.751911][T10567] FAT-fs (loop3): Directory bread(block 67) failed [ 512.758743][T10567] FAT-fs (loop3): Directory bread(block 68) failed [ 512.765701][T10567] FAT-fs (loop3): Directory bread(block 69) failed [ 512.772386][T10567] FAT-fs (loop3): Directory bread(block 70) failed [ 512.779180][T10567] FAT-fs (loop3): Directory bread(block 71) failed [ 512.786012][T10567] FAT-fs (loop3): Directory bread(block 72) failed [ 512.794899][T10567] FAT-fs (loop3): Directory bread(block 73) failed [ 513.310837][T10572] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 513.320044][T10572] FAT-fs (loop7): unable to read boot sector [ 513.434247][T10543] tipc: Started in network mode [ 513.443597][T10543] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 513.473114][T10543] tipc: Enabled bearer , priority 10 [ 513.547519][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 513.593212][T10530] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.621960][T10530] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.772902][T10580] loop5: detected capacity change from 0 to 512 [ 513.784457][T10581] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 513.834733][T10581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 513.878054][T10580] EXT4-fs (loop5): 1 orphan inode deleted [ 513.897226][ T9] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 513.929172][T10580] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 513.986440][T10580] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.993626][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:0: Failed to release dquot type 1 [ 514.039604][T10581] bond0: (slave wlan1): Releasing backup interface [ 514.101118][T10583] netlink: 'syz.0.1593': attribute type 10 has an invalid length. [ 514.139929][T10583] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 514.412102][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1596'. [ 514.649934][ T4299] tipc: Node number set to 10005162 [ 514.766084][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'. [ 515.638844][ T5921] EXT4-fs (loop5): unmounting filesystem. [ 515.793972][T10623] loop5: detected capacity change from 0 to 256 [ 515.851807][T10623] FAT-fs (loop5): Directory bread(block 64) failed [ 515.879143][T10623] FAT-fs (loop5): Directory bread(block 65) failed [ 515.898812][T10623] FAT-fs (loop5): Directory bread(block 66) failed [ 515.935203][T10623] FAT-fs (loop5): Directory bread(block 67) failed [ 515.941884][T10623] FAT-fs (loop5): Directory bread(block 68) failed [ 515.955533][T10623] FAT-fs (loop5): Directory bread(block 69) failed [ 515.965549][T10623] FAT-fs (loop5): Directory bread(block 70) failed [ 516.006374][T10623] FAT-fs (loop5): Directory bread(block 71) failed [ 516.015566][T10623] FAT-fs (loop5): Directory bread(block 72) failed [ 516.022121][T10623] FAT-fs (loop5): Directory bread(block 73) failed [ 516.069000][T10630] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.187119][T10630] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.276500][T10630] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.343928][T10635] loop4: detected capacity change from 0 to 256 [ 516.453029][T10630] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.476470][T10635] FAT-fs (loop4): Directory bread(block 64) failed [ 516.483019][T10635] FAT-fs (loop4): Directory bread(block 65) failed [ 516.530309][T10635] FAT-fs (loop4): Directory bread(block 66) failed [ 516.548290][T10635] FAT-fs (loop4): Directory bread(block 67) failed [ 516.554912][T10635] FAT-fs (loop4): Directory bread(block 68) failed [ 516.576468][T10635] FAT-fs (loop4): Directory bread(block 69) failed [ 516.629004][T10635] FAT-fs (loop4): Directory bread(block 70) failed [ 516.655221][T10635] FAT-fs (loop4): Directory bread(block 71) failed [ 516.661846][T10635] FAT-fs (loop4): Directory bread(block 72) failed [ 516.674642][T10630] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.710731][T10630] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.719298][T10635] FAT-fs (loop4): Directory bread(block 73) failed [ 516.758667][T10630] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.801916][T10630] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.073829][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'. [ 517.085685][T10650] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 517.094996][T10650] FAT-fs (loop1): unable to read boot sector [ 517.268968][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1610'. [ 517.675221][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1612'. [ 518.050914][T10662] kvm [10660]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 518.087772][T10662] kvm [10660]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 518.126587][T10669] loop1: detected capacity change from 0 to 512 [ 518.223661][T10669] EXT4-fs (loop1): 1 orphan inode deleted [ 518.255325][ T4408] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 518.280720][T10669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 518.301678][ T4408] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:8: Failed to release dquot type 1 [ 518.317964][T10669] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.212410][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 519.513716][T10695] loop3: detected capacity change from 0 to 512 [ 519.521692][T10695] ext4: Unknown parameter 'nouser_xattr' [ 519.661539][T10697] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.762148][T10697] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.775737][ T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 519.821006][T10697] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.966931][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.981408][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 519.995812][ T14] usb 2-1: config 1 has no interface number 0 [ 520.002137][ T14] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.017639][ T14] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 520.031452][ T14] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.051893][T10697] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.064762][ T14] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.083060][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=29 [ 520.091695][ T14] usb 2-1: Product: syz [ 520.100245][ T14] usb 2-1: Manufacturer: syz [ 520.114556][ T14] usb 2-1: SerialNumber: syz [ 520.320268][T10697] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.348909][T10697] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.364131][T10697] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.380103][T10697] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.616495][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1625'. [ 520.711614][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 520.733806][T10718] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 520.763968][T10718] FAT-fs (loop1): unable to read boot sector [ 520.938424][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1627'. [ 520.950033][ T14] cdc_ncm 2-1:1.1: bind() failure [ 521.153955][ T14] usb 2-1: USB disconnect, device number 9 [ 521.632019][T10733] loop5: detected capacity change from 0 to 512 [ 521.712108][T10733] EXT4-fs (loop5): 1 orphan inode deleted [ 521.718059][T10733] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 521.727651][T10733] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.730965][ T4408] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 521.761680][ T4408] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:8: Failed to release dquot type 1 [ 521.936928][T10742] loop1: detected capacity change from 0 to 2048 [ 522.171986][T10742] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 523.854855][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 523.950081][T10759] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.969557][T10759] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.040862][T10759] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.093680][T10759] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.279019][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1638'. [ 524.736746][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 524.774914][T10776] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 524.801923][T10776] FAT-fs (loop9): unable to read boot sector [ 524.987450][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 525.050115][ T5921] EXT4-fs (loop5): unmounting filesystem. [ 525.519326][T10792] fuse: Bad value for 'fd' [ 525.739170][T10794] loop0: detected capacity change from 0 to 512 [ 525.947652][T10794] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 525.958155][T10794] EXT4-fs warning (device loop0): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 525.979858][T10794] EXT4-fs (loop0): mount failed [ 526.870977][T10801] loop4: detected capacity change from 0 to 512 [ 526.954690][T10801] EXT4-fs: Ignoring removed orlov option [ 527.312737][T10813] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.471590][T10801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 527.503153][T10813] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.515309][T10801] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.569442][T10801] [ 527.571804][T10801] ====================================================== [ 527.578827][T10801] WARNING: possible circular locking dependency detected [ 527.585855][T10801] 6.1.140-syzkaller #0 Not tainted [ 527.590970][T10801] ------------------------------------------------------ [ 527.597999][T10801] syz.4.1648/10801 is trying to acquire lock: [ 527.604075][T10801] ffff8880550e1698 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x903/0x1b60 [ 527.613622][T10801] [ 527.613622][T10801] but task is already holding lock: [ 527.621002][T10801] ffff888073816208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 527.630611][T10801] [ 527.630611][T10801] which lock already depends on the new lock. [ 527.630611][T10801] [ 527.641031][T10801] [ 527.641031][T10801] the existing dependency chain (in reverse order) is: [ 527.650065][T10801] [ 527.650065][T10801] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 527.658177][T10801] down_read+0x42/0x2d0 [ 527.662885][T10801] v2_read_dquot+0x4a/0x110 [ 527.667941][T10801] dquot_acquire+0x152/0x520 [ 527.673078][T10801] ext4_acquire_dquot+0x2d9/0x4a0 [ 527.678640][T10801] dqget+0x778/0xeb0 [ 527.683051][T10801] __dquot_initialize+0x328/0xcb0 [ 527.688588][T10801] ext4_process_orphan+0x54/0x300 [ 527.694127][T10801] ext4_orphan_cleanup+0xbd3/0x1400 [ 527.699840][T10801] ext4_fill_super+0x7b5e/0x80d0 [ 527.705291][T10801] get_tree_bdev+0x3f1/0x610 [ 527.710402][T10801] vfs_get_tree+0x88/0x270 [ 527.715333][T10801] do_new_mount+0x24a/0xa40 [ 527.720354][T10801] __se_sys_mount+0x2d6/0x3c0 [ 527.725566][T10801] do_syscall_64+0x4c/0xa0 [ 527.730502][T10801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.736921][T10801] [ 527.736921][T10801] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 527.744590][T10801] __mutex_lock+0x120/0xaf0 [ 527.749614][T10801] dquot_commit+0x5a/0x410 [ 527.754566][T10801] ext4_write_dquot+0x1f0/0x360 [ 527.759932][T10801] mark_all_dquot_dirty+0x1e3/0x400 [ 527.765662][T10801] __dquot_free_space+0x7ec/0xbc0 [ 527.771200][T10801] ext4_free_blocks+0x1bab/0x2640 [ 527.776744][T10801] ext4_ext_remove_space+0x1f0d/0x4490 [ 527.782720][T10801] ext4_ext_truncate+0x211/0x370 [ 527.788170][T10801] ext4_truncate+0xa0b/0x1230 [ 527.793364][T10801] ext4_evict_inode+0xb35/0x1100 [ 527.798832][T10801] evict+0x485/0x870 [ 527.803242][T10801] ext4_orphan_cleanup+0xbd3/0x1400 [ 527.808950][T10801] ext4_fill_super+0x7b5e/0x80d0 [ 527.814402][T10801] get_tree_bdev+0x3f1/0x610 [ 527.819514][T10801] vfs_get_tree+0x88/0x270 [ 527.824455][T10801] do_new_mount+0x24a/0xa40 [ 527.829484][T10801] __se_sys_mount+0x2d6/0x3c0 [ 527.834671][T10801] do_syscall_64+0x4c/0xa0 [ 527.839606][T10801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.846017][T10801] [ 527.846017][T10801] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 527.853834][T10801] __lock_acquire+0x2cf8/0x7c50 [ 527.859207][T10801] lock_acquire+0x1b4/0x490 [ 527.864226][T10801] down_write+0x36/0x60 [ 527.868948][T10801] ext4_map_blocks+0x903/0x1b60 [ 527.874312][T10801] ext4_getblk+0x1ab/0x6d0 [ 527.879243][T10801] ext4_bread+0x26/0x170 [ 527.883997][T10801] ext4_quota_write+0x230/0x570 [ 527.889371][T10801] find_free_dqentry+0x673/0xc20 [ 527.894823][T10801] do_insert_tree+0x70d/0x1040 [ 527.900102][T10801] do_insert_tree+0x9ae/0x1040 [ 527.905378][T10801] do_insert_tree+0x9ae/0x1040 [ 527.910655][T10801] do_insert_tree+0x9ae/0x1040 [ 527.915933][T10801] qtree_write_dquot+0x48d/0x5b0 [ 527.921386][T10801] v2_write_dquot+0x108/0x190 [ 527.926578][T10801] dquot_acquire+0x2d5/0x520 [ 527.931686][T10801] ext4_acquire_dquot+0x2d9/0x4a0 [ 527.937223][T10801] dqget+0x778/0xeb0 [ 527.941630][T10801] __dquot_initialize+0x328/0xcb0 [ 527.947166][T10801] ext4_rmdir+0x11d/0xaa0 [ 527.952006][T10801] vfs_rmdir+0x36c/0x4d0 [ 527.956765][T10801] do_rmdir+0x288/0x5e0 [ 527.961436][T10801] __x64_sys_rmdir+0x45/0x50 [ 527.966545][T10801] do_syscall_64+0x4c/0xa0 [ 527.971476][T10801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.977887][T10801] [ 527.977887][T10801] other info that might help us debug this: [ 527.977887][T10801] [ 527.988101][T10801] Chain exists of: [ 527.988101][T10801] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 527.988101][T10801] [ 528.001738][T10801] Possible unsafe locking scenario: [ 528.001738][T10801] [ 528.009171][T10801] CPU0 CPU1 [ 528.014533][T10801] ---- ---- [ 528.019895][T10801] lock(&s->s_dquot.dqio_sem); [ 528.024823][T10801] lock(&dquot->dq_lock); [ 528.031750][T10801] lock(&s->s_dquot.dqio_sem); [ 528.039105][T10801] lock(&ei->i_data_sem/2); [ 528.043693][T10801] [ 528.043693][T10801] *** DEADLOCK *** [ 528.043693][T10801] [ 528.051824][T10801] 5 locks held by syz.4.1648/10801: [ 528.057003][T10801] #0: ffff888073816460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 528.066132][T10801] #1: ffff88807431b628 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_rmdir+0x19d/0x5e0 [ 528.076135][T10801] #2: ffff88804e426850 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: vfs_rmdir+0xee/0x4d0 [ 528.085960][T10801] #3: ffff88807003b5a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 528.095347][T10801] #4: ffff888073816208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 528.105345][T10801] [ 528.105345][T10801] stack backtrace: [ 528.111257][T10801] CPU: 1 PID: 10801 Comm: syz.4.1648 Not tainted 6.1.140-syzkaller #0 [ 528.119397][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 528.129448][T10801] Call Trace: [ 528.132718][T10801] [ 528.135643][T10801] dump_stack_lvl+0x168/0x22e [ 528.140327][T10801] ? load_image+0x3b0/0x3b0 [ 528.144829][T10801] ? show_regs_print_info+0x12/0x12 [ 528.150028][T10801] ? print_circular_bug+0x12b/0x1a0 [ 528.155229][T10801] check_noncircular+0x274/0x310 [ 528.160162][T10801] ? add_chain_block+0x940/0x940 [ 528.165101][T10801] ? lockdep_lock+0xdc/0x1e0 [ 528.169690][T10801] ? __lock_acquire+0x13c0/0x7c50 [ 528.174708][T10801] ? _find_first_zero_bit+0xcf/0x100 [ 528.180002][T10801] __lock_acquire+0x2cf8/0x7c50 [ 528.184873][T10801] ? verify_lock_unused+0x140/0x140 [ 528.190087][T10801] ? verify_lock_unused+0x140/0x140 [ 528.195295][T10801] lock_acquire+0x1b4/0x490 [ 528.199797][T10801] ? ext4_map_blocks+0x903/0x1b60 [ 528.204814][T10801] ? __might_sleep+0xd0/0xd0 [ 528.209402][T10801] ? read_lock_is_recursive+0x10/0x10 [ 528.214772][T10801] ? percpu_counter_add_batch+0x13b/0x160 [ 528.220489][T10801] ? rcu_is_watching+0x11/0xa0 [ 528.225261][T10801] ? ext4_es_lookup_extent+0x443/0xb20 [ 528.230724][T10801] down_write+0x36/0x60 [ 528.234881][T10801] ? ext4_map_blocks+0x903/0x1b60 [ 528.239899][T10801] ext4_map_blocks+0x903/0x1b60 [ 528.244744][T10801] ? ext4_es_lookup_extent+0x443/0xb20 [ 528.250209][T10801] ? ext4_issue_zeroout+0x250/0x250 [ 528.255399][T10801] ? kasan_set_track+0x4b/0x70 [ 528.260161][T10801] ? find_free_dqentry+0x55/0xc20 [ 528.265183][T10801] ? do_insert_tree+0x70d/0x1040 [ 528.270207][T10801] ? do_insert_tree+0x9ae/0x1040 [ 528.275141][T10801] ? ext4_issue_zeroout+0x250/0x250 [ 528.280326][T10801] ? v2_write_dquot+0x108/0x190 [ 528.285172][T10801] ext4_getblk+0x1ab/0x6d0 [ 528.289578][T10801] ? do_syscall_64+0x4c/0xa0 [ 528.294166][T10801] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.300242][T10801] ? ext4_get_block_unwritten+0x100/0x100 [ 528.305952][T10801] ? ext4_getblk+0x2a8/0x6d0 [ 528.310533][T10801] ? ext4_get_block_unwritten+0x100/0x100 [ 528.316243][T10801] ext4_bread+0x26/0x170 [ 528.320483][T10801] ext4_quota_write+0x230/0x570 [ 528.325338][T10801] ? ext4_quota_read+0x380/0x380 [ 528.330295][T10801] ? ext4_quota_read+0x305/0x380 [ 528.335230][T10801] ? check_dquot_block_header+0x212/0x2f0 [ 528.340956][T10801] ? ext4_quota_read+0x380/0x380 [ 528.345903][T10801] find_free_dqentry+0x673/0xc20 [ 528.350847][T10801] do_insert_tree+0x70d/0x1040 [ 528.355614][T10801] do_insert_tree+0x9ae/0x1040 [ 528.360386][T10801] do_insert_tree+0x9ae/0x1040 [ 528.365155][T10801] do_insert_tree+0x9ae/0x1040 [ 528.369930][T10801] qtree_write_dquot+0x48d/0x5b0 [ 528.374862][T10801] ? qtree_entry_unused+0xe0/0xe0 [ 528.379881][T10801] ? rwsem_write_trylock+0x12f/0x1b0 [ 528.385166][T10801] ? trace_contention_end+0x5f/0x170 [ 528.390534][T10801] ? preempt_count_add+0x8d/0x190 [ 528.395551][T10801] v2_write_dquot+0x108/0x190 [ 528.400222][T10801] dquot_acquire+0x2d5/0x520 [ 528.404813][T10801] ext4_acquire_dquot+0x2d9/0x4a0 [ 528.409837][T10801] dqget+0x778/0xeb0 [ 528.413730][T10801] __dquot_initialize+0x328/0xcb0 [ 528.418755][T10801] ? dquot_initialize+0x20/0x20 [ 528.423608][T10801] ext4_rmdir+0x11d/0xaa0 [ 528.427938][T10801] ? ext4_mkdir+0xc50/0xc50 [ 528.432431][T10801] ? vfs_rmdir+0xb0/0x4d0 [ 528.436753][T10801] ? read_lock_is_recursive+0x10/0x10 [ 528.442117][T10801] ? preempt_count_add+0x8d/0x190 [ 528.447130][T10801] ? rwsem_write_trylock+0x12f/0x1b0 [ 528.452410][T10801] ? clear_nonspinnable+0x60/0x60 [ 528.457429][T10801] ? may_delete+0x592/0x720 [ 528.461924][T10801] ? bpf_lsm_inode_rmdir+0x5/0x10 [ 528.466945][T10801] ? security_inode_rmdir+0xcb/0x110 [ 528.472227][T10801] vfs_rmdir+0x36c/0x4d0 [ 528.476467][T10801] do_rmdir+0x288/0x5e0 [ 528.480638][T10801] ? __check_object_size+0x500/0xa40 [ 528.485916][T10801] ? d_delete_notify+0x150/0x150 [ 528.490854][T10801] ? getname_flags+0x206/0x500 [ 528.495614][T10801] __x64_sys_rmdir+0x45/0x50 [ 528.500202][T10801] do_syscall_64+0x4c/0xa0 [ 528.504635][T10801] ? clear_bhb_loop+0x60/0xb0 [ 528.509305][T10801] ? clear_bhb_loop+0x60/0xb0 [ 528.513978][T10801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.519880][T10801] RIP: 0033:0x7f1c1338e969 [ 528.524301][T10801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.543911][T10801] RSP: 002b:00007f1c14151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 528.552341][T10801] RAX: ffffffffffffffda RBX: 00007f1c135b5fa0 RCX: 00007f1c1338e969 [ 528.560307][T10801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 528.568266][T10801] RBP: 00007f1c13410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 528.576224][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.584187][T10801] R13: 0000000000000000 R14: 00007f1c135b5fa0 R15: 00007ffe2484ce28 [ 528.592160][T10801] [ 528.602953][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1651'. [ 528.614855][T10801] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.1648: Directory hole found for htree leaf block 0 [ 528.655622][T10813] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.743143][T10813] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.767602][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 531.255814][T10813] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.268196][T10813] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.279407][T10813] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.290691][T10813] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0