last executing test programs: 10m20.726483935s ago: executing program 32 (id=9): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x84c436, &(0x7f0000000bc0)=ANY=[], 0x1, 0x2a8, &(0x7f0000001000)="$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") getpid() socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000040), 0x1, 0x549, &(0x7f0000001800)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xff8f) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a1282, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmmsg(r4, 0x0, 0x0, 0x4005041) 10m7.67763638s ago: executing program 33 (id=32): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x8f8c, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) write$binfmt_misc(r3, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x8, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000440)={0x0, 0xfffffd33, &(0x7f0000000880)={&(0x7f00000008c0)={0x28, r7, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void, @void}}}, 0x28}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000380)="bd30f56a07639fd7d5d4e184d3dd3ac0854b760d44603acbc6fc253fac097fe2de1aca5e7d2a631f5c764e58786819e981ed75683c0f8c2c931256e0243e216c3c99d9316cbdf4f0800e58d156e719f195aa924625873fe6104b946a2c656b852a7f807de4053bd7eeccf7138ba7cdc51205fc54f3f77f0c69ba0901087a1442fba39239c113067b5a738eb05d3124926b783e6943eabdde458f4d2ee1bbee88b0f2bdfaf6abc9cb5788abb09d7c272ab89ad560241c", 0xb6}, {&(0x7f0000000480)="67cece0bd96577be51f29a21261aa7e9b137b174a3ad6a7ce7280c7ed75f0d60f3", 0x21}, {&(0x7f00000004c0)="67c5954ada81ea596a503b72d2c98d78968c1877545a2ab07b9c75756bb1f17d905489b30dd7e7c081412a4d49189c1b0923e32151e92611bbec772a40ed6d4f4ecd7326a1b863e218e02f6ddd80da675bca1d9caaf05d8d841a935205a70f905edef3be0c4c1e9d999c2f64eaeec69b8301ef206b751833042f0840202103dfb42ded7ef0c78a21d6ad4aed45739b602731370bc087bc73862b20057494a2a570855e8a4565", 0xa6}], 0x3, &(0x7f00000005c0)="a74e413423fc5bdce07b307858092de68371cd6aab8ab23df301cfe3b656ef440f43eb26bcb8da42a4656e2bf4e0e5ca9cef5d7f45f484dfff360287e5865bc36ebb7ca52a83a224788229d9f69cce6d10485a342118565bea5976e0edf7c46c673dca792c52bde436367c6c1e15193df41fa45b8da0c4db3078fbdde66eaba0a46d0bf135978be25fdc4e2d72c778d2dd0ee80a973a28f2f774d81ae192daffcb1ad10d033e1c66c0d543366a96a2d7dfdcebfe9cd4152908e10346c720917d787f53f6ba833a298ef0dae440e6c8ac8b52c87db0d2c139bf1f16d67d7bd3dc05dc22a4f5", 0xe5, 0x20000000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r8]) r9 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1900) syz_mount_image$fuse(0x0, 0x0, 0x20c00, 0x0, 0x1, 0x0, 0x0) close(r9) 8m11.27006261s ago: executing program 3 (id=250): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m6.14542131s ago: executing program 3 (id=262): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x3014850, &(0x7f0000000000), 0x3, 0x4c1, &(0x7f0000000680)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX9AofQX7VOf+lLocymU/AmlEGjfSyktoU3Shz60VZF81SSubMvEshLr84Hje8+9V/5+j4SOdO656AbQsU5FxFhEdEXE2YjoT7dn0hJr66V63IP7tyarJYlK5dqXSSTptvr/StLlkfRhvRHxr39E/Df5adzSyurcRKGQX0rrufL8Yq60snpudn5iJj+TXxgbGb44emn0wujQrrX18t8+e+WFt/5++f0/3vhk/Isz/6um1Zfue7wdzVhr8rj1pvfUnou67ohY2kmwZ1hX2p6edicCAEBTqt/xfx4Rv42Ih6+3OxsAAACgFSp/6Ytvk4gKAAAAsG9latfAJplsei1AX2Qy2ez6Nby/jMOZQrFU/sN0cXlhav1a2YHoyUzPFvJD6bXCA9GTVOvDtfVH9fMb6iMRcSwiXuo/VKtnJ4uFqXaf/AAAAIAOcWTD+P/r/vXxPwAAALDPDLQ7AQAAAKDljP8BAABg/9t0/J90720iAAAAQCv888qVaqnU7389dX1lea54/dxUvjSXnV+ezE4WlxazM8XiTO03++a3+3+FYnHxT7GwfDNXzpfKudLK6vh8cXmhPF67r/d43n2iAQAAYO8d+82dj5OIWPvzoVqpOpDua2KsPtba7IBWyuzs8KRVeQB7r6vdCQBt4wJf6Fzm44FtBvYvb6jv8LQBAADwLBj81VPN/5sPhOeYgTx0LvP/0LnM/0PnMv8PHe7g9of0brbjg13OBQAAaJm+Wkky2XQusC8ymWw24mjttgA9yfRsIT8UET+LiI/6ew5W68PtThoAAAAAAAAAAAAAAAAAAAAAAAAAnjOVShIVAAAAYF+LyHyepDfyH+w/3bfx/MCB5Jv+2jIibrxx7dWbE+Xy0nB1+1c/bi+/lm4/344zGAAAAMBG9XF6fRwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvpwf1bk/Wyl3Hv/TUiBhrF747e2rL33f6IOPwwie7HHpdERNcuxF+7HRHHG8VPqmnFQJrFxviZiDjU5vhHdiE+dLI71f5nrNH7LxOnasvG77/utDyte6c26/8y9f6v1s816v+ONhnjxN13cpvGvx1xortx/1OPnzxl//uff6+ubrav8mbEYMPPn+SJWLny/GKutLJ6bnZ+YiY/k18YGRm+OHpp9MLoUG56tpBP/zaM8eKv3/t+q/Yf3iT+wDbtP91k+7+7e/P+L7aIf+Z3jV//41vErz73v08/B6r7B+vra+vrjzv59ocnt2r/1Cbt3+71P9Nk+89e/f+nTR4KAOyB0srq3EShkF+yYsXK/lu5mr7Rd/zwNndMAADArnv0pb/dmQAAAAAAAAAAAAAAAAAAAEDnavmPkB188pcFetvXVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf0QAAD//9sy0wA=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) 8m3.921970307s ago: executing program 3 (id=266): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000001800)=[{&(0x7f00000002c0)="a7", 0x1}], 0x1, 0x2000001, 0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) 8m2.693841456s ago: executing program 3 (id=271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b00)={0xe0c, 0x0, 0x5, 0x201, 0x0, 0x0, {0x1}, [{{0x254, 0x1, {{0x1, 0x100}, 0x8, 0x4, 0x4, 0x248, 0x1a, 'syz0\x00', "e20b3c7251eb45f9d88d097ab09aa0aa72c87bb4c6a7571d355278384640d4ff", "6d96b46a0d83497cb92b2f6fc64c18ddcaed9f061ee8b88371cf17b80b118989", [{0x4, 0x8, {0x0, 0x6}}, {0x100, 0xfffa, {0x0, 0xffffffff}}, {0x4, 0xa, {0x2, 0xe3b}}, {0x2, 0x803c, {0x1, 0xe9c8}}, {0x98, 0xfffa, {0x0, 0x7fff}}, {0x5, 0x7, {0x2, 0x5}}, {0x3, 0x7fff, {0x1, 0x6}}, {0x8, 0x8, {0x3, 0x81}}, {0x471, 0x0, {0x1, 0x1}}, {0x1ff, 0x746, {0x1, 0x2000}}, {0x85, 0x6, {0x0, 0x1}}, {0xa903, 0x9, {0x0, 0xff}}, {0x8, 0x4e3, {0x0, 0x4e}}, {0x9e47, 0x4, {0x0, 0x5a}}, {0xfff7, 0xfeff, {0x3, 0x5}}, {0x8, 0x5, {0x0, 0x4}}, {0x9, 0x0, {0x3, 0xd720}}, {0x9, 0x40, {0x1, 0xffff1b89}}, {0x0, 0x68, {0x0, 0x3}}, {0xeb52, 0x40, {0x1, 0x80000000}}, {0x8, 0x3, {0x8c883547cef4c309, 0xcc6c}}, {0x5, 0x1f00, {0x1, 0x2}}, {0x80, 0x7, {0x0, 0x400}}, {0x6d78, 0x1, {0x0, 0xb2}}, {0x3, 0x8000, {0x2, 0x2a}}, {0x100, 0x9, {0x0, 0x6}}, {0x7, 0x6, {0x3, 0x8}}, {0x9, 0x10, {0x2, 0x6}}, {0x81, 0x0, {0x1, 0xf6f}}, {0x4, 0x100, {0x2, 0x8000}}, {0x5, 0x6, {0x3, 0x58a5}}, {0x8, 0x1, {0x2, 0x8001}}, {0x5, 0xea2, {0x7, 0x8001}}, {0x3, 0xffff, {0x2, 0x1}}, {0xc, 0x0, {0x3}}, {0x9, 0x9, {0x2, 0xb7}}, {0x3, 0x8001, {0x0, 0x6f2}}, {0x8, 0x8b, {0x3, 0x8}}, {0x400, 0x6, {0x2, 0x80000001}}, {0x0, 0x0, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0xba6b}, 0x32, 0x9, 0x5, 0xce, 0x2, 'syz0\x00', "6ed616d7924c401818afce2ddfdab5dd8d9099cc4092d50da947641eec390d81", "e1c8d19ddba00a66d68f3d9db3b356a20e61de3a4ea905e096421e3eb9db0caf", [{0x9f3, 0x4, {0x2, 0x9}}, {0x1, 0x5, {0x2, 0x6}}, {0x7, 0x8001, {0x3, 0x2}}, {0x5, 0xfff7, {0x1, 0x7fffffff}}, {0x40, 0x6, {0x3, 0xc}}, {0x0, 0xd, {0xc7627dac9fee269, 0xfffffffc}}, {0xc, 0x8, {0x2, 0x59bb667}}, {0x6, 0x4, {0x2, 0x697}}, {0x8, 0xfff8, {0x2, 0x9}}, {0x100, 0x6}, {0x3ff, 0x2, {0x3, 0x1}}, {0x7, 0xff55, {0x3, 0xffffffff}}, {0x6, 0x9, {0x0, 0x4}}, {0x6, 0x8fd, {0x3, 0x4}}, {0x0, 0x6, {0x2, 0xfffffeff}}, {0x2, 0x100, {0x1, 0x8f}}, {0x3ff, 0xf5, {0x3, 0x401}}, {0x2a69, 0xfffc, {0x3, 0x80000000}}, {0x10, 0x9, {0x0, 0x1}}, {0x41a, 0x0, {0x2, 0x7f}}, {0x0, 0x7, {0x0, 0x6}}, {0x7ff, 0x0, {0x0, 0xc3a2}}, {0x8, 0x7, {0x2, 0x2}}, {0x101, 0x1, {0x0, 0x6}}, {0x785, 0xf47, {0x2, 0x7}}, {0x6, 0x9, {0x0, 0x4}}, {0xb, 0x1, {0x2, 0x3}}, {0x1, 0x5, {0x3, 0xfd5e}}, {0xfffb, 0x8, {0x1, 0x6f}}, {0x800, 0x6, {0x2, 0x800}}, {0x9, 0x9, {0x0, 0x7}}, {0x4, 0x5, {0x0, 0x7}}, {0x1000, 0xd4, {0x3, 0x1}}, {0x205, 0x5}, {0xc4, 0xffff, {0x3, 0x6}}, {0x1, 0x4, {0x0, 0x10}}, {0xfff, 0x0, {0x1, 0x3}}, {0x8000, 0x8, {0x1, 0x9}}, {0x8, 0x8000, {0x1, 0x3}}, {0x0, 0x7f, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x1ff}, 0x3, 0x4, 0x2, 0x6db7, 0x1a, 'syz0\x00', "8a04be54d9639e06d45c5d7a4019428adef440bdb4b663b5d40e28bad549bf9e", "e77a70aa0f248880bdc5b72d7a771fe9b8d69ff1a9116825524e3315939d2f61", [{0xfffc, 0xa, {0x1, 0x246}}, {0x7, 0x9, {0x0, 0xffffffff}}, {0x0, 0x100, {0x0, 0xe}}, {0x8, 0xe, {0x2, 0x3}}, {0x1, 0x2, {0x2, 0x6}}, {0x0, 0x1000, {0x2, 0x9}}, {0xfffc, 0x101, {0x3, 0x1}}, {0x1, 0x1c8a, {0x0, 0x8001}}, {0x81, 0x8f0, {0x1, 0x5912f800}}, {0x40, 0x9, {0x2, 0x6}}, {0xb, 0x5, {0x3, 0x401}}, {0x9, 0xffc0, {0x3, 0x7ff4}}, {0x8, 0xb, {0x2, 0x9}}, {0x1ff, 0x7, {0x1, 0x2}}, {0x6, 0x7, {0x2, 0xa}}, {0x8, 0x2, {0x0, 0x40}}, {0x2, 0xffff, {0x0, 0x10}}, {0x0, 0x8, {0x0, 0x1}}, {0x75e, 0xfff8, {0x0, 0x5}}, {0x800, 0x3, {0x0, 0x7fff}}, {0x10, 0x8, {0x0, 0x401}}, {0x9, 0xfffb, {0x2, 0xbb}}, {0x7, 0x0, {0x0, 0x1}}, {0x5, 0x7ff, {0x3, 0x1}}, {0x6, 0x3a8d, {0x3, 0x1}}, {0x1ff, 0xffff, {0x2, 0x7}}, {0xbe, 0x8, {0x2, 0x8}}, {0x9, 0x5, {0x2, 0x3}}, {0x5, 0x0, {0x1, 0x6}}, {0x8928, 0x1, {0x3, 0x4}}, {0x192b, 0x57fa, {0x2, 0x100}}, {0x8, 0x3, {0x2, 0xe7}}, {0x4, 0x9, {0x2, 0x2f}}, {0x7, 0x2, {0x2, 0x400}}, {0x401, 0xdf, {0x1, 0x40}}, {0x8, 0x91, {0x1, 0x4}}, {0x1, 0x1, {0x2, 0x8}}, {0x6, 0x0, {0x1, 0x50}}, {0x0, 0x4, {0x3, 0x6f}}, {0x860, 0x1, {0x2, 0x765}}]}}}, {{0x254, 0x1, {{0x2, 0xe016}, 0x0, 0x3, 0x9, 0x7, 0x19, 'syz1\x00', "5b4549a9d58e5a35bc7b03b39ed5c0f471df4c0de61e571a8af8e55cfa106967", "beb158dfcbb388c32b3f4ab1d38d4b3b8808fdd2efc1a1f2c19eb542b39195d2", [{0xfff, 0x30, {0x3, 0x100}}, {0x8001, 0x0, {0x0, 0x7f}}, {0x5, 0x4, {0x1, 0x571}}, {0x2, 0x6, {0x2}}, {0xa, 0x5, {0x3, 0x10001}}, {0x9, 0x7, {0x1, 0x7}}, {0x0, 0x40, {0x2, 0x89}}, {0xe, 0xe, {0x2, 0x1000}}, {0x1ff, 0x3ff, {0x0, 0x5}}, {0x2, 0x6, {0x0, 0x8}}, {0x2faf, 0x40, {0x1, 0x1}}, {0x1, 0x2, {0x2, 0x1000}}, {0xc4, 0x1, {0x3, 0x2}}, {0x4, 0x1}, {0x2, 0x273, {0x2, 0x5a51e68e}}, {0x33e, 0x429, {0x3, 0x7}}, {0x4, 0x8000, {0x3, 0x9}}, {0x7, 0x4, {0x0, 0x5}}, {0x1cc, 0x5, {0x0, 0x2}}, {0xc, 0xe, {0x0, 0x940}}, {0xb, 0x6, {0x2, 0xad}}, {0xa, 0x981, {0x2, 0x9}}, {0xc, 0x6, {0x0, 0x5}}, {0x5, 0x3, {0x3, 0x9}}, {0xca, 0x5, {0x1, 0x5}}, {0x3, 0x4, {0x3, 0xff}}, {0xb, 0x58e, {0x1}}, {0x391a, 0x12, {0x0, 0x3}}, {0xbe3c, 0x1, {0x0, 0x3}}, {0x3, 0x81, {0x3, 0x1}}, {0x6, 0x4, {0x0, 0x69}}, {0x82, 0x9, {0x1, 0x8}}, {0x7, 0x547, {0x3, 0x5c000}}, {0x0, 0x9, {0x3, 0x1ff}}, {0x5, 0x5, {0x1, 0x9}}, {0x4, 0x978, {0x1}}, {0x800, 0xe5, {0x2, 0xfffffff4}}, {0xe4ac, 0x0, {0x1, 0x7}}, {0x0, 0x81, {0x0, 0xc8d}}, {0x0, 0x780, {0x3, 0x3ff}}]}}}, {{0x254, 0x1, {{0x1, 0x8000}, 0x3, 0x1, 0x7ff, 0x5, 0x8, 'syz0\x00', "09673a068f8d13f3d4dab41ada9f60fd6f810d6a0636c4305d7ce7f5d1822d62", "99b5a880fd30cdc80505581c2651b0d950950479d77dba04652ba5e2966cb1f6", [{0x6, 0x7, {0x2, 0x3}}, {0xf000, 0xfffa, {0x0, 0x5}}, {0x7, 0x8000, {0x3, 0x9}}, {0x35e, 0x6, {0x1, 0xd3ee}}, {0x16b, 0x2000, {0x0, 0x9}}, {0x100, 0x8ac, {0x0, 0x7}}, {0x101, 0x900, {0x0, 0x9}}, {0xfff8, 0xd4, {0x3, 0xfffffff8}}, {0x2, 0x0, {0x2, 0x7}}, {0x8b7e, 0x9, {0x2, 0x7ff000}}, {0x4dd5, 0xa627}, {0x27, 0x2, {0x0, 0x6}}, {0x9, 0xfeff, {0x0, 0x5}}, {0x7, 0xb52, {0x1}}, {0xfff7, 0x6, {0x1}}, {0x546, 0x7, {0x1}}, {0xe, 0x9, {0x75928a82f2ec6200, 0x54c}}, {0xb, 0x0, {0x1, 0x100}}, {0x6, 0x7, {0x1, 0xfff}}, {0xfff, 0x1, {0x3, 0x5}}, {0x7, 0x100, {0x0, 0xd}}, {0x8, 0xffff, {0x1, 0x55}}, {0x800, 0x3, {0x2, 0xd}}, {0x40, 0x469, {0x1, 0x4}}, {0x6d1, 0xfcce, {0x1, 0x3}}, {0x5, 0x800, {0x0, 0x800}}, {0x76, 0x1ff, {0x3}}, {0x7, 0x3, {0x1, 0x8}}, {0x4, 0xfff9, {0x0, 0x9}}, {0x5, 0x2, {0x3, 0x2}}, {0x44, 0x0, {0x0, 0x5c3}}, {0x9, 0x0, {0x3, 0x3}}, {0x400, 0x607, {0x2, 0x2}}, {0x9, 0x4, {0x2, 0xfffffc01}}, {0x7ff, 0x7ff, {0x0, 0xfd}}, {0xb, 0x7, {0x1, 0x9}}, {0x80, 0xd63, {0x2, 0xe6c}}, {0x1ff, 0x5, {0x1, 0x1}}, {0x0, 0xe, {0x0, 0xf}}, {0xb, 0xfffb, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0xa3}, 0x2e, 0x2, 0xf8, 0x4, 0xe, 'syz0\x00', "63799b5d9de038180899d52c9423499cd0ab1af144c5d35f4879849fdff31feb", "353796e4f3d9ef383a4b8780cbd32bdfd9db964f0c09adf759b4cb814aa8001a", [{0xf, 0x3e, {0x1, 0x1}}, {0x81, 0xfff7, {0x1, 0x2c}}, {0x3fc, 0x56f}, {0xf, 0x7f, {0x3, 0x59}}, {0x6bc8, 0x92, {0x0, 0x80}}, {0x785, 0xfff8, {0x0, 0x2}}, {0x4, 0x2, {0x2, 0x81}}, {0x5, 0x8, {0x3}}, {0x0, 0xc, {0x0, 0x9}}, {0x8000, 0xffff, {0x0, 0x2}}, {0x1, 0x4, {0x3, 0x10001}}, {0x2, 0x1, {0x0, 0x5}}, {0x1, 0x6}, {0x0, 0x143c, {0x2, 0x81f}}, {0x7c60, 0xe, {0x2, 0x1}}, {0x9, 0x7fff, {0x2, 0xb224}}, {0x8, 0x3f5, {0x3, 0xb}}, {0x7c, 0xa3, {0x2, 0x5}}, {0x5, 0x5c4e, {0x1, 0xa4}}, {0x6, 0x4, {0x2, 0xfffffff9}}, {0x2, 0x1718, {0x2, 0x5}}, {0x7, 0x401, {0x2, 0x75}}, {0xe, 0x2, {0x1}}, {0x5, 0x400, {0x2, 0xffffff40}}, {0x4, 0x8, {0x2, 0x4}}, {0x6bf, 0xa, {0x1, 0x302c}}, {0x6, 0x2, {0x1, 0xdd1f}}, {0xde5, 0x8, {0x0, 0xb}}, {0x4, 0xf4d, {0x0, 0x3}}, {0x44, 0x6, {0x6, 0x9}}, {0x1, 0x766, {0x1, 0xfffffff5}}, {0x4, 0x7, {0x0, 0xe0a}}, {0x5, 0x7f, {0x1, 0x176}}, {0x5b9d, 0x8, {0x3, 0x3}}, {0x5, 0x1ae4, {0x2, 0x1}}, {0x0, 0x1, {0x1, 0x2}}, {0x6, 0x196, {0x1, 0x6}}, {0x8, 0x44, {0x0, 0xffff}}, {0xe3e, 0xc, {0x0, 0x7}}, {0xa, 0x8, {0x0, 0x9}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000000)=0x81d) setreuid(0x0, 0xee00) bind$bt_hci(r5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 7m58.788309122s ago: executing program 3 (id=275): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) 7m57.108600194s ago: executing program 3 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000002400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000587eb60d837a00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='hwmon_attr_show_string\x00', r3, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000040)={0x0}, &(0x7f00000000c0)={&(0x7f0000000100)=""/26, 0x0, 0x1a}) sigaltstack(&(0x7f00000002c0)={0x0, 0x80000003}, &(0x7f0000000440)={0x0}) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) unshare(0x60000480) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() flock(r2, 0x9) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) rmdir(0x0) 7m41.009876732s ago: executing program 34 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000002400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000587eb60d837a00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='hwmon_attr_show_string\x00', r3, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000040)={0x0}, &(0x7f00000000c0)={&(0x7f0000000100)=""/26, 0x0, 0x1a}) sigaltstack(&(0x7f00000002c0)={0x0, 0x80000003}, &(0x7f0000000440)={0x0}) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) unshare(0x60000480) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() flock(r2, 0x9) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) rmdir(0x0) 3m17.953102038s ago: executing program 6 (id=760): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 3m5.612949033s ago: executing program 1 (id=770): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800800, &(0x7f0000000440)={[{@noprefix}, {@subsystem='cpuacct'}]}) 3m4.472319862s ago: executing program 1 (id=773): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 3m4.25164925s ago: executing program 6 (id=774): open(&(0x7f0000000000)='./file0\x00', 0x84ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x354d36d9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) 3m1.981846848s ago: executing program 1 (id=777): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x3, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) close(0x3) syz_clone(0x2005000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m57.001839693s ago: executing program 1 (id=783): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000280)={[{@inode_readahead_blks}, {}, {@bh}, {@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@noinit_itable}]}, 0x5, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) 2m55.108196786s ago: executing program 6 (id=784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 2m53.358508588s ago: executing program 1 (id=788): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x2, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="de60d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x208, &(0x7f0000000700)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15) socket$netlink(0x10, 0x3, 0x10) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4002}], 0x1, 0x43) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003093b8620450c038082b801020301090224000203eea0420904030a00060c9b090904420c01ff017403090501ef0820000d"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f0000000180)={0x0, 0x0, 0xc}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',(']) 2m51.859624739s ago: executing program 1 (id=794): open(&(0x7f0000000000)='./file0\x00', 0x84ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x354d36d9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) 2m48.872321506s ago: executing program 35 (id=794): open(&(0x7f0000000000)='./file0\x00', 0x84ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x354d36d9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) 2m45.974273397s ago: executing program 6 (id=802): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f00009b1ffc)=0x0) timer_gettime(r0, &(0x7f00000001c0)) 2m44.861562242s ago: executing program 6 (id=805): syz_usb_connect(0x0, 0x6b, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff09240703040001a530112406060405080004000500060001000d0924030506030501f9092407"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 2m39.107000289s ago: executing program 6 (id=811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 2m23.373374687s ago: executing program 36 (id=811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 2m13.639231207s ago: executing program 7 (id=846): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 2m12.496442175s ago: executing program 7 (id=848): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x108}}, 0x0) 2m11.426305323s ago: executing program 7 (id=850): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='sample_threshold\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x80000) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1460, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1400}], 0x0, 0x0, 0x0}) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000280)="490745de88462808b9cdea977b0e16c8768abf61a2e14d4fcd18a91567", 0x1d, r8) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x3aba828, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c7c6723b96bb110ba7f0a8a63090c63caf7d87e0fba3f4f97e492", @ANYBLOB="c32ab801000000007a00000055bc60af00", @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESHEX], 0x3, 0x0, &(0x7f0000000080)) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m8.184585126s ago: executing program 7 (id=852): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x216, &(0x7f0000000e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m6.932836319s ago: executing program 7 (id=853): openat$fuse(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000180)={[{@errors_remount}, {@noblock_validity}]}, 0x84, 0x4ee, &(0x7f0000001180)="$eJzs3MtvHEUeAOBf99hOnMRrb/aZxyrezSIsHnbsPA9cQCDlgoQEQuGGsZ0oxIlRbKQksrBBKBxRjpyAIxJ/ASe4RMAJxBUExwgpQr4kcECNeqbHGXvGj7HHGRJ/nzRO1XR1V1VXl12PzASwbfXnP5KIPRHxfUT0VqJLE/RX/rm7MDv268LsWBJZ9uIvSTndnYXZsWrS6nm7i8hAGpG+m8SBBvlOX712YXRycuJyER+aufjG0PTVa0+evzh6bqIUl0ZOnTp2tPvkiZHjLalnT17W/W9NHdx3+pUbz4+dufHaV5/m5c2K47X1qOhrMofSshuX37P++CnLskapH2ny6n92PTXhpKONBaEppYjIm6uz3P97oxT3Gq83nnunrYUDtlSWZdmOundL1cB8VpVGliVJ5QTgIZHo0rBNVf/Q31nIJ6+zY/Xz4Ih4dUuHIG11++nKBCiv993iVTnSEWk+h++rzI3SLcr/7xFxZv63D/NXNFyHAABorc/z8c8TlXFH9VU5ksY/q4lu7Zqq7sL0RcRfI2JvRPytGL/8oxhF/isi/r3k6nMNcvxgyVCqf9nR+vHPt90br93a8vHfU8Xe1tLx32Ix+0pFrKdc/87k7PnJiSMR8ZeIGIjOHXl8uP7Si8tqXzz73fsr5d9fM/7LX3n+1bFgUY6fO5Yt0I2Pzoxutt5Vt98uL+nN1dc/FncC8pnBvojY38yFi2civ2fnH/vkYM2Rztpka9d/FS3YZ8o+jni00v7zsaT+lc28riK0dH/y3ERlf3L45ImR40M7Y3LiyFD1qaj39TfXXyiCncuPbar+LZC3/66Gz//iZmZfUrtfO91sDqW4/sN7K85pNvr8dyUvlcNdxXtXRmdmLg9HdCXz9e+P3Dv3ymj3kvR5/QcON+7/eyN+/6g470BE5A/xf4rff4eKsv83Iv4XEYdXuQNfPvP/1xu1/Xrqv3OV67ZCXv/xptq/+UDpws3PVsp/fe1/rBwaKN4ZH51Z87ast4CbuXcAAADwoDgUEXsiSQeLNc49kaaDgxG7F1dQpmcePzv15qXxymcE+qIzra509dashw4Xa8N5PD9rpCaeHz9aXjfJsizrLscHx6Yme9pbddj2dq/Q/3O3Su0uHbDlOmp+rinZ2rIA99fG99EbfrYVeID4vDZsS+Upvv4P29e6+3/D/8IIPMga9f+5iLttKApwnzXq/y+vdsJNO4PwsDD/h+1rw/3/bGvLAdx//v7DtrSZz/WvFth7epU0ScfWZLpyII3VvwWgL6K5C/6YRrSmhKWW1rR7HW26M1qRV6Rrpulo8EUMHev+aoYtCqT5/UnblXujwI6IWOPpXXzY5qqBa3WJ88u0sGDt/s0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQGn8EAAD//xPY3TM=") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0xfe, 0x0, 0x20, 0x6, 0xfe, 0x40, 0x1, 0x0, 0x8, 0x4, 0x0, 0x0, 0x9, 0x9, 0x3}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m4.58692465s ago: executing program 7 (id=857): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x350b}], 0x1, 0x0, 0x0, 0x0) tkill(r1, 0x7) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) close_range(0xffffffffffffffff, r5, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100500, 0x0, 0xfffffffffffffd25) 2m2.149023897s ago: executing program 37 (id=857): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x350b}], 0x1, 0x0, 0x0, 0x0) tkill(r1, 0x7) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) close_range(0xffffffffffffffff, r5, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100500, 0x0, 0xfffffffffffffd25) 1m35.335452805s ago: executing program 2 (id=891): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1m34.252001677s ago: executing program 2 (id=892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) utimensat(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3ffffffe}}, 0x0) 1m33.171164106s ago: executing program 2 (id=894): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='9p_client_res\x00'}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x17e, 0x8001) lseek(r0, 0x1, 0x4) 1m30.494854525s ago: executing program 2 (id=897): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r1, 0x0) ftruncate(r1, 0x3) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4000, &(0x7f0000000400)={[{@norecovery}, {@grpquota}, {@debug}, {@usrquota}]}, 0xee, 0x4ba, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 1m27.4206065s ago: executing program 2 (id=900): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffa888}, 0x0) 1m26.464660537s ago: executing program 2 (id=901): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 1m10.997853659s ago: executing program 38 (id=901): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 14.80511187s ago: executing program 4 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x40}]}}}]}, 0x40}}, 0x0) 13.497569353s ago: executing program 4 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 11.836709619s ago: executing program 8 (id=992): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 10.609511456s ago: executing program 8 (id=994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x9, 0xfff1}, {0x7}}}, 0x24}}, 0x24000000) 10.480151989s ago: executing program 9 (id=995): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000080)) 10.430841504s ago: executing program 5 (id=996): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x7) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 10.017001246s ago: executing program 0 (id=997): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x1a187e, 0x114) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x4002011, r1, 0x0) fallocate(r0, 0x10, 0x0, 0x1000f4) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) 9.732401678s ago: executing program 4 (id=998): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x2, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="de60d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x208, &(0x7f0000000700)="$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") pipe2$9p(0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4002}], 0x1, 0x43) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003093b8620450c038082b801020301090224000203eea0420904030a00060c9b090904420c01ff017403090501ef0820000d"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f0000000180)={0x0, 0x0, 0xc}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',(']) 9.498822129s ago: executing program 8 (id=999): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x28000, 0x734, 0x0, 0xfffffffffffffecb) 9.177828134s ago: executing program 5 (id=1000): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 8.955622481s ago: executing program 9 (id=1001): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) 8.668914988s ago: executing program 9 (id=1002): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x6) tee(r3, r0, 0x8, 0x2) 8.323108245s ago: executing program 0 (id=1003): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000800)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes256, 0x0, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 7.849747805s ago: executing program 8 (id=1004): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$random(0xffffffffffffff9c, 0x0, 0x40800, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000002c0)={0x35}) 7.432366856s ago: executing program 5 (id=1005): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000080)={'fscrypt:', @auto=[0x66, 0x33, 0x62, 0x36, 0xbcc81f6c1a38db6d, 0x30, 0x63, 0x33, 0x61, 0x37, 0x33, 0xfd465b4ec7eb5a18, 0x35, 0x30, 0x34, 0x66]}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000680)={@desc={0x1, 0x0, @desc2}, 0x0, r1}) 7.369249456s ago: executing program 0 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r7, r6, 0x2, 0x0, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) 7.104301282s ago: executing program 9 (id=1007): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) alarm(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x50, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000636000/0x2000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x70bd2b, 0x0, {0x7, 0x0, 0x0, r5, 0x80, 0x0, 0xa}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0xd) 6.386710099s ago: executing program 8 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x1808014, &(0x7f0000005ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x5596, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) 6.029702762s ago: executing program 4 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x9, 0xfff1}, {0x7}}}, 0x24}}, 0x24000000) 5.264378509s ago: executing program 5 (id=1010): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) 4.98842796s ago: executing program 9 (id=1011): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000000000000000000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) r1 = socket(0x10, 0x3, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket(0x10, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c}, 0xdb}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7d1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8c0}, 0x30) 4.217138767s ago: executing program 0 (id=1012): socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) 4.089102346s ago: executing program 4 (id=1013): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000940), 0x0, 0x4040845) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r1], 0x48) socket$nl_route(0x10, 0x3, 0x0) geteuid() r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(r1, r7) 3.268569721s ago: executing program 5 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440000001800010300060000fdedffff0a140100a28218bb8359"], 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 3.013398566s ago: executing program 0 (id=1015): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mount$binderfs(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB='max=00000000000000000010000,stats=global,stvts=glo']) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@x86={0x5, 0x1, 0x2, 0x0, 0x200040, 0x6, 0xfb, 0x89, 0x18, 0xd, 0x7, 0x4, 0x0, 0x1000, 0x1000, 0x2, 0xc, 0x7, 0x19, '\x00', 0x3, 0x8000000000000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.819528206s ago: executing program 9 (id=1016): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@i_version}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) fallocate(r1, 0x0, 0x0, 0x1001f0) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x6c00, 0x0, 0x3) 1.372824853s ago: executing program 5 (id=1017): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.149373852s ago: executing program 8 (id=1018): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 615.006978ms ago: executing program 4 (id=1019): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x2, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="de60d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x208, &(0x7f0000000700)="$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") pipe2$9p(0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4002}], 0x1, 0x43) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003093b8620450c038082b801020301090224000203eea0420904030a00060c9b090904420c01ff017403090501ef0820000d"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f0000000180)={0x0, 0x0, 0xc}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',(']) 0s ago: executing program 0 (id=1020): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x81000f4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 647.193399][ T44] usb 6-1: USB disconnect, device number 21 [ 647.331187][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 648.062034][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 648.090331][ T10] usb 3-1: config index 0 descriptor too short (expected 3876, got 36) [ 648.099153][ T10] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 648.109825][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 648.119246][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 648.128715][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.332069][ T10] usb 3-1: config 0 descriptor?? [ 649.394315][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.401451][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.452660][ T8990] loop7: detected capacity change from 0 to 256 [ 649.750563][ T8990] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 650.204210][ T9000] syz.6.705[9000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.204626][ T9000] syz.6.705[9000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.218138][ T9000] syz.6.705[9000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 651.333059][ T10] usb 3-1: USB disconnect, device number 18 [ 652.125651][ T29] audit: type=1326 audit(2000000283.969:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 652.149297][ T29] audit: type=1326 audit(2000000283.969:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 652.274686][ T9015] loop5: detected capacity change from 0 to 256 [ 652.399577][ T29] audit: type=1326 audit(2000000284.079:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 652.422683][ T29] audit: type=1326 audit(2000000284.079:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 652.450699][ T29] audit: type=1326 audit(2000000284.079:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 652.475175][ T29] audit: type=1326 audit(2000000284.119:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 652.499027][ T29] audit: type=1326 audit(2000000284.129:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 652.522130][ T29] audit: type=1326 audit(2000000284.129:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 652.544877][ T29] audit: type=1326 audit(2000000284.139:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 652.780282][ T9015] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x229ea08d, utbl_chksum : 0x7319d30d) [ 653.147555][ T9022] loop2: detected capacity change from 0 to 128 [ 653.321145][ T9022] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 653.357649][ T9022] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 653.988835][ T9022] fscrypt: Error allocating hmac(sha512): -2 [ 654.909182][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 655.216526][ T9046] loop1: detected capacity change from 0 to 1024 [ 655.436528][ T9046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.122044][ T29] audit: type=1326 audit(2000000288.849:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 657.144872][ T29] audit: type=1326 audit(2000000288.879:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 657.172939][ T29] audit: type=1326 audit(2000000288.879:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 657.198267][ T29] audit: type=1326 audit(2000000288.879:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 657.223761][ T29] audit: type=1326 audit(2000000288.879:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 657.246792][ T29] audit: type=1326 audit(2000000288.879:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 657.274597][ T29] audit: type=1326 audit(2000000288.879:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 657.300046][ T29] audit: type=1326 audit(2000000288.889:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 657.323156][ T29] audit: type=1326 audit(2000000288.889:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 657.345837][ T29] audit: type=1326 audit(2000000288.889:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 657.373806][ T29] audit: type=1326 audit(2000000288.889:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 658.049414][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.734859][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.724'. [ 659.324762][ T9082] loop2: detected capacity change from 0 to 256 [ 659.436260][ T9082] exfat: Deprecated parameter 'utf8' [ 659.443187][ T9082] exfat: Deprecated parameter 'namecase' [ 659.449713][ T9082] exfat: Deprecated parameter 'utf8' [ 659.886153][ T9082] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 660.415566][ T9082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.560014][ T9082] batadv_slave_0: entered promiscuous mode [ 660.667660][ T9085] loop1: detected capacity change from 0 to 2048 [ 661.181825][ T9085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.483746][ T9110] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 661.503193][ T9110] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 661.516120][ T9110] EXT4-fs (loop1): This should not happen!! Data will be lost [ 661.516120][ T9110] [ 661.526306][ T9110] EXT4-fs (loop1): Total free blocks count 0 [ 661.533393][ T9110] EXT4-fs (loop1): Free/Dirty block details [ 661.539638][ T9110] EXT4-fs (loop1): free_blocks=2415919104 [ 661.551031][ T9110] EXT4-fs (loop1): dirty_blocks=16 [ 661.562861][ T9110] EXT4-fs (loop1): Block reservation details [ 661.569166][ T9110] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 662.607122][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 662.607197][ T29] audit: type=1326 audit(2000000294.479:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 662.637877][ T29] audit: type=1326 audit(2000000294.479:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 662.661858][ T9115] loop2: detected capacity change from 0 to 2048 [ 663.103550][ T29] audit: type=1326 audit(2000000294.539:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 663.128088][ T29] audit: type=1326 audit(2000000294.539:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 663.151212][ T29] audit: type=1326 audit(2000000294.539:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cf785d29 code=0x7ffc0000 [ 663.324931][ T9115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.519480][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 663.687704][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.727319][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 663.755338][ T10] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 663.765113][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.775945][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.092831][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 664.102403][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.110684][ T10] usb 7-1: Product: syz [ 664.115294][ T10] usb 7-1: Manufacturer: syz [ 664.121235][ T10] usb 7-1: SerialNumber: syz [ 665.647036][ T9131] kvm: emulating exchange as write [ 665.702998][ T10] usb 7-1: 0:2 : does not exist [ 666.233576][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.824549][ T10] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 667.831534][ T10] usb 7-1: USB disconnect, device number 16 [ 668.187916][ T9144] loop1: detected capacity change from 0 to 512 [ 668.414444][ T9144] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.737: corrupted xattr block 95: invalid header [ 669.231413][ T9144] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.737: bg 0: block 7: invalid block bitmap [ 669.414435][ T9144] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 669.522421][ T9144] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.737: corrupted xattr block 95: invalid header [ 669.725610][ T9144] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 669.735168][ T9144] EXT4-fs (loop1): 1 orphan inode deleted [ 669.743004][ T9144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.980240][ T9152] loop5: detected capacity change from 0 to 2048 [ 670.023318][ T9155] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 670.033444][ T9155] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 670.234494][ T6256] udevd[6256]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.449398][ T9152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.742859][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.404955][ T6095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.459560][ T29] audit: type=1326 audit(2000000305.329:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 673.483969][ T29] audit: type=1326 audit(2000000305.329:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 673.655501][ T29] audit: type=1326 audit(2000000305.449:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 673.679503][ T29] audit: type=1326 audit(2000000305.449:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 673.695822][ T9172] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.703555][ T29] audit: type=1326 audit(2000000305.449:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 673.720906][ T9172] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.731907][ T29] audit: type=1326 audit(2000000305.469:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 673.762294][ T29] audit: type=1326 audit(2000000305.469:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 673.785990][ T29] audit: type=1326 audit(2000000305.469:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.7.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 673.982636][ T9175] binder: BC_ACQUIRE_RESULT not supported [ 673.988600][ T9175] binder: 9174:9175 ioctl c0306201 20000080 returned -22 [ 674.219274][ T9173] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.227177][ T9173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.247949][ T9173] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.248509][ T9173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.742890][ T9188] loop2: detected capacity change from 0 to 2048 [ 675.905194][ T9188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.998503][ T8663] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 676.103151][ T8663] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 677.131092][ T9204] loop5: detected capacity change from 0 to 512 [ 677.492744][ T9204] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.749: corrupted in-inode xattr: invalid ea_ino [ 677.572267][ T9204] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.749: couldn't read orphan inode 15 (err -117) [ 677.882639][ T9204] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.994196][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.892491][ T9213] loop7: detected capacity change from 0 to 512 [ 681.142492][ T9213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 681.640468][ T6095] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 681.793068][ T9213] EXT4-fs (loop7): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 681.958840][ T9220] loop2: detected capacity change from 0 to 16 [ 682.061728][ T9220] erofs (device loop2): negative i_size @ nid 36 [ 682.282982][ T7211] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.951350][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 683.386240][ T9229] loop7: detected capacity change from 0 to 256 [ 684.196136][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 684.205730][ T29] audit: type=1326 audit(2000000315.989:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 684.230126][ T29] audit: type=1326 audit(2000000315.989:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 684.257302][ T29] audit: type=1326 audit(2000000315.989:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 684.282606][ T29] audit: type=1326 audit(2000000315.989:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 684.306146][ T29] audit: type=1326 audit(2000000315.989:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 684.361436][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 684.427352][ T10] usb 3-1: config 3 has an invalid interface number: 3 but max is 1 [ 684.436254][ T10] usb 3-1: config 3 has an invalid interface number: 66 but max is 1 [ 684.444853][ T10] usb 3-1: config 3 has no interface number 0 [ 684.451416][ T10] usb 3-1: config 3 has no interface number 1 [ 684.457783][ T10] usb 3-1: config 3 interface 66 altsetting 12 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 684.469304][ T10] usb 3-1: config 3 interface 66 altsetting 12 endpoint 0x1 has invalid maxpacket 8200, setting to 64 [ 684.480903][ T10] usb 3-1: config 3 interface 3 has no altsetting 0 [ 684.487770][ T10] usb 3-1: config 3 interface 66 has no altsetting 0 [ 684.625787][ T9229] FAT-fs (loop7): Directory bread(block 64) failed [ 684.633801][ T9229] FAT-fs (loop7): Directory bread(block 65) failed [ 684.641748][ T9229] FAT-fs (loop7): Directory bread(block 66) failed [ 684.648549][ T9229] FAT-fs (loop7): Directory bread(block 67) failed [ 684.655751][ T9229] FAT-fs (loop7): Directory bread(block 68) failed [ 684.662702][ T9229] FAT-fs (loop7): Directory bread(block 69) failed [ 684.669669][ T9229] FAT-fs (loop7): Directory bread(block 70) failed [ 684.676702][ T9229] FAT-fs (loop7): Directory bread(block 71) failed [ 684.683762][ T9229] FAT-fs (loop7): Directory bread(block 72) failed [ 684.690535][ T9229] FAT-fs (loop7): Directory bread(block 73) failed [ 684.851116][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 684.860615][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.869219][ T10] usb 3-1: Product: syz [ 684.873743][ T10] usb 3-1: Manufacturer: syz [ 684.878593][ T10] usb 3-1: SerialNumber: syz [ 685.532192][ T10] usb 3-1: can't set config #3, error -71 [ 687.619741][ T10] usb 3-1: USB disconnect, device number 19 [ 688.993233][ T9253] loop2: detected capacity change from 0 to 256 [ 690.202815][ T9257] loop7: detected capacity change from 0 to 128 [ 694.452318][ T9264] loop5: detected capacity change from 0 to 1024 [ 696.670055][ T9279] pim6reg1: entered promiscuous mode [ 696.675866][ T9279] pim6reg1: entered allmulticast mode [ 698.088960][ T9287] loop2: detected capacity change from 0 to 16 [ 698.219540][ T9287] erofs (device loop2): negative i_size @ nid 36 [ 698.280529][ T9292] cgroup: noprefix used incorrectly [ 699.202092][ T5843] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 699.486674][ T5843] usb 3-1: unable to get BOS descriptor or descriptor too short [ 699.592264][ T5843] usb 3-1: not running at top speed; connect to a high speed hub [ 699.690700][ T5843] usb 3-1: config 3 has an invalid interface number: 3 but max is 1 [ 699.699200][ T5843] usb 3-1: config 3 has an invalid interface number: 66 but max is 1 [ 699.707825][ T5843] usb 3-1: config 3 has no interface number 0 [ 699.715066][ T5843] usb 3-1: config 3 has no interface number 1 [ 699.722131][ T5843] usb 3-1: config 3 interface 66 altsetting 12 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 699.733769][ T5843] usb 3-1: config 3 interface 66 altsetting 12 endpoint 0x1 has invalid maxpacket 8200, setting to 64 [ 699.745226][ T5843] usb 3-1: config 3 interface 3 has no altsetting 0 [ 699.757800][ T5843] usb 3-1: config 3 interface 66 has no altsetting 0 [ 700.900538][ T9312] loop7: detected capacity change from 0 to 512 [ 701.159080][ T9312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 701.295696][ T9312] EXT4-fs (loop7): orphan cleanup on readonly fs [ 701.386132][ T9312] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.775: bg 0: block 328: padding at end of block bitmap is not set [ 701.638738][ T9312] EXT4-fs (loop7): Remounting filesystem read-only [ 701.696934][ T5843] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 701.711873][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.720222][ T9312] EXT4-fs (loop7): 1 orphan inode deleted [ 701.730292][ T9312] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 701.749170][ T5843] usb 3-1: can't set config #3, error -71 [ 702.118058][ T9312] kvm: pic: non byte read [ 702.441243][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 702.695178][ T5843] usb 3-1: USB disconnect, device number 20 [ 702.695185][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.695405][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 702.723036][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.810550][ T10] usb 2-1: config 0 descriptor?? [ 705.366375][ T7211] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.503346][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 706.510031][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 706.752470][ T10] usb 2-1: USB disconnect, device number 14 [ 707.454373][ T9339] lo speed is unknown, defaulting to 1000 [ 707.462751][ T9339] lo speed is unknown, defaulting to 1000 [ 707.665050][ T29] audit: type=1326 audit(2000000339.529:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc173785d29 code=0x7ffc0000 [ 707.689330][ T29] audit: type=1326 audit(2000000339.529:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc173785d29 code=0x7ffc0000 [ 708.111984][ T29] audit: type=1326 audit(2000000339.939:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fc173785d29 code=0x7ffc0000 [ 708.134883][ T29] audit: type=1326 audit(2000000339.939:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc173785d29 code=0x7ffc0000 [ 708.158531][ T29] audit: type=1326 audit(2000000339.939:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc173785d29 code=0x7ffc0000 [ 708.688973][ T9343] loop1: detected capacity change from 0 to 2048 [ 708.744852][ T9343] EXT4-fs: Ignoring removed bh option [ 709.123638][ T9343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.501331][ T29] audit: type=1326 audit(2000000341.269:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc173785d29 code=0x7ffc0000 [ 709.525141][ T29] audit: type=1326 audit(2000000341.269:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc173785d29 code=0x7ffc0000 [ 709.548365][ T29] audit: type=1326 audit(2000000341.289:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc173785d29 code=0x7ffc0000 [ 709.800575][ T9360] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 709.901250][ T29] audit: type=1326 audit(2000000341.579:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc173785d29 code=0x7ffc0000 [ 709.924827][ T29] audit: type=1326 audit(2000000341.579:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.1.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc173785d29 code=0x7ffc0000 [ 710.045283][ T9365] loop5: detected capacity change from 0 to 512 [ 710.081541][ T9365] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 710.410040][ T9365] EXT4-fs (loop5): 1 truncate cleaned up [ 710.417904][ T9365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.466108][ T9365] syz.5.786 (pid 9365) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 710.481742][ T9365] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 710.667983][ T6095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.794265][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.801690][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 711.333624][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.349286][ T9378] loop5: detected capacity change from 0 to 512 [ 711.380262][ T8135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.475863][ T9378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 711.531031][ T9378] EXT4-fs (loop5): orphan cleanup on readonly fs [ 711.602058][ T9378] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.791: bg 0: block 328: padding at end of block bitmap is not set [ 711.650676][ T8135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.667566][ T9382] loop7: detected capacity change from 0 to 2048 [ 711.719472][ T9378] EXT4-fs (loop5): Remounting filesystem read-only [ 711.780495][ T9378] EXT4-fs (loop5): 1 orphan inode deleted [ 711.788753][ T9378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 711.876824][ T8135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.139778][ T8135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.199996][ T9378] kvm: pic: non byte read [ 712.851857][ T8135] bridge_slave_1: left allmulticast mode [ 712.857769][ T8135] bridge_slave_1: left promiscuous mode [ 712.865746][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.972198][ T6095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.977061][ T8135] bridge_slave_0: left allmulticast mode [ 712.987447][ T8135] bridge_slave_0: left promiscuous mode [ 712.994344][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.820045][ T8135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.912136][ T8135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.954754][ T8135] bond0 (unregistering): Released all slaves [ 714.150104][ T8135] tipc: Disabling bearer [ 714.156255][ T8135] tipc: Left network mode [ 714.620487][ T8135] hsr_slave_0: left promiscuous mode [ 714.665329][ T8135] hsr_slave_1: left promiscuous mode [ 714.674115][ T8135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.682052][ T8135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.694321][ T8135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.706694][ T8135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.841499][ T8135] veth1_macvtap: left promiscuous mode [ 714.847306][ T8135] veth0_macvtap: left promiscuous mode [ 714.853432][ T8135] veth1_vlan: left promiscuous mode [ 715.771358][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 715.865631][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 715.875662][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 715.889416][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 715.903445][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 715.912932][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 715.962748][ T9414] loop7: detected capacity change from 0 to 512 [ 716.083495][ T8135] team0 (unregistering): Port device team_slave_1 removed [ 716.122958][ T8135] team0 (unregistering): Port device team_slave_0 removed [ 716.553888][ T9414] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.567241][ T9414] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.756084][ T9410] lo speed is unknown, defaulting to 1000 [ 716.764363][ T9410] lo speed is unknown, defaulting to 1000 [ 717.545183][ T9400] loop5: detected capacity change from 0 to 32768 [ 718.008995][ T5787] Bluetooth: hci0: command tx timeout [ 718.174882][ T7211] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.313065][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 718.313145][ T29] audit: type=1326 audit(2000000350.189:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.6.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 718.763398][ T29] audit: type=1326 audit(2000000350.329:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.6.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 718.787134][ T29] audit: type=1326 audit(2000000350.339:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.6.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 718.810668][ T29] audit: type=1326 audit(2000000350.339:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.6.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 718.839975][ T29] audit: type=1326 audit(2000000350.339:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.6.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 718.864673][ T29] audit: type=1326 audit(2000000350.349:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.6.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 718.888954][ T29] audit: type=1326 audit(2000000350.349:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.6.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 718.915300][ T29] audit: type=1326 audit(2000000350.349:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.6.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff847f85d29 code=0x7ffc0000 [ 719.006158][ T9430] loop2: detected capacity change from 0 to 1024 [ 719.185331][ T9430] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 719.195478][ T9430] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 719.231134][ T9430] JBD2: no valid journal superblock found [ 719.237203][ T9430] EXT4-fs (loop2): Could not load journal inode [ 719.476566][ T9436] loop5: detected capacity change from 0 to 512 [ 719.632098][ T9436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 719.687835][ T9436] EXT4-fs (loop5): orphan cleanup on readonly fs [ 719.743436][ T9436] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.806: bg 0: block 328: padding at end of block bitmap is not set [ 719.767360][ T9436] EXT4-fs (loop5): Remounting filesystem read-only [ 719.777061][ T9436] EXT4-fs (loop5): 1 orphan inode deleted [ 719.785560][ T9436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 719.941266][ T44] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 720.081299][ T5787] Bluetooth: hci0: command tx timeout [ 720.098375][ T9410] chnl_net:caif_netlink_parms(): no params data found [ 720.106245][ T9436] kvm: pic: non byte read [ 720.161555][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 720.251678][ T44] usb 7-1: unable to get BOS descriptor or descriptor too short [ 720.282306][ T44] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 720.290971][ T44] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 720.301806][ T44] usb 7-1: config 4 has no interface number 0 [ 720.415546][ T44] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 720.425206][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.433847][ T44] usb 7-1: Product: syz [ 720.442161][ T44] usb 7-1: Manufacturer: syz [ 720.447035][ T44] usb 7-1: SerialNumber: syz [ 720.731990][ T8643] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 720.824558][ T6095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.955035][ T8643] usb 3-1: Using ep0 maxpacket: 32 [ 721.053726][ T8643] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 721.059357][ T44] usb 7-1: USB disconnect, device number 17 [ 721.063541][ T8643] usb 3-1: config 0 has no interface number 0 [ 721.075690][ T8643] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 721.272303][ T8643] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 721.281964][ T8643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.291189][ T8643] usb 3-1: Product: syz [ 721.295624][ T8643] usb 3-1: Manufacturer: syz [ 721.300479][ T8643] usb 3-1: SerialNumber: syz [ 721.399662][ T8643] usb 3-1: config 0 descriptor?? [ 721.414109][ T9452] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 721.444266][ T9449] loop7: detected capacity change from 0 to 8192 [ 721.525847][ T9449] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 721.552713][ T5843] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 722.242918][ T5787] Bluetooth: hci0: command tx timeout [ 722.364345][ T5843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.377243][ T5843] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 723.166296][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.174451][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.182920][ T9410] bridge_slave_0: entered allmulticast mode [ 723.193168][ T9410] bridge_slave_0: entered promiscuous mode [ 723.297278][ T9452] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 723.338726][ T9410] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.347129][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.355553][ T9410] bridge_slave_1: entered allmulticast mode [ 723.366495][ T9410] bridge_slave_1: entered promiscuous mode [ 723.608977][ T5843] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 723.623023][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.632981][ T5843] usb 6-1: Product: syz [ 723.637395][ T5843] usb 6-1: Manufacturer: syz [ 723.642401][ T5843] usb 6-1: SerialNumber: syz [ 723.810160][ T9410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.905466][ T9459] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 724.148250][ T9410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.349729][ T5783] Bluetooth: hci0: command tx timeout [ 724.514966][ T8643] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 724.526081][ T8643] asix 3-1:0.188: probe with driver asix failed with error -61 [ 724.784358][ T9459] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 725.151449][ T9410] team0: Port device team_slave_0 added [ 725.174727][ T5843] cdc_mbim 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 725.184317][ T5843] cdc_mbim 6-1:1.0: setting rx_max = 16384 [ 725.280020][ T9410] team0: Port device team_slave_1 added [ 725.988551][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.812'. [ 726.106987][ T9477] netlink: 96 bytes leftover after parsing attributes in process `syz.7.812'. [ 726.135582][ T9410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.143065][ T9410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.169749][ T9410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.217761][ T8643] usb 3-1: USB disconnect, device number 21 [ 726.376885][ T9479] bridge_slave_1: left allmulticast mode [ 726.383725][ T9479] bridge_slave_1: left promiscuous mode [ 726.390478][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.536589][ T5843] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 726.589130][ T5843] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 726.618355][ T5843] wwan wwan0: port wwan0mbim0 attached [ 726.728698][ T9479] bridge_slave_0: left allmulticast mode [ 726.735215][ T9479] bridge_slave_0: left promiscuous mode [ 726.742139][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.125143][ T9489] loop5: detected capacity change from 0 to 128 [ 727.151237][ T9410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.158447][ T9410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.185201][ T9410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.281491][ T5843] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 42:42:42:42:42:42 [ 727.439371][ T5843] usb 6-1: USB disconnect, device number 22 [ 727.447178][ T5843] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 727.895476][ T5843] wwan wwan0: port wwan0mbim0 disconnected [ 728.070475][ T9489] EXT4-fs (loop5): Test dummy encryption mode enabled [ 728.192998][ T9410] hsr_slave_0: entered promiscuous mode [ 728.296452][ T9410] hsr_slave_1: entered promiscuous mode [ 728.318997][ T9489] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 728.396382][ T9410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 728.404775][ T9410] Cannot create hsr debugfs directory [ 728.434159][ T9489] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 728.932509][ T5843] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 729.161108][ T5843] usb 6-1: Using ep0 maxpacket: 8 [ 729.303622][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.314991][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.325342][ T5843] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 729.334870][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.486207][ T5843] usb 6-1: config 0 descriptor?? [ 729.590228][ T9410] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 729.695264][ T9410] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 729.777090][ T9410] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 729.798676][ T29] audit: type=1326 audit(2000000361.669:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.2.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 729.822021][ T29] audit: type=1326 audit(2000000361.669:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.2.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 729.845476][ T29] audit: type=1326 audit(2000000361.669:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.2.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 729.871924][ T29] audit: type=1326 audit(2000000361.669:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.2.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 729.890343][ T9410] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 729.896710][ T29] audit: type=1326 audit(2000000361.669:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.2.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 730.481271][ T9500] loop7: detected capacity change from 0 to 32768 [ 730.651614][ T29] audit: type=1326 audit(2000000362.509:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 730.674526][ T29] audit: type=1326 audit(2000000362.509:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 730.698571][ T29] audit: type=1326 audit(2000000362.569:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 731.218086][ T29] audit: type=1326 audit(2000000362.689:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 731.243170][ T29] audit: type=1326 audit(2000000362.689:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 731.584495][ T9489] fscrypt (loop5): Error allocating 'xts(aes)' transform: -4 [ 731.785825][ T9529] loop2: detected capacity change from 0 to 512 [ 732.002460][ T9529] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 732.222195][ T9529] EXT4-fs (loop2): orphan cleanup on readonly fs [ 732.300148][ T9529] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.819: bg 0: block 328: padding at end of block bitmap is not set [ 732.399391][ T9529] EXT4-fs (loop2): Remounting filesystem read-only [ 732.407600][ T9529] EXT4-fs (loop2): 1 orphan inode deleted [ 732.416508][ T9529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 732.599607][ T5843] usbhid 6-1:0.0: can't add hid device: -71 [ 732.607330][ T5843] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 732.644271][ T9410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.698563][ T9529] kvm: pic: non byte read [ 732.715253][ T5843] usb 6-1: USB disconnect, device number 23 [ 732.732662][ T6095] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 732.966387][ T9410] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.130530][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.138414][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.227082][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.234957][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.843602][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.180443][ T9546] xt_TCPMSS: Only works on TCP SYN packets [ 737.796493][ T9561] lo speed is unknown, defaulting to 1000 [ 737.805616][ T9561] lo speed is unknown, defaulting to 1000 [ 737.968205][ T29] audit: type=1326 audit(2000000369.599:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.7.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 737.991913][ T29] audit: type=1326 audit(2000000369.609:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.7.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 738.015591][ T29] audit: type=1326 audit(2000000369.829:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.7.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 738.038873][ T29] audit: type=1326 audit(2000000369.829:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.7.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 740.446997][ T9410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.919250][ T9580] loop2: detected capacity change from 0 to 512 [ 742.037658][ T9576] loop7: detected capacity change from 0 to 4096 [ 742.131815][ T9580] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 742.140696][ T9580] EXT4-fs (loop2): orphan cleanup on readonly fs [ 742.155460][ T9580] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.831: bg 0: block 328: padding at end of block bitmap is not set [ 742.233296][ T9576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.292999][ T9580] EXT4-fs (loop2): Remounting filesystem read-only [ 742.330729][ T9580] EXT4-fs (loop2): 1 orphan inode deleted [ 742.375144][ T9580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 742.566547][ T9576] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #15: comm syz.7.830: corrupted inode contents [ 742.662231][ T9576] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #15: comm syz.7.830: mark_inode_dirty error [ 742.701970][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 742.713446][ T9576] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #15: comm syz.7.830: corrupted inode contents [ 742.768761][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 742.804733][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 742.933689][ T9576] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.830: mark_inode_dirty error [ 742.973296][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 743.103539][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.123648][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 743.143621][ T9576] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #15: comm syz.7.830: corrupted inode contents [ 743.159740][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 743.233372][ T9576] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.830: mark_inode_dirty error [ 743.322246][ T9576] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #15: comm syz.7.830: corrupted inode contents [ 743.371255][ T9576] EXT4-fs error (device loop7): ext4_truncate:4240: inode #15: comm syz.7.830: mark_inode_dirty error [ 743.390642][ T9576] EXT4-fs error (device loop7) in ext4_setattr:5568: Corrupt filesystem [ 743.433046][ T9590] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #15: comm syz.7.830: corrupted inode contents [ 743.551771][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 743.679394][ T9592] lo speed is unknown, defaulting to 1000 [ 743.693912][ T9592] lo speed is unknown, defaulting to 1000 [ 743.723074][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 743.800430][ T7211] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 743.861853][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 743.902860][ T7211] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.945196][ T8] usb 3-1: config 128 has an invalid interface number: 166 but max is 0 [ 743.954158][ T8] usb 3-1: config 128 has no interface number 0 [ 743.961021][ T8] usb 3-1: config 128 interface 166 has no altsetting 0 [ 743.980174][ T8] usb 3-1: string descriptor 0 read error: -22 [ 743.987694][ T8] usb 3-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=28.ff [ 743.998106][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.082148][ T8] ums-cypress 3-1:128.166: USB Mass Storage device detected [ 744.287132][ T5843] usb 3-1: USB disconnect, device number 22 [ 744.775757][ T9614] loop7: detected capacity change from 0 to 512 [ 744.937276][ T9614] EXT4-fs (loop7): blocks per group (71) and clusters per group (32768) inconsistent [ 745.208580][ T9410] veth0_vlan: entered promiscuous mode [ 745.398915][ T9410] veth1_vlan: entered promiscuous mode [ 745.442350][ T5787] Bluetooth: hci4: command tx timeout [ 745.820031][ T9592] chnl_net:caif_netlink_parms(): no params data found [ 745.860947][ T9625] loop5: detected capacity change from 0 to 256 [ 745.881638][ T9621] batadv_slave_1: entered promiscuous mode [ 745.943465][ T9623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.056491][ T9623] batadv_slave_1 (unregistering): left promiscuous mode [ 746.064243][ T9623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.076552][ T9625] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 746.261358][ T9625] exFAT-fs (loop5): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 746.261358][ T9625] [ 746.275553][ T9625] exFAT-fs (loop5): Filesystem has been set read-only [ 746.319903][ T9410] veth0_macvtap: entered promiscuous mode [ 746.565912][ T9410] veth1_macvtap: entered promiscuous mode [ 746.673912][ T9631] loop7: detected capacity change from 0 to 16 [ 746.797127][ T9631] erofs (device loop7): negative i_size @ nid 36 [ 746.829327][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.840468][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.850839][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.866505][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.878218][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.890225][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.908672][ T9410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.252939][ T9639] loop5: detected capacity change from 0 to 512 [ 747.309079][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.319984][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.330978][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.341767][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.352628][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.363510][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.384412][ T9410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.577365][ T5787] Bluetooth: hci4: command tx timeout [ 747.603602][ T9639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 747.668130][ T9410] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.683041][ T9410] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.697135][ T9410] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.706765][ T9410] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.751706][ T9639] EXT4-fs (loop5): orphan cleanup on readonly fs [ 747.769378][ T9639] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.842: bg 0: block 328: padding at end of block bitmap is not set [ 747.921131][ T9639] EXT4-fs (loop5): Remounting filesystem read-only [ 747.929690][ T9639] EXT4-fs (loop5): 1 orphan inode deleted [ 747.937915][ T9639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 748.299619][ T9592] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.309082][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.317223][ T9592] bridge_slave_0: entered allmulticast mode [ 748.327745][ T9592] bridge_slave_0: entered promiscuous mode [ 748.544061][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.552028][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.559954][ T9592] bridge_slave_1: entered allmulticast mode [ 748.569334][ T9592] bridge_slave_1: entered promiscuous mode [ 748.575973][ T9639] kvm: pic: non byte read [ 748.711446][ T8089] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.895811][ T8089] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.087380][ T8089] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.186011][ T9592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.325963][ T6095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.382166][ T9592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.458014][ T8089] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.623445][ T5787] Bluetooth: hci4: command tx timeout [ 749.978318][ T9592] team0: Port device team_slave_0 added [ 750.073646][ T9592] team0: Port device team_slave_1 added [ 750.300071][ T29] audit: type=1326 audit(2000000382.149:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.7.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 750.422721][ T29] audit: type=1326 audit(2000000382.229:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.7.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 750.449676][ T29] audit: type=1326 audit(2000000382.259:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.7.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 750.473904][ T29] audit: type=1326 audit(2000000382.259:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.7.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 750.497385][ T29] audit: type=1326 audit(2000000382.269:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.7.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 750.521401][ T29] audit: type=1326 audit(2000000382.269:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.7.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 750.547951][ T29] audit: type=1326 audit(2000000382.289:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.7.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 750.572107][ T29] audit: type=1326 audit(2000000382.289:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.7.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 750.595902][ T29] audit: type=1326 audit(2000000382.299:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.7.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 750.619086][ T29] audit: type=1326 audit(2000000382.449:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.7.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586985d29 code=0x7ffc0000 [ 751.097919][ T8089] bridge_slave_1: left allmulticast mode [ 751.105150][ T8089] bridge_slave_1: left promiscuous mode [ 751.111982][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.185978][ T8089] bridge_slave_0: left allmulticast mode [ 751.193703][ T8089] bridge_slave_0: left promiscuous mode [ 751.200345][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.703640][ T5787] Bluetooth: hci4: command tx timeout [ 751.810001][ T9680] loop5: detected capacity change from 0 to 128 [ 752.142881][ T8089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.314354][ T9680] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 752.363121][ T8089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.394543][ T8089] bond0 (unregistering): Released all slaves [ 752.554725][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.562515][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.589179][ T9592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.743001][ T9680] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 752.904179][ T8089] tipc: Disabling bearer [ 752.910136][ T8089] tipc: Left network mode [ 752.962907][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.970108][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.996632][ T9592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.295389][ T9690] binder: BINDER_SET_CONTEXT_MGR already set [ 753.301736][ T9690] binder: 9684:9690 ioctl 4018620d 20000040 returned -16 [ 754.311836][ T6095] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 754.613673][ T9592] hsr_slave_0: entered promiscuous mode [ 754.846185][ T9592] hsr_slave_1: entered promiscuous mode [ 754.990571][ T9592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 754.998585][ T9592] Cannot create hsr debugfs directory [ 755.145530][ T8089] hsr_slave_0: left promiscuous mode [ 755.261680][ T8089] hsr_slave_1: left promiscuous mode [ 755.356121][ T8089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.364820][ T8089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.426376][ T8089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.434249][ T8089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.557399][ T8089] veth1_macvtap: left promiscuous mode [ 755.564791][ T8089] veth0_macvtap: left promiscuous mode [ 755.571018][ T8089] veth1_vlan: left promiscuous mode [ 755.576618][ T8089] veth0_vlan: left promiscuous mode [ 755.672588][ T9699] loop7: detected capacity change from 0 to 256 [ 757.047428][ T9705] loop5: detected capacity change from 0 to 16 [ 757.056144][ T8089] team0 (unregistering): Port device team_slave_1 removed [ 757.128922][ T9705] erofs (device loop5): negative i_size @ nid 36 [ 757.157044][ T8089] team0 (unregistering): Port device team_slave_0 removed [ 757.577248][ T8643] lo speed is unknown, defaulting to 1000 [ 757.913022][ T8643] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 758.298862][ T8643] usb 6-1: unable to get BOS descriptor or descriptor too short [ 758.334485][ T8643] usb 6-1: not running at top speed; connect to a high speed hub [ 758.400469][ T8643] usb 6-1: config 3 has an invalid interface number: 3 but max is 1 [ 758.409217][ T8643] usb 6-1: config 3 has an invalid interface number: 66 but max is 1 [ 758.417808][ T8643] usb 6-1: config 3 has no interface number 0 [ 758.424306][ T8643] usb 6-1: config 3 has no interface number 1 [ 758.431600][ T8643] usb 6-1: config 3 interface 66 altsetting 12 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 758.443401][ T8643] usb 6-1: config 3 interface 66 altsetting 12 endpoint 0x1 has invalid maxpacket 8200, setting to 64 [ 758.454880][ T8643] usb 6-1: config 3 interface 3 has no altsetting 0 [ 758.463248][ T8643] usb 6-1: config 3 interface 66 has no altsetting 0 [ 758.595119][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 758.595191][ T29] audit: type=1326 audit(2000000390.389:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 758.624773][ T29] audit: type=1326 audit(2000000390.389:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 758.672198][ T29] audit: type=1326 audit(2000000390.539:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 758.694976][ T29] audit: type=1326 audit(2000000390.539:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 758.718361][ T8643] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 758.728494][ T8643] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.738498][ T8643] usb 6-1: Product: syz [ 758.743397][ T8643] usb 6-1: Manufacturer: syz [ 758.748267][ T8643] usb 6-1: SerialNumber: syz [ 758.771890][ T29] audit: type=1326 audit(2000000390.629:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 758.794858][ T29] audit: type=1326 audit(2000000390.629:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 758.817717][ T29] audit: type=1326 audit(2000000390.629:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 758.842681][ T29] audit: type=1326 audit(2000000390.629:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 759.011979][ T8089] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.054906][ T9705] 9pnet_fd: Insufficient options for proto=fd [ 759.107387][ T8643] hub 6-1:3.3: bad descriptor, ignoring hub [ 759.113968][ T8643] hub 6-1:3.3: probe with driver hub failed with error -5 [ 759.182723][ T8643] hub 6-1:3.66: bad descriptor, ignoring hub [ 759.189004][ T8643] hub 6-1:3.66: probe with driver hub failed with error -5 [ 759.204824][ T8089] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.272199][ T29] audit: type=1326 audit(2000000390.779:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 759.295831][ T29] audit: type=1326 audit(2000000390.799:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 759.384550][ T8643] usb 6-1: USB disconnect, device number 24 [ 759.420651][ T8089] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.761337][ T8089] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.994917][ T1836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.005582][ T1836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.399845][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.409060][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.862656][ T8089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.911239][ T8089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.944977][ T8089] bond0 (unregistering): Released all slaves [ 761.219510][ T9592] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 761.660278][ T9735] overlayfs: missing 'lowerdir' [ 761.717039][ T9592] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 761.772864][ T9592] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 762.080541][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 762.090400][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 762.100555][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 762.118069][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 762.129572][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 762.139698][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 762.181996][ T9592] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 763.430687][ T9741] lo speed is unknown, defaulting to 1000 [ 763.799186][ T8089] hsr_slave_0: left promiscuous mode [ 763.809253][ T8089] hsr_slave_1: left promiscuous mode [ 763.819593][ T8089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.827551][ T8089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.839877][ T8089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.848775][ T8089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.869258][ T8089] veth1_macvtap: left promiscuous mode [ 763.875227][ T8089] veth0_macvtap: left promiscuous mode [ 763.881396][ T8089] veth1_vlan: left promiscuous mode [ 763.887084][ T8089] veth0_vlan: left promiscuous mode [ 764.495099][ T5783] Bluetooth: hci1: command tx timeout [ 764.911339][ T8089] team0 (unregistering): Port device team_slave_1 removed [ 764.989373][ T8089] team0 (unregistering): Port device team_slave_0 removed [ 765.882315][ T9761] loop2: detected capacity change from 0 to 512 [ 766.129894][ T9761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 766.171653][ T9761] EXT4-fs (loop2): orphan cleanup on readonly fs [ 766.178914][ T9761] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.865: bg 0: block 328: padding at end of block bitmap is not set [ 766.321473][ T9761] EXT4-fs (loop2): Remounting filesystem read-only [ 766.328646][ T9761] EXT4-fs (loop2): 1 orphan inode deleted [ 766.336459][ T9761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 766.501201][ T9592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.561874][ T5783] Bluetooth: hci1: command tx timeout [ 766.753611][ T9761] kvm: pic: non byte read [ 766.759530][ T9592] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.783251][ T9771] netlink: 36 bytes leftover after parsing attributes in process `syz.8.866'. [ 766.793007][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.8.866'. [ 766.802334][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.8.866'. [ 766.890316][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.898236][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.017907][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.025732][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.153298][ T9741] chnl_net:caif_netlink_parms(): no params data found [ 767.520027][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.549020][ T9774] loop5: detected capacity change from 0 to 16 [ 767.654341][ T9774] erofs (device loop5): negative i_size @ nid 36 [ 767.754792][ T9780] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 767.764230][ T9780] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 768.402238][ T8663] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 768.647359][ T5783] Bluetooth: hci1: command tx timeout [ 768.681369][ T8663] usb 6-1: unable to get BOS descriptor or descriptor too short [ 768.703342][ T8663] usb 6-1: not running at top speed; connect to a high speed hub [ 768.724783][ T8663] usb 6-1: config 3 has an invalid interface number: 3 but max is 1 [ 768.733264][ T8663] usb 6-1: config 3 has an invalid interface number: 66 but max is 1 [ 768.741795][ T8663] usb 6-1: config 3 has no interface number 0 [ 768.748147][ T8663] usb 6-1: config 3 has no interface number 1 [ 768.754772][ T8663] usb 6-1: config 3 interface 66 altsetting 12 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 768.766242][ T8663] usb 6-1: config 3 interface 66 altsetting 12 endpoint 0x1 has invalid maxpacket 8200, setting to 64 [ 768.778752][ T8663] usb 6-1: config 3 interface 3 has no altsetting 0 [ 768.786022][ T8663] usb 6-1: config 3 interface 66 has no altsetting 0 [ 769.018404][ T8663] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 769.028380][ T8663] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.036875][ T8663] usb 6-1: Product: syz [ 769.041693][ T8663] usb 6-1: Manufacturer: syz [ 769.046549][ T8663] usb 6-1: SerialNumber: syz [ 769.450651][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.461243][ T9741] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.469477][ T9741] bridge_slave_0: entered allmulticast mode [ 769.480271][ T9741] bridge_slave_0: entered promiscuous mode [ 769.703787][ T8663] hub 6-1:3.3: bad descriptor, ignoring hub [ 769.710021][ T8663] hub 6-1:3.3: probe with driver hub failed with error -5 [ 769.741625][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.749459][ T9741] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.757475][ T9741] bridge_slave_1: entered allmulticast mode [ 769.767514][ T9741] bridge_slave_1: entered promiscuous mode [ 769.809893][ T8663] hub 6-1:3.66: bad descriptor, ignoring hub [ 769.816789][ T8663] hub 6-1:3.66: probe with driver hub failed with error -5 [ 769.816830][ T9804] loop8: detected capacity change from 0 to 512 [ 769.902811][ T5843] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 769.971464][ T9804] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.873: bad orphan inode 15 [ 770.002693][ T9804] ext4_test_bit(bit=14, block=5) = 0 [ 770.010033][ T9804] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.041272][ T8663] usb 6-1: USB disconnect, device number 25 [ 770.041637][ T9741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.097415][ T9741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.204753][ T9804] EXT4-fs error (device loop8): __ext4_new_inode:1071: comm syz.8.873: reserved inode found cleared - inode=1 [ 770.225447][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 770.254644][ T5843] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 770.352151][ T5843] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 770.361784][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.370158][ T5843] usb 3-1: Product: syz [ 770.374754][ T5843] usb 3-1: Manufacturer: syz [ 770.379590][ T5843] usb 3-1: SerialNumber: syz [ 770.400528][ T9592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.431387][ T9741] team0: Port device team_slave_0 added [ 770.484525][ T9741] team0: Port device team_slave_1 added [ 770.721374][ T5783] Bluetooth: hci1: command tx timeout [ 770.735599][ T5843] usb 3-1: selecting invalid altsetting 1 [ 770.760308][ T9410] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.791830][ T5843] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 770.792264][ T5843] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 770.906575][ T9741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.907821][ T5843] usb 3-1: USB disconnect, device number 23 [ 770.914235][ T9741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.947075][ T9741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.988396][ T9812] loop5: detected capacity change from 0 to 256 [ 771.029672][ T9741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.038242][ T9741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.066636][ T9741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.522717][ T9741] hsr_slave_0: entered promiscuous mode [ 771.548619][ T9741] hsr_slave_1: entered promiscuous mode [ 771.672315][ T8663] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 771.911253][ T8663] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.922707][ T8663] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.933008][ T8663] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 771.947174][ T8663] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.956933][ T8663] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.214000][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.221080][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.472054][ T8663] usb 9-1: config 0 descriptor?? [ 772.560604][ T9820] loop2: detected capacity change from 0 to 512 [ 772.788057][ T9820] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 779.605368][ T8663] usbhid 9-1:0.0: can't add hid device: -71 [ 779.612176][ T8663] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 780.611818][ T8663] usb 9-1: USB disconnect, device number 2 [ 780.926842][ T9840] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 780.936431][ T9840] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 781.137006][ T9592] veth0_vlan: entered promiscuous mode [ 781.455960][ T9592] veth1_vlan: entered promiscuous mode [ 781.718274][ T9741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 781.938912][ T9741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 782.086273][ T9741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 782.297284][ T9741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 782.370624][ T9851] loop5: detected capacity change from 0 to 16 [ 782.450610][ T9592] veth0_macvtap: entered promiscuous mode [ 782.494250][ T9592] veth1_macvtap: entered promiscuous mode [ 782.548164][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.559099][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.569322][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.580259][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.599134][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.617363][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.629174][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.639691][ T9592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.650553][ T9592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.664924][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.683749][ T9592] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.692953][ T9592] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.705225][ T9592] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.716536][ T9592] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.720312][ T9851] erofs (device loop5): negative i_size @ nid 36 [ 783.444467][ T8643] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 783.730376][ T8643] usb 6-1: unable to get BOS descriptor or descriptor too short [ 783.764313][ T9741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.781899][ T9862] lo speed is unknown, defaulting to 1000 [ 783.784099][ T8643] usb 6-1: not running at top speed; connect to a high speed hub [ 783.887330][ T8643] usb 6-1: config 3 has an invalid interface number: 3 but max is 1 [ 783.896102][ T8643] usb 6-1: config 3 has an invalid interface number: 66 but max is 1 [ 783.904682][ T8643] usb 6-1: config 3 has no interface number 0 [ 783.911126][ T8643] usb 6-1: config 3 has no interface number 1 [ 783.917481][ T8643] usb 6-1: config 3 interface 66 altsetting 12 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 783.929871][ T8643] usb 6-1: config 3 interface 66 altsetting 12 endpoint 0x1 has invalid maxpacket 8200, setting to 64 [ 783.941736][ T8643] usb 6-1: config 3 interface 3 has no altsetting 0 [ 783.948623][ T8643] usb 6-1: config 3 interface 66 has no altsetting 0 [ 784.093225][ T8643] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 784.102917][ T8643] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.111461][ T8643] usb 6-1: Product: syz [ 784.115875][ T8643] usb 6-1: Manufacturer: syz [ 784.120708][ T8643] usb 6-1: SerialNumber: syz [ 784.128026][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 784.249386][ T9741] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.309759][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.321844][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.332212][ T8] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 784.342635][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.493658][ T9871] loop8: detected capacity change from 0 to 128 [ 784.605276][ T8] usb 3-1: config 0 descriptor?? [ 784.625119][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.632999][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.842342][ T8643] hub 6-1:3.3: bad descriptor, ignoring hub [ 784.849890][ T8643] hub 6-1:3.3: probe with driver hub failed with error -5 [ 784.863336][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.871138][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.084855][ T8643] hub 6-1:3.66: bad descriptor, ignoring hub [ 785.092854][ T8643] hub 6-1:3.66: probe with driver hub failed with error -5 [ 785.297573][ T8643] usb 6-1: USB disconnect, device number 26 [ 785.354249][ T8] hid-led 0003:0FC5:B080.0009: probe with driver hid-led failed with error -71 [ 785.473258][ T8] usb 3-1: USB disconnect, device number 24 [ 786.463630][ T9880] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 786.632644][ T9880] kvm: pic: non byte read [ 786.692395][ T9880] kvm: pic: non byte read [ 786.715271][ T9880] kvm: pic: single mode not supported [ 786.715693][ T9880] kvm: pic: non byte read [ 787.465319][ T9741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.640086][ T9899] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 787.651650][ T9899] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 788.082667][ T8643] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 788.164116][ T9741] veth0_vlan: entered promiscuous mode [ 788.289943][ T8643] usb 9-1: Using ep0 maxpacket: 16 [ 788.320019][ T9741] veth1_vlan: entered promiscuous mode [ 788.386999][ T8643] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 788.398362][ T8643] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 788.408548][ T8643] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 788.419984][ T8643] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 788.670227][ T8643] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 788.679890][ T8643] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.688644][ T8643] usb 9-1: Product: syz [ 788.693284][ T8643] usb 9-1: Manufacturer: syz [ 788.698135][ T8643] usb 9-1: SerialNumber: syz [ 788.853668][ T9741] veth0_macvtap: entered promiscuous mode [ 788.983274][ T9741] veth1_macvtap: entered promiscuous mode [ 789.266847][ T9741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.278625][ T9741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.294527][ T9741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.306073][ T9741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.316273][ T9741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.327206][ T9741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.342082][ T9741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.401739][ T8643] usb 9-1: USB disconnect, device number 3 [ 789.699070][ T9741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.709954][ T9741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.720314][ T9741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.731126][ T9741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.741303][ T9741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.752124][ T9741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.770197][ T9741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.948073][ T6256] udevd[6256]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.980543][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 789.980629][ T29] audit: type=1326 audit(2000000421.819:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9912 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 790.013079][ T29] audit: type=1326 audit(2000000421.829:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9912 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 790.036972][ T29] audit: type=1326 audit(2000000421.829:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9912 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 790.060396][ T29] audit: type=1326 audit(2000000421.839:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9912 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 790.084561][ T29] audit: type=1326 audit(2000000421.849:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9912 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457fd85d29 code=0x7ffc0000 [ 790.149323][ T9741] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.158713][ T9741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.168041][ T9741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.180325][ T9741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.848934][ T9918] loop8: detected capacity change from 0 to 2048 [ 791.396835][ T9921] loop2: detected capacity change from 0 to 4096 [ 791.614482][ T9921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.681255][ T8] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 791.874457][ T9934] loop8: detected capacity change from 0 to 512 [ 791.921673][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 791.959203][ T8] usb 6-1: not running at top speed; connect to a high speed hub [ 791.969701][ T9934] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 792.023293][ T8] usb 6-1: config 3 has an invalid interface number: 3 but max is 1 [ 792.032915][ T8] usb 6-1: config 3 has an invalid interface number: 66 but max is 1 [ 792.042640][ T8] usb 6-1: config 3 has no interface number 0 [ 792.049792][ T8] usb 6-1: config 3 has no interface number 1 [ 792.056642][ T8] usb 6-1: config 3 interface 66 altsetting 12 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 792.068191][ T8] usb 6-1: config 3 interface 66 altsetting 12 endpoint 0x1 has invalid maxpacket 8200, setting to 64 [ 792.079632][ T8] usb 6-1: config 3 interface 3 has no altsetting 0 [ 792.086613][ T8] usb 6-1: config 3 interface 66 has no altsetting 0 [ 792.178911][ T8] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 792.188515][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.197074][ T8] usb 6-1: Product: syz [ 792.201617][ T8] usb 6-1: Manufacturer: syz [ 792.206474][ T8] usb 6-1: SerialNumber: syz [ 792.317192][ T9934] EXT4-fs (loop8): 1 orphan inode deleted [ 792.326149][ T9934] EXT4-fs (loop8): 1 truncate cleaned up [ 792.334678][ T9934] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.886864][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.895380][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.079303][ T8081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.087629][ T8081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.208433][ T9940] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.8.896: path /15/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 793.342434][ T9940] EXT4-fs (loop8): Remounting filesystem read-only [ 793.511806][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.085975][ T8] hub 6-1:3.3: bad descriptor, ignoring hub [ 794.092622][ T8] hub 6-1:3.3: probe with driver hub failed with error -5 [ 795.056753][ T8] hub 6-1:3.66: bad descriptor, ignoring hub [ 795.063252][ T8] hub 6-1:3.66: probe with driver hub failed with error -5 [ 795.309675][ T8] usb 6-1: USB disconnect, device number 27 [ 795.429742][ T9410] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.704907][ T9945] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 795.893131][ T9953] kvm: pic: non byte read [ 795.932240][ T9953] kvm: pic: non byte read [ 795.937735][ T9953] kvm: pic: level sensitive irq not supported [ 795.938073][ T9953] kvm: pic: non byte read [ 795.986909][ T9957] loop8: detected capacity change from 0 to 64 [ 796.056356][ T9953] kvm: pic: non byte read [ 796.139818][ T9953] kvm: pic: level sensitive irq not supported [ 796.140139][ T9953] kvm: pic: non byte read [ 796.208921][ T9953] kvm: pic: non byte read [ 796.492362][ T44] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 796.698078][ T44] usb 9-1: Using ep0 maxpacket: 8 [ 796.736412][ T44] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 796.746175][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.868873][ T44] usb 9-1: config 0 descriptor?? [ 797.776142][ T44] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 797.789344][ T44] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 797.867189][ T44] asix 9-1:0.0: probe with driver asix failed with error -71 [ 797.978462][ T44] usb 9-1: USB disconnect, device number 4 [ 799.292772][ T29] audit: type=1326 audit(2000000431.159:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9985 comm="syz.8.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c28985d29 code=0x7ffc0000 [ 799.316661][ T29] audit: type=1326 audit(2000000431.159:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9985 comm="syz.8.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c28985d29 code=0x7ffc0000 [ 799.542732][ T29] audit: type=1326 audit(2000000431.229:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9985 comm="syz.8.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f8c28985d29 code=0x7ffc0000 [ 799.565768][ T29] audit: type=1326 audit(2000000431.229:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9985 comm="syz.8.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c28985d29 code=0x7ffc0000 [ 799.588554][ T29] audit: type=1326 audit(2000000431.229:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9985 comm="syz.8.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c28985d29 code=0x7ffc0000 [ 799.785416][ T9990] x_tables: duplicate underflow at hook 1 [ 800.148393][ T8081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.156777][ T8081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.169099][ T1836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.177565][ T1836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.911039][ T8] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 809.328837][T10020] loop8: detected capacity change from 0 to 64 [ 809.401306][ T8] usb 9-1: device descriptor read/all, error -71 [ 810.401481][ T8] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 810.444894][T10015] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 810.579483][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 810.623107][T10015] kvm: pic: non byte read [ 810.629064][T10015] kvm: pic: non byte read [ 810.672697][ T8663] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 810.683882][ T8] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 810.698919][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.729231][T10015] kvm: pic: level sensitive irq not supported [ 810.729615][T10015] kvm: pic: non byte read [ 810.785203][T10015] kvm: pic: non byte read [ 810.821814][ T8] usb 9-1: config 0 descriptor?? [ 810.883746][T10015] kvm: pic: non byte read [ 810.961309][ T8663] usb 6-1: Using ep0 maxpacket: 16 [ 811.084816][ T8663] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 811.099976][ T8663] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.109917][ T8663] usb 6-1: Product: syz [ 811.114837][ T8663] usb 6-1: Manufacturer: syz [ 811.120105][ T8663] usb 6-1: SerialNumber: syz [ 811.260282][ T8663] usb 6-1: config 0 descriptor?? [ 811.285082][ T8663] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 811.297099][ T8663] usb 6-1: Detected FT232H [ 811.524922][ T8663] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 811.766457][ T8] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 811.778493][ T8] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 811.922733][ T8] asix 9-1:0.0: probe with driver asix failed with error -71 [ 811.997178][ T8663] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 812.014514][ T8] usb 9-1: USB disconnect, device number 6 [ 812.217868][ T44] usb 6-1: USB disconnect, device number 28 [ 812.383162][ T44] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 812.398448][ T44] ftdi_sio 6-1:0.0: device disconnected [ 813.128732][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 813.168449][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 813.184591][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 813.207793][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 813.250044][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 813.265898][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 813.474984][T10058] lo speed is unknown, defaulting to 1000 [ 815.765033][ T5787] Bluetooth: hci2: command tx timeout [ 817.270223][T10058] chnl_net:caif_netlink_parms(): no params data found [ 817.680434][T10086] loop5: detected capacity change from 0 to 512 [ 817.882958][ T5787] Bluetooth: hci2: command tx timeout [ 818.028033][ T44] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 818.081057][T10086] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.925: casefold flag without casefold feature [ 818.133454][T10086] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.925: couldn't read orphan inode 15 (err -117) [ 818.235217][T10086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.993673][ T44] usb 10-1: unable to get BOS descriptor or descriptor too short [ 819.043590][ T44] usb 10-1: not running at top speed; connect to a high speed hub [ 819.156463][ T44] usb 10-1: config 3 has an invalid interface number: 3 but max is 1 [ 819.165076][ T44] usb 10-1: config 3 has an invalid interface number: 66 but max is 1 [ 819.173759][ T44] usb 10-1: config 3 has no interface number 0 [ 819.180269][ T44] usb 10-1: config 3 has no interface number 1 [ 819.188494][ T44] usb 10-1: config 3 interface 66 altsetting 12 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 819.200707][ T44] usb 10-1: config 3 interface 66 altsetting 12 endpoint 0x1 has invalid maxpacket 8200, setting to 64 [ 819.212502][ T44] usb 10-1: config 3 interface 3 has no altsetting 0 [ 819.219468][ T44] usb 10-1: config 3 interface 66 has no altsetting 0 [ 819.661290][ T44] usb 10-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 819.673608][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.683034][ T44] usb 10-1: Product: syz [ 819.687537][ T44] usb 10-1: Manufacturer: syz [ 819.692639][ T44] usb 10-1: SerialNumber: syz [ 819.924797][ T5787] Bluetooth: hci2: command tx timeout [ 820.026665][ T9838] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 820.119452][T10058] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.122095][ T6095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.127554][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.144536][T10058] bridge_slave_0: entered allmulticast mode [ 820.155713][T10058] bridge_slave_0: entered promiscuous mode [ 820.376556][T10058] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.385764][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.393920][T10058] bridge_slave_1: entered allmulticast mode [ 820.403333][T10058] bridge_slave_1: entered promiscuous mode [ 820.459043][T10113] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 820.475773][ T9838] usb 1-1: Using ep0 maxpacket: 8 [ 820.570668][ T9838] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 820.580703][ T9838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.724985][ T9838] usb 1-1: config 0 descriptor?? [ 820.799759][ T44] hub 10-1:3.3: bad descriptor, ignoring hub [ 820.808558][ T44] hub 10-1:3.3: probe with driver hub failed with error -5 [ 820.836952][ T44] hub 10-1:3.66: bad descriptor, ignoring hub [ 820.845223][ T44] hub 10-1:3.66: probe with driver hub failed with error -5 [ 821.101953][ T44] usb 10-1: USB disconnect, device number 2 [ 821.318458][T10122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 821.384280][T10058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.551011][T10058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.660538][ T9838] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 821.671419][ T9838] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 821.761720][ T9838] asix 1-1:0.0: probe with driver asix failed with error -71 [ 821.822300][ T9838] usb 1-1: USB disconnect, device number 2 [ 821.976644][T10058] team0: Port device team_slave_0 added [ 822.063127][ T5787] Bluetooth: hci2: command tx timeout [ 822.124122][T10058] team0: Port device team_slave_1 added [ 822.296998][T10058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.304365][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.333088][T10058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.705754][T10058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.713067][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.741805][T10058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.399169][ T9838] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 823.786727][ T9838] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 824.144278][T10058] hsr_slave_0: entered promiscuous mode [ 824.408841][T10143] loop9: detected capacity change from 0 to 512 [ 824.451857][T10058] hsr_slave_1: entered promiscuous mode [ 824.541188][T10058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 824.549027][T10058] Cannot create hsr debugfs directory [ 824.691111][T10143] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 824.704577][T10143] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.023067][ T9592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 826.929464][T10166] loop5: detected capacity change from 0 to 16 [ 827.088778][T10166] erofs (device loop5): negative i_size @ nid 36 [ 827.953140][ T8663] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 828.008762][T10176] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 828.163767][T10176] kvm: pic: non byte read [ 828.217193][T10176] kvm: pic: non byte read [ 828.244640][ T8663] usb 6-1: unable to get BOS descriptor or descriptor too short [ 828.266454][T10187] loop8: detected capacity change from 0 to 64 [ 828.288121][T10176] kvm: pic: level sensitive irq not supported [ 828.288451][T10176] kvm: pic: non byte read [ 828.318653][ T8663] usb 6-1: not running at top speed; connect to a high speed hub [ 828.393875][ T8663] usb 6-1: config 3 has an invalid interface number: 3 but max is 1 [ 828.408213][ T8663] usb 6-1: config 3 has an invalid interface number: 66 but max is 1 [ 828.417142][ T8663] usb 6-1: config 3 has no interface number 0 [ 828.424534][ T8663] usb 6-1: config 3 has no interface number 1 [ 828.431354][ T8663] usb 6-1: config 3 interface 66 altsetting 12 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 828.443291][ T8663] usb 6-1: config 3 interface 66 altsetting 12 endpoint 0x1 has invalid maxpacket 8200, setting to 64 [ 828.455679][ T8663] usb 6-1: config 3 interface 3 has no altsetting 0 [ 828.463061][ T8663] usb 6-1: config 3 interface 66 has no altsetting 0 [ 828.532828][T10176] kvm: pic: non byte read [ 828.538392][T10176] kvm: pic: non byte read [ 828.583672][T10176] kvm: pic: non byte read [ 828.589282][T10176] kvm: pic: non byte read [ 828.630371][T10176] kvm: pic: level sensitive irq not supported [ 828.753044][T10176] kvm: pic: non byte read [ 828.808639][T10058] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 828.818124][ T8663] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 828.818300][ T8663] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.818436][ T8663] usb 6-1: Product: syz [ 828.818543][ T8663] usb 6-1: Manufacturer: syz [ 828.818653][ T8663] usb 6-1: SerialNumber: syz [ 828.999132][ T9838] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 829.193750][ T8663] hub 6-1:3.3: bad descriptor, ignoring hub [ 829.199975][ T8663] hub 6-1:3.3: probe with driver hub failed with error -5 [ 829.211120][ T9838] usb 9-1: Using ep0 maxpacket: 8 [ 829.244497][T10058] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 829.295444][ T9838] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 829.305595][ T9838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.318149][ T8663] hub 6-1:3.66: bad descriptor, ignoring hub [ 829.329412][ T8663] hub 6-1:3.66: probe with driver hub failed with error -5 [ 829.368087][T10058] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 829.402350][ T9838] usb 9-1: config 0 descriptor?? [ 829.504196][ T8663] usb 6-1: USB disconnect, device number 29 [ 829.547011][T10058] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 830.355497][ T9838] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 830.355659][ T9838] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 830.372609][ T9838] asix 9-1:0.0: probe with driver asix failed with error -71 [ 830.427347][ T9838] usb 9-1: USB disconnect, device number 7 [ 831.589721][T10058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.649426][T10058] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.715796][ T4770] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.723591][ T4770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.824742][ T29] audit: type=1326 audit(2000000463.689:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.5.946" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15cf785d29 code=0x0 [ 831.943121][ T4770] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.950989][ T4770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.191259][T10058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 832.202270][T10058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 833.684332][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.692168][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 834.651467][T10241] loop8: detected capacity change from 0 to 128 [ 836.417706][T10058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.915229][T10245] loop5: detected capacity change from 0 to 40427 [ 837.083959][T10245] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1fffff [ 837.194840][T10245] F2FS-fs (loop5): invalid crc value [ 838.420396][T10245] F2FS-fs (loop5): Found nat_bits in checkpoint [ 838.749595][T10261] loop9: detected capacity change from 0 to 16 [ 838.874012][T10261] erofs (device loop9): negative i_size @ nid 36 [ 840.671114][ T44] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 840.965260][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 842.080347][ T44] usb 10-1: device descriptor read/all, error -71 [ 842.849840][T10058] veth0_vlan: entered promiscuous mode [ 843.191107][ T8663] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 843.214302][T10058] veth1_vlan: entered promiscuous mode [ 844.322919][T10058] veth0_macvtap: entered promiscuous mode [ 844.471214][ T8663] usb 1-1: Using ep0 maxpacket: 8 [ 844.488255][ T8663] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 844.497899][ T8663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.566043][T10058] veth1_macvtap: entered promiscuous mode [ 845.002822][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.013857][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.024181][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.035039][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.045257][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.056112][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.069297][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.081068][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.098751][T10058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.243502][ T8663] usb 1-1: config 0 descriptor?? [ 845.371866][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.382836][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.393261][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.407905][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.419419][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.430433][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.441232][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.452219][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.470646][T10058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.814454][T10058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.824079][T10058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.833372][T10058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.842623][T10058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.956575][ T8663] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 845.967714][ T8663] asix 1-1:0.0: probe with driver asix failed with error -71 [ 846.033064][ T8663] usb 1-1: USB disconnect, device number 3 [ 846.899566][T10303] pim6reg1: entered promiscuous mode [ 846.906633][T10303] pim6reg1: entered allmulticast mode [ 847.134496][ T29] audit: type=1326 audit(2000000478.989:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.8.962" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c28985d29 code=0x0 [ 849.437680][T10323] loop9: detected capacity change from 0 to 16 [ 849.477600][T10323] erofs (device loop9): negative i_size @ nid 36 [ 849.841101][ T8663] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 850.152334][ T8663] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.165514][ T8663] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 850.208377][ T8663] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.223807][ T8663] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.232593][ T8663] usb 6-1: Product: syz [ 850.237020][ T8663] usb 6-1: Manufacturer: syz [ 850.243908][ T8663] usb 6-1: SerialNumber: syz [ 850.381429][ T9838] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 850.600514][T10326] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 850.881940][ T9838] usb 10-1: unable to get BOS descriptor or descriptor too short [ 851.001227][ T9838] usb 10-1: not running at top speed; connect to a high speed hub [ 851.151992][ T9838] usb 10-1: config 3 has an invalid interface number: 3 but max is 1 [ 851.160422][ T9838] usb 10-1: config 3 has an invalid interface number: 66 but max is 1 [ 851.169077][ T9838] usb 10-1: config 3 has no interface number 0 [ 851.175628][ T9838] usb 10-1: config 3 has no interface number 1 [ 851.182537][ T9838] usb 10-1: config 3 interface 66 altsetting 12 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 851.194131][ T9838] usb 10-1: config 3 interface 66 altsetting 12 endpoint 0x1 has invalid maxpacket 8200, setting to 64 [ 851.208183][ T9838] usb 10-1: config 3 interface 3 has no altsetting 0 [ 851.216157][ T9838] usb 10-1: config 3 interface 66 has no altsetting 0 [ 851.242546][T10326] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 851.889578][T10333] loop8: detected capacity change from 0 to 8192 [ 852.138562][ T9838] usb 10-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 852.148359][ T9838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.159143][ T9838] usb 10-1: Product: syz [ 852.165711][ T9838] usb 10-1: Manufacturer: syz [ 852.170650][ T9838] usb 10-1: SerialNumber: syz [ 852.241125][ T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 852.824224][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.836087][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.849601][ T44] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 852.860042][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.963049][ T9838] usb 10-1: can't set config #3, error -71 [ 853.001797][ T44] usb 1-1: config 0 descriptor?? [ 853.071488][T10351] loop9: detected capacity change from 0 to 64 [ 853.175013][ T9838] usb 10-1: USB disconnect, device number 5 [ 853.772261][ T44] hid (null): bogus close delimiter [ 854.106318][ T9838] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 854.363629][ T44] uclogic 0003:256C:006D.000B: failed retrieving Huion firmware version: -71 [ 854.373074][ T44] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 854.385279][ T44] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 854.439143][ T44] usb 1-1: USB disconnect, device number 4 [ 854.441407][ T8663] cdc_mbim 6-1:1.0: failed to get mac address [ 854.521976][ T8663] cdc_mbim 6-1:1.0: bind() failure [ 854.592975][ T8663] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 854.611500][ T8663] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 854.644608][ T8663] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 854.680322][ T8663] usb 6-1: USB disconnect, device number 30 [ 854.763948][ T9838] usb 10-1: Using ep0 maxpacket: 8 [ 854.777352][ T9838] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 854.789957][ T9838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.035620][ T9838] usb 10-1: config 0 descriptor?? [ 856.235454][T10378] loop5: detected capacity change from 0 to 512 [ 856.650513][ T9838] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 856.665285][ T9838] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 856.795940][T10378] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 856.907917][ T9838] asix 10-1:0.0: probe with driver asix failed with error -71 [ 857.118493][ T9838] usb 10-1: USB disconnect, device number 6 [ 857.978224][T10386] loop8: detected capacity change from 0 to 512 [ 858.465731][T10386] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 858.479835][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.488120][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.644937][T10386] EXT4-fs (loop8): invalid journal inode [ 858.651135][T10386] EXT4-fs (loop8): can't get journal size [ 858.924974][T10386] EXT4-fs (loop8): 1 truncate cleaned up [ 858.933182][T10386] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.973729][ T8085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.981995][ T8085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.684191][T10395] loop9: detected capacity change from 0 to 32768 [ 862.693753][T10395] bcachefs: bch2_parse_one_mount_opt() Invalid mount option invalid compression levelcompression: parse error [ 863.511887][ T29] audit: type=1326 audit(2000000494.769:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10392 comm="syz.5.978" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15cf785d29 code=0x0 [ 864.940165][ T9410] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.639336][T10410] loop8: detected capacity change from 0 to 16 [ 865.713160][T10410] erofs (device loop8): negative i_size @ nid 36 [ 866.908445][T10416] loop9: detected capacity change from 0 to 512 [ 866.919376][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 867.943162][T10416] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 867.956708][T10416] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 868.148634][ T8643] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 870.121115][ T9592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 871.803829][T10448] loop5: detected capacity change from 0 to 512 [ 871.971513][T10448] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 872.137301][T10448] EXT4-fs (loop5): 1 truncate cleaned up [ 872.145076][T10448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 872.254680][ T29] audit: type=1326 audit(2000000504.069:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.9.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e14f85d29 code=0x7ffc0000 [ 872.278127][ T29] audit: type=1326 audit(2000000504.079:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.9.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e14f85d29 code=0x7ffc0000 [ 872.411828][T10459] lo speed is unknown, defaulting to 1000 [ 872.491690][ T29] audit: type=1326 audit(2000000504.189:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.9.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e14f85d29 code=0x7ffc0000 [ 872.516798][ T29] audit: type=1326 audit(2000000504.189:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.9.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e14f85d29 code=0x7ffc0000 [ 872.543330][ T29] audit: type=1326 audit(2000000504.189:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.9.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e14f85d29 code=0x7ffc0000 [ 872.550154][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.993'. [ 872.567503][ T29] audit: type=1326 audit(2000000504.239:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.9.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e14f85d29 code=0x7ffc0000 [ 872.597943][ T29] audit: type=1326 audit(2000000504.239:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.9.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e14f85d29 code=0x7ffc0000 [ 872.613417][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 872.622886][ T29] audit: type=1326 audit(2000000504.269:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.9.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e14f85d29 code=0x7ffc0000 [ 872.658715][ T29] audit: type=1326 audit(2000000504.269:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.9.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e14f85d29 code=0x7ffc0000 [ 872.684249][ T29] audit: type=1326 audit(2000000504.309:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.9.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f6e14f85d29 code=0x7ffc0000 [ 873.206934][ T6095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.166564][T10476] loop4: detected capacity change from 0 to 16 [ 874.295037][T10476] erofs (device loop4): negative i_size @ nid 36 [ 874.971681][ T9838] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 875.229467][ T9838] usb 5-1: unable to get BOS descriptor or descriptor too short [ 875.285147][ T9838] usb 5-1: not running at top speed; connect to a high speed hub [ 875.326329][ T9838] usb 5-1: config 3 has an invalid interface number: 3 but max is 1 [ 875.336221][ T9838] usb 5-1: config 3 has an invalid interface number: 66 but max is 1 [ 875.344832][ T9838] usb 5-1: config 3 has no interface number 0 [ 875.351230][ T9838] usb 5-1: config 3 has no interface number 1 [ 875.357620][ T9838] usb 5-1: config 3 interface 66 altsetting 12 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 875.371677][ T9838] usb 5-1: config 3 interface 66 altsetting 12 endpoint 0x1 has invalid maxpacket 8200, setting to 64 [ 875.383981][ T9838] usb 5-1: config 3 interface 3 has no altsetting 0 [ 875.391407][ T9838] usb 5-1: config 3 interface 66 has no altsetting 0 [ 875.577825][ T9838] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 875.587458][ T9838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.595926][ T9838] usb 5-1: Product: syz [ 875.600339][ T9838] usb 5-1: Manufacturer: syz [ 875.608082][ T9838] usb 5-1: SerialNumber: syz [ 875.846942][T10476] 9pnet_fd: Insufficient options for proto=fd [ 876.160347][ T9838] hub 5-1:3.3: bad descriptor, ignoring hub [ 876.167264][ T9838] hub 5-1:3.3: probe with driver hub failed with error -5 [ 876.239291][T10503] loop5: detected capacity change from 0 to 128 [ 876.266957][ T9838] hub 5-1:3.66: bad descriptor, ignoring hub [ 876.273489][ T9838] hub 5-1:3.66: probe with driver hub failed with error -5 [ 876.402563][ T9838] usb 5-1: USB disconnect, device number 2 [ 876.898866][T10503] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 877.027258][T10503] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 877.082124][T10513] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1007'. [ 878.265854][ T6095] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 879.138042][T10525] netlink: 312 bytes leftover after parsing attributes in process `syz.9.1011'. [ 879.710635][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1010'. [ 879.818397][T10529] syz.9.1011[10529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 879.818815][T10529] syz.9.1011[10529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 879.854561][T10529] syz.9.1011[10529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 880.820138][T10540] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1013' sets config #0 [ 881.312605][T10543] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1014'. [ 881.925663][T10545] loop9: detected capacity change from 0 to 1024 [ 882.004996][T10545] EXT4-fs: Ignoring removed i_version option [ 882.012030][T10545] EXT4-fs: inline encryption not supported [ 882.171916][T10545] EXT4-fs (loop9): Test dummy encryption mode enabled [ 882.183559][T10545] EXT4-fs (loop9): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 882.566516][T10545] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.043621][T10545] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))" [ 883.059474][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 883.059551][ T29] audit: type=1800 audit(2000000514.929:597): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1016" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 883.073453][T10559] loop4: detected capacity change from 0 to 16 [ 883.123917][T10559] erofs (device loop4): negative i_size @ nid 36 [ 883.181406][ T8643] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 883.495719][ T8643] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.508168][ T8643] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.527457][ T8643] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 883.537038][ T8643] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.576669][T10545] ===================================================== [ 883.583965][T10545] BUG: KMSAN: uninit-value in aes_encrypt+0x15cc/0x1db0 [ 883.591117][T10545] aes_encrypt+0x15cc/0x1db0 [ 883.595918][T10545] aesti_encrypt+0x7d/0xf0 [ 883.600579][T10545] crypto_ecb_encrypt2+0x18a/0x300 [ 883.605891][T10545] crypto_lskcipher_crypt_sg+0x36b/0x7f0 [ 883.611783][T10545] crypto_lskcipher_encrypt_sg+0x8a/0xc0 [ 883.617680][T10545] crypto_skcipher_encrypt+0x119/0x1e0 [ 883.623357][T10545] xts_encrypt+0x3c4/0x550 [ 883.627961][T10545] crypto_skcipher_encrypt+0x1a0/0x1e0 [ 883.633632][T10545] fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 883.639310][T10545] fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 883.645772][T10545] ext4_bio_write_folio+0x1377/0x2e50 [ 883.651378][T10545] mpage_submit_folio+0x360/0x490 [ 883.656594][T10545] mpage_process_page_bufs+0xb92/0xe30 [ 883.662260][T10545] mpage_prepare_extent_to_map+0x17a5/0x22a0 [ 883.668452][T10545] ext4_do_writepages+0x1117/0x62c0 [ 883.673904][T10545] ext4_writepages+0x312/0x830 [ 883.678863][T10545] do_writepages+0x427/0xc30 [ 883.683647][T10545] file_write_and_wait_range+0x6f2/0x7b0 [ 883.689496][T10545] generic_buffers_fsync_noflush+0x7e/0x3c0 [ 883.694973][ T8643] usb 9-1: config 0 descriptor?? [ 883.695574][T10545] ext4_sync_file+0x5ae/0x1390 [ 883.695689][T10545] vfs_fsync_range+0x1f9/0x260 [ 883.695782][T10545] ext4_buffered_write_iter+0x9a7/0xaa0 [ 883.695934][T10545] ext4_file_write_iter+0x266/0x3820 [ 883.696085][T10545] do_iter_readv_writev+0x88a/0xa30 [ 883.696228][T10545] vfs_writev+0x56a/0x14f0 [ 883.696330][T10545] __se_sys_pwritev2+0x262/0x460 [ 883.696474][T10545] __x64_sys_pwritev2+0x11f/0x1a0 [ 883.696624][T10545] x64_sys_call+0x368c/0x3c30 [ 883.696764][T10545] do_syscall_64+0xcd/0x1e0 [ 883.696859][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.697004][T10545] [ 883.697027][T10545] Uninit was stored to memory at: [ 883.697199][T10545] xts_xor_tweak+0x4ae/0xbf0 [ 883.697306][T10545] xts_encrypt+0x296/0x550 [ 883.697406][T10545] crypto_skcipher_encrypt+0x1a0/0x1e0 [ 883.697518][T10545] fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 883.697654][T10545] fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 883.697786][T10545] ext4_bio_write_folio+0x1377/0x2e50 [ 883.697931][T10545] mpage_submit_folio+0x360/0x490 [ 883.698047][T10545] mpage_process_page_bufs+0xb92/0xe30 [ 883.698162][T10545] mpage_prepare_extent_to_map+0x17a5/0x22a0 [ 883.698282][T10545] ext4_do_writepages+0x1117/0x62c0 [ 883.698427][T10545] ext4_writepages+0x312/0x830 [ 883.698532][T10545] do_writepages+0x427/0xc30 [ 883.698628][T10545] file_write_and_wait_range+0x6f2/0x7b0 [ 883.698750][T10545] generic_buffers_fsync_noflush+0x7e/0x3c0 [ 883.698897][T10545] ext4_sync_file+0x5ae/0x1390 [ 883.698993][T10545] vfs_fsync_range+0x1f9/0x260 [ 883.699082][T10545] ext4_buffered_write_iter+0x9a7/0xaa0 [ 883.699233][T10545] ext4_file_write_iter+0x266/0x3820 [ 883.699378][T10545] do_iter_readv_writev+0x88a/0xa30 [ 883.699513][T10545] vfs_writev+0x56a/0x14f0 [ 883.699621][T10545] __se_sys_pwritev2+0x262/0x460 [ 883.699760][T10545] __x64_sys_pwritev2+0x11f/0x1a0 [ 883.699907][T10545] x64_sys_call+0x368c/0x3c30 [ 883.700048][T10545] do_syscall_64+0xcd/0x1e0 [ 883.700140][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.700281][T10545] [ 883.700302][T10545] Uninit was created at: [ 883.700459][T10545] __alloc_pages_noprof+0x9a7/0xe00 [ 883.700567][T10545] alloc_pages_mpol_noprof+0x299/0x990 [ 883.917059][T10545] folio_alloc_noprof+0x1db/0x310 [ 883.922306][T10545] filemap_alloc_folio_noprof+0xa6/0x440 [ 883.928169][T10545] __filemap_get_folio+0xac4/0x1550 [ 883.933606][T10545] ext4_write_begin+0x3e5/0x23d0 [ 883.938747][T10545] generic_perform_write+0x4d8/0x1080 [ 883.944354][T10545] ext4_buffered_write_iter+0x561/0xaa0 [ 883.950150][T10545] ext4_file_write_iter+0x266/0x3820 [ 883.955679][T10545] do_iter_readv_writev+0x88a/0xa30 [ 883.961116][T10545] vfs_writev+0x56a/0x14f0 [ 883.965733][T10545] __se_sys_pwritev2+0x262/0x460 [ 883.970921][T10545] __x64_sys_pwritev2+0x11f/0x1a0 [ 883.976183][T10545] x64_sys_call+0x368c/0x3c30 [ 883.981089][T10545] do_syscall_64+0xcd/0x1e0 [ 883.985767][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.991895][T10545] [ 883.994354][T10545] CPU: 1 UID: 0 PID: 10545 Comm: syz.9.1016 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 884.005330][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 884.015556][T10545] ===================================================== [ 884.022613][T10545] Disabling lock debugging due to kernel taint [ 884.028880][T10545] Kernel panic - not syncing: kmsan.panic set ... [ 884.035431][T10545] CPU: 1 UID: 0 PID: 10545 Comm: syz.9.1016 Tainted: G B 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 884.047888][T10545] Tainted: [B]=BAD_PAGE [ 884.052143][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 884.062350][T10545] Call Trace: [ 884.065745][T10545] [ 884.068782][T10545] dump_stack_lvl+0x216/0x2d0 [ 884.073679][T10545] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 884.079677][T10545] dump_stack+0x1e/0x24 [ 884.084028][T10545] panic+0x4e2/0xcf0 [ 884.088117][T10545] ? kmsan_get_metadata+0x71/0x1c0 [ 884.093416][T10545] kmsan_report+0x2c7/0x2d0 [ 884.098088][T10545] ? is_module_text_address+0x1b3/0x250 [ 884.103869][T10545] ? __msan_warning+0x95/0x120 [ 884.108847][T10545] ? aes_encrypt+0x15cc/0x1db0 [ 884.113796][T10545] ? aesti_encrypt+0x7d/0xf0 [ 884.118592][T10545] ? crypto_ecb_encrypt2+0x18a/0x300 [ 884.124042][T10545] ? crypto_lskcipher_crypt_sg+0x36b/0x7f0 [ 884.130077][T10545] ? crypto_lskcipher_encrypt_sg+0x8a/0xc0 [ 884.136113][T10545] ? crypto_skcipher_encrypt+0x119/0x1e0 [ 884.141931][T10545] ? xts_encrypt+0x3c4/0x550 [ 884.146688][T10545] ? crypto_skcipher_encrypt+0x1a0/0x1e0 [ 884.152528][T10545] ? fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 884.158366][T10545] ? fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 884.164985][T10545] ? ext4_bio_write_folio+0x1377/0x2e50 [ 884.170745][T10545] ? mpage_submit_folio+0x360/0x490 [ 884.176130][T10545] ? mpage_process_page_bufs+0xb92/0xe30 [ 884.181953][T10545] ? mpage_prepare_extent_to_map+0x17a5/0x22a0 [ 884.188304][T10545] ? ext4_do_writepages+0x1117/0x62c0 [ 884.193893][T10545] ? ext4_writepages+0x312/0x830 [ 884.199008][T10545] ? do_writepages+0x427/0xc30 [ 884.203928][T10545] ? file_write_and_wait_range+0x6f2/0x7b0 [ 884.209933][T10545] ? generic_buffers_fsync_noflush+0x7e/0x3c0 [ 884.216236][T10545] ? ext4_sync_file+0x5ae/0x1390 [ 884.221349][T10545] ? vfs_fsync_range+0x1f9/0x260 [ 884.226457][T10545] ? ext4_buffered_write_iter+0x9a7/0xaa0 [ 884.232411][T10545] ? ext4_file_write_iter+0x266/0x3820 [ 884.238091][T10545] ? do_iter_readv_writev+0x88a/0xa30 [ 884.243675][T10545] ? vfs_writev+0x56a/0x14f0 [ 884.248437][T10545] ? __se_sys_pwritev2+0x262/0x460 [ 884.253766][T10545] ? __x64_sys_pwritev2+0x11f/0x1a0 [ 884.259177][T10545] ? x64_sys_call+0x368c/0x3c30 [ 884.264237][T10545] ? do_syscall_64+0xcd/0x1e0 [ 884.269073][T10545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.275363][T10545] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 884.281389][T10545] ? stack_depot_save_flags+0x6db/0x750 [ 884.287159][T10545] ? stack_depot_save+0x12/0x20 [ 884.292189][T10545] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 884.298216][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.303596][T10545] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 884.309588][T10545] __msan_warning+0x95/0x120 [ 884.314396][T10545] aes_encrypt+0x15cc/0x1db0 [ 884.319199][T10545] ? stack_depot_save_flags+0x2c/0x750 [ 884.324851][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.330221][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.335595][T10545] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 884.342163][T10545] aesti_encrypt+0x7d/0xf0 [ 884.346796][T10545] crypto_ecb_encrypt2+0x18a/0x300 [ 884.352075][T10545] ? __pfx_aesti_encrypt+0x10/0x10 [ 884.357407][T10545] crypto_lskcipher_crypt_sg+0x36b/0x7f0 [ 884.363303][T10545] ? xts_xor_tweak+0x658/0xbf0 [ 884.368281][T10545] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 884.374112][T10545] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 884.379927][T10545] crypto_lskcipher_encrypt_sg+0x8a/0xc0 [ 884.385797][T10545] crypto_skcipher_encrypt+0x119/0x1e0 [ 884.391448][T10545] xts_encrypt+0x3c4/0x550 [ 884.396041][T10545] ? __pfx_xts_encrypt+0x10/0x10 [ 884.401150][T10545] crypto_skcipher_encrypt+0x1a0/0x1e0 [ 884.406807][T10545] fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 884.412493][T10545] fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 884.418977][T10545] ext4_bio_write_folio+0x1377/0x2e50 [ 884.424599][T10545] mpage_submit_folio+0x360/0x490 [ 884.429829][T10545] mpage_process_page_bufs+0xb92/0xe30 [ 884.435473][T10545] ? kmsan_get_shadow_origin_ptr+0x38/0xb0 [ 884.441471][T10545] mpage_prepare_extent_to_map+0x17a5/0x22a0 [ 884.447636][T10545] ? perf_output_read+0x1a21/0x2970 [ 884.453055][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.458417][T10545] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 884.464406][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.469769][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.475136][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.480536][T10545] ext4_do_writepages+0x1117/0x62c0 [ 884.485962][T10545] ? __es_insert_extent+0x235d/0x2da0 [ 884.491560][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.496924][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.502286][T10545] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 884.508446][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.513831][T10545] ? ext4_fc_track_range+0x154/0xe80 [ 884.519285][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.524654][T10545] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 884.530639][T10545] ? ext4_writepages+0x80/0x830 [ 884.535671][T10545] ? filter_irq_stacks+0x60/0x1a0 [ 884.540894][T10545] ? stack_depot_save_flags+0x2c/0x750 [ 884.546546][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.551909][T10545] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 884.558483][T10545] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 884.564492][T10545] ext4_writepages+0x312/0x830 [ 884.569451][T10545] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 884.575439][T10545] ? __pfx_ext4_writepages+0x10/0x10 [ 884.580910][T10545] do_writepages+0x427/0xc30 [ 884.585666][T10545] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 884.591661][T10545] ? _raw_spin_unlock+0x30/0x50 [ 884.596729][T10545] file_write_and_wait_range+0x6f2/0x7b0 [ 884.602624][T10545] generic_buffers_fsync_noflush+0x7e/0x3c0 [ 884.608752][T10545] ext4_sync_file+0x5ae/0x1390 [ 884.613701][T10545] ? __pfx_ext4_sync_file+0x10/0x10 [ 884.619071][T10545] ? __pfx_ext4_sync_file+0x10/0x10 [ 884.624449][T10545] vfs_fsync_range+0x1f9/0x260 [ 884.629385][T10545] ext4_buffered_write_iter+0x9a7/0xaa0 [ 884.635169][T10545] ext4_file_write_iter+0x266/0x3820 [ 884.640669][T10545] ? do_iter_readv_writev+0x4a/0xa30 [ 884.646183][T10545] ? filter_irq_stacks+0x60/0x1a0 [ 884.651495][T10545] ? stack_depot_save_flags+0x2c/0x750 [ 884.657155][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.662530][T10545] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 884.668464][T10545] do_iter_readv_writev+0x88a/0xa30 [ 884.673877][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.679269][T10545] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 884.685238][T10545] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 884.691186][T10545] vfs_writev+0x56a/0x14f0 [ 884.695787][T10545] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 884.701785][T10545] ? __rcu_read_unlock+0x7b/0xe0 [ 884.706944][T10545] ? kmsan_get_metadata+0x13e/0x1c0 [ 884.712306][T10545] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 884.718290][T10545] __se_sys_pwritev2+0x262/0x460 [ 884.723456][T10545] __x64_sys_pwritev2+0x11f/0x1a0 [ 884.728709][T10545] x64_sys_call+0x368c/0x3c30 [ 884.733614][T10545] do_syscall_64+0xcd/0x1e0 [ 884.738290][T10545] ? clear_bhb_loop+0x25/0x80 [ 884.743199][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.749328][T10545] RIP: 0033:0x7f6e14f85d29 [ 884.753918][T10545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.773750][T10545] RSP: 002b:00007f6e15e61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 884.782352][T10545] RAX: ffffffffffffffda RBX: 00007f6e15175fa0 RCX: 00007f6e14f85d29 [ 884.790474][T10545] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000004 [ 884.798588][T10545] RBP: 00007f6e15001a20 R08: 0000000000000000 R09: 0000000000000003 [ 884.806701][T10545] R10: 0000000000006c00 R11: 0000000000000246 R12: 0000000000000000 [ 884.814821][T10545] R13: 0000000000000000 R14: 00007f6e15175fa0 R15: 00007ffece57ff28 [ 884.822958][T10545] [ 884.826373][T10545] Kernel Offset: disabled [ 884.830770][T10545] Rebooting in 86400 seconds..