last executing test programs: 5m38.457878225s ago: executing program 32 (id=55): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/consoles\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) pread64(r0, &(0x7f00000013c0)=""/208, 0x31, 0x401) read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020) 5m30.190672892s ago: executing program 33 (id=39): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1404, 0x400, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='kfree\x00', r1, 0x0, 0x8000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xb5, 0xf3, &(0x7f0000000340)="4902e2d45360c8af5f63a4e10c069fd884acd2b84bbeb7124d24f93518771d75894d7e35ec9d0ef72e90eee66bdfba94d1fab94927f846c358be72981d81c2288d5149382fb7317a71385b1189764f029770bab710b3b658009969e175f471a089afd83a244f9c1242871705ffb90d20b5daab9a9f6ad703f18f89416e2e51faf10e914041e65dce308527bb264de61f0037caa9d9712f2aea7883a50dd641dde66d503325fb3bd0fefae3afada8001c6d5239fd2e", &(0x7f0000000400)=""/243, 0x0, 0x0, 0x38, 0x1000, &(0x7f0000000500)="2c1d186a7d530fb21ae5595f594395577b9c51ad4386d0e2563514aef492dfa0d1dc4e923bc6c3a1649062b829189971de7cedb69aadf763", &(0x7f0000000c00)="e0299af88bd58819b658b109d909a2d0df1024a22ea40b2e983fb8236e2b1b9b50076e50c120760bfab5b297697207de75c14ec33668ca7b82f9f89efdc305d1e0762541e70cc5ec21497d1921a5816dbf1471c2e8f1f11cef42c178bf35d1b28a1ab3beed5201bb18aacab704c31f4efb4c2a2e1a3c34a41eec92c66feaddd1cb202f42f34de2f8d7aac1dc44b0d3c367deb88f16df79439d42e272f3b19ef65336b5b445ae8e84edb5ca915d91d34d339c474e18d1326688db8f164362ac749c71c5108206ce9480394a4d131498ad3dbbc7236bf9760e6ac93f780b18abe39d740ab0438c055d19c6a72f63e1f0588924c13a4555026cd389dfdb4dd5709272a7aadef9443d738c2e7a947cde5de903cc0bc8e9ed7af0d31c6beb7c948b324ac20d2bcb013291f88fae7a692f183aef4b0a6a1210c8c55c174259927610cda827dc82ec032629d45fbceb6e5a94636783486e3fcce0cae0f9025bed36eee7f0e82b027732f4d3f043a389281e9876939720529671ffd473636982ca52e8198414c347a3a489b2da0a8aa1bd9e7acbb83600e9d6c5489c42ffa208a09c6f465b855f7bb7a331c37cccfa13ec65e9fa08dcac04b7dd1f493bfe6880ea5e2b3d2fa991b8efa2800ba1ac2b2c2886eac37a9c2bd33037e17a2e1fa4215004a321eeabea191d5c08084fabb09c473c9ed29ec4c2f1cf43c4cf06f338d6594e5a73fe96fb02182cc352a0f9841aac4bd053422050abfa67977771bb095e885018cd796b9a43f40706e56e262c1e0662edeb8b8d5865a76752e0d57e6091d09e44c62e812bab3bee5e5b0123dae3bd23d8c8f7c0c14d6069f1dcc3815620cdfda9748d027bd443c7e696229102dc649007cef7148b5aa783608c13a86612b444bae97d02e7e2730d7df98a25fbd3f4d2305ddad3d7f9b06e200bacd2a98764c3705b42dd78e8f59cb269e5c018c3ad210a2f5bcd47476ca8c020063d45b949be177414bb9a9a57b89937f406b66c4409ad268959d7acf423479ef733729b170557b5e4aade1f201330b824f0fbe8d223c80bffa73b00f996a0a54b311ea44de532f1085378089f5ec8b285d18596682d9b8d1045e513d34b934b2d300fc77d59c06dc50831d2b1c9fc17b0bb081c7320fd5589408e053d6b1670aead9f3736b1458a60963d9bf1acc46ca77cadc472c0f7cdebefbc71013e5b32e4e0ff28b92eb64b70a19eba929edd7d0a3d16d3fe2be6ac4199ca65c1beb8b9b38d7d7f70f0c251900440565bda15581cc123cf42cd7ea934886cfaf33bd2d910cc7e8e49049fd985b655c4fdd697f46b69bd17e1f927d8df8a4cb7b4d6669263e81c06fa9b09fb1886cfbf7a607cb063a9c76ed8e234ab0b350e310b568d0c9b5d8880bf2d23313a4da07a507ed621a982d5303a91d010ece593b5e568af73b8c7f89b85426a24905e22f2a42a5a1c7246450b0937e03bcdb5582fe6bfa704b0ed526ff5936acb36a2fed4b6535634f7595c374d671d3b09f1db610a93432a3654dd58211642ec01735aab614573651b5f4ae673d584e34f22870ddfb57ccb60df530712cd34f664e6f2d59ec590fc2b69fbab738982f96bc04d992229154e38149c9e2316f86017dcddbe6dc8a326e0dfab83e15edb4edfe969e7beaebaead77c53f36e8693ad2b6033a8e85197d3fdebaf3cb122cd97994604b62deeb25b76c1898b158a6eb5da5a5e907f9a6c882465c58196016a000fa3e07743daec8f59cabc7bb292cbb1adf318813e884f173296307d52f08bfd04114751e8708a82f4520939f4aaed13ee65cd895297d29433d18aa6bd9072c5f1d8a68e9b644b605ab7008fc921abf4f7684fafe87ff79b0a675a9679a2baf4240e4ef2f7fdf24e686af4733ca51d01e5e811fb743a4c681b323db07ce92241933c74534201ebbf973a0397cba6c68c37c72b276ba767019ce576bb34ae5a453c49fac5203110be2c3a30780534f648019d92fe621f40c60a41300fbe216c81a1a5e11a29833852d47f17e23526e83be41d845b93831a61678440c6b366547e9de8d135e644837cb4fd14696a686e3d38370197550b6cbd988c9587b6fc37af4ea5c0204e37542016a1e536715953fb054ff93b51583308517c99fe48313cff391aed0bbd116260e3b1247a82f2c910b35ad644278065f5ebb269eb331c83cc9e3a1c8260b82a357d4fd78541c68b8a4cc19720ef1714ae0a2125d871fdccb72a05995a05758c93f993e819c39cd3f441c5889e71cd1f9cd13d9b2e050db50ae7799ef66423ad042f14cdc3f3e60db3a0b62e187d9d1e5d05dd450dcfabe294418ff711e712ab18efef546b4f9f7991e73a1eb0197766081788717ee0226fff39dcfe9d91a64a771ae8995226000d6df5fb5143609de954b11e658bb7b90a385e6c2a63100f4e7a41ba8c5393e85cb8658fbe70fa7741aee5afa988f2ec62dafe85d124c06a59a5d1352bb89eae5c4e8b2b642de8f15e35ffc225c6944da732e46f36b8e90b420b85a46f0885dcde68606dc3d65c54e5604c93edd69c4f8a6257b8110332dadbdbb7743d7f76a1d15d27fcca9c1ccc414f9b42d06e86acc69b2d2c38dafbdba76e79c69dd86b3cae7aab4287d8e3558dbe2929103b094e9ad8068916710efb5013eedb778fd8f320a36fb402f08e37b8e1d5baba8b5365acff8b4745ca7cc8fd7915056c0e2e7ba0d9fd903fe091deaeb67f4985ce0d09949da0352d15ae0cc6cf730bfcad23fd2455e84bd873d8de0f65a95899153b4842a1a9694f94444c5d818eb5b631317e4541008a94960a7811eb60b776c001ee2d98025f54dfa20b356de81527aebce934637790843343013164e60244e9d90a30fef46d468eb1214432b417a45aed7d898c5068caca3b046da98fc66a236ed95b7c5132a3aa1be0d1995d60fc573f0b8dc29a594f660e9f9874684cfcf47bad502003e81d18d371ed57f0807842c8d9a7cceb266889332fe4f9ea13c5e60aa83be895984d44ea46b6706f4ea3922dd35f4d32dccd3ef274f13bc558c6aaab5bbfbede8b3663a9b96c3630ad3ffc51dfeff8c0236834e29177079a3bdedd0cfb33cade97eb45561d71a74a6763496be1fed66328d39ee3cea8980c0e3901bad9070bce86423d9785e23e79771b8cfc49fce357d882cd3163aa625ed4c285dd131387d1f79c7ba9b69000dab422c6607b7f14d220106e5708144cf65a9408d02ce86e40762e16da8d794b4c7f546aeae77725fa46b0a72b9a75f6501aa25c13f7b5e8f97bccdbd98a7fae641b19fd0bca92c00b10a29e215c8eb64906e8ef43a1e58b486b7d10d168446aa993059ba2d7fcdc4c6715060a32a7ed1a16460c8f700c8b3b22df5295763a6a9d5a1b4ac2e8119c56586faa99cfa602045c2540e2b835b70643e00018cd4fa8b003d73d4b7db9e7bba8275330ea080779001cc6a8187a1c24f8fe64108a00f0cd38144a19ba75de0d6670cf9ae3db9bd15ba26d9805b9045f799ae29a34e29773839e12f5db7d77c0d177d0745067b8f933026ff1a848882b9da2ff952edcbf67cae2f0017ded101810d82d59576c104a608330cff4192049ff36bf7a1ed78757f208b805f481d1b919e906f4e9f322a4e69590b32d88218e49dbf5f4881b04ab074bd3db5939b5738d11d754ea76df65dadc1bec3862942060ef44a956c977cc71b4a5d877055c1bcd9fc11102cd2a6ced7ddea6d3d6f14992f5c7274e645b04be70348a19fc5cf406ec1a560220ca30087e89241e6563cef9028a8a6a69036301b4654b6f7acf1055a9ef9fb042b8f4adf753eb9c9dbccfd8c1fbc51d42f988f143e5a04fe465438d823293f583eb03931e1ef255a30b765bab5a1551544bea74edd040f853ece12cb78d568b6fa7ef392e4a6eb4995b03f634208ae1869766382f534ee0a009ac93d285900d3677fb46a8eeec3448cca704552e4acbffb778ada9ee11cdca7c491d9e1a8d22b6e49691f4c2910d005058fb56818cd7286c9abf7292daaf11e0f910160c589eeb7ad86d8d29e7eee00aad0f08ba8de5eb519487a03c966c4d35b531cf464cbda3bfd1607985d1c1e645d24ae4794e8a4e1aaac15868c61ef8d037fa3a21619c44b576a61b842c3f01f6d7c0e2c6a5d5b084e64a068954b6df7173709723e61921b20a4cf1f70630fac33b8e667a58e31beb4cf9499a2ae779e924e5decb2e6c0a5c0fcffed255acda208722df17a8ce5f20451fdde10604f1fa63e605442abc5458a810b4d08876af592fc22dd05ba63320abc77679c7279c54042b4a640a92e8ff9883ffd76cc8fcc501abf7e20f91fd04af0f90c2a96213553217d3f0112667d0121b1b42f3cad229f5e3ff384e6fba296834a3e99d0e84c021cfcccbd1f39021a09c2f633b22373c7d9c0fac3b355e5344bb5e8ea7d5fff91b853c6212faf535b117b87031b08c9635ecf149652444fab2d9187e7953929f5fbc50d96241adf2003f510c954e3f861912ef2eaa7da0f0bcc17af6dd65f47483e89836b11bb5155fc266f2c2b74bffd162b54179b090ed23bef1c96f0b8d1691da50787d250e87d9c9d8ef6d00d9c37c19ac061a92c80f1b800389ec5209cf26733d351ac8998f29c3a801006c67c0f3657090af93bfb85a5c75003f0346c0afd9b2cd819d5e28cea31a611665e46b2dc52710824c8b71f1db689f27502e3f5284dd8bd8927c0197ce2d82174d6d8ab0dd72e8426572514500ec5c3a47b7b456ad7156c3be17aa63967e129e376a87b756ef56ac588af65ad0f07d43dc2ce4cf5022a0b971ac5999eda94bc3efa1a6fd71b3872d11b16ee35b06c93efb2cd5b4d3067e6c1b08da8ca69caa8c7aa3ea9bb63ddcb08aae47b272d22bbca62e39972f1f48cc95f7795e49eb62e5be70a1848ba3261b9c6c499d00fffc5e0fec0131a0a902fe1c70624e9d43c38b55515f6075539f03cb40b84932319e0d65d011bdb73b0da25f483eb6360530c8ee48e08f083ae20bca4c7fda2f4dfdb8dfdddb318b8957a9d146ca044b547b303ac7814f15540ab09c88aa21183d45498f4e09510c91557c8da99b40f0aebd4b0170b662319b855937b3c22074af34870947d070b6229ca496be1a61fad075d2e9a0e677837eccfdf7dfc371da10463a3a8c6eb301bbfae99557227959a85c4640a12d8fc6333132b7765c6929af53add645d3bed061c5ae95e2c389fe9dfa94112421b9b40c54ee2645700f30903ab9113ac5ba68810ecf40ac4fe4e1d50d4ef4e3acd5a7db5b7d2be83c34bdd89237e4b78b27c1eeb52011d11d61557030aceaa622ed22ea0f264317223c661bbd171ef5b01bb04eb6e1b0bd40f89b3ec7ed4decea24ace5e58b434f0400312de395bd63cbc9283eebfdc0e0ab4240220fb403deaf3ee6cc03073abe6a88f614c487bd50595b9f8dd130be246274fa07ab462353cb23fd12ace7449cc41b44799a0f55d0972a9f67b54ef2c7dc85c976afa0efca3b36e047d230644e1877d6fa0f7918aa50c02951ff695b1fae668c3c26ac1ea6ba34da113d46740649fee1f8cfad747ff4b26c520bc4aeb90d2a96abc7a01a60f6b130b9a42a20e627c3765ad7414bc67bcf2a0ad01206d0a8078e422f712398f11ca9bf2d665937061fd45e19e97ad8b2fcf74895cd2a848229dd089b82d98bb4fcda491cc7d27fb478671faf2bd9c05af5f3a0562a2f1ea4c9d911a837ba099167588cff418ff870b3cac7fa6e1b86841944f5b27b82bcae4eeb9412a1055fe7576d4e5a87690a7eac413d811ea1050f", 0x2, 0x0, 0x7}, 0x50) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) semget(0x0, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0xe) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0x10000) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000027c0)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {0xfffffffc}, {}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x800000}, {0x1, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0xec0}, {0x0, 0x0, 0xa}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7f0}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x103}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x0, 0x100, 0x20000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x2}, {0x0, 0xfffffffe}, {}, {}, {}, {0x80000000}, {}, {}, {}, {0x0, 0x3}, {}, {}, {0x6, 0xcb1}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) 4m29.82025586s ago: executing program 4 (id=239): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000340)={[{@inlinecrypt}, {@usrjquota}, {@test_dummy_encryption}, {@dioread_lock}, {@auto_da_alloc}, {@mblk_io_submit}, {@minixdf}, {@dax_never}, {@nombcache}, {}]}, 0x43, 0x7bb, &(0x7f0000003000)="$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") rename(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000b030000000000e06e7d8ebe39499c"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 4m26.667337722s ago: executing program 4 (id=245): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/consoles\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b35, &(0x7f0000000080)={'wlan1\x00', @random="000000008000"}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000013c0)=""/208, 0x31, 0x401) read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x5fb, 0xffffffffffffffa4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x60, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}}, 0x60}}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r5, &(0x7f0000000000)="3e3e538f0bfaf81a70aad4991e256f3fa46381c6566989", &(0x7f0000000040)=""/98}, 0x20) 4m25.257345455s ago: executing program 4 (id=246): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) 4m19.414157912s ago: executing program 4 (id=263): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x4) rename(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000280)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) 4m14.792544768s ago: executing program 4 (id=274): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4m10.45500054s ago: executing program 4 (id=283): r0 = socket(0x25, 0x6, 0x8000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x7, 0x8, {{0x6, 0x4, 0x1, 0x3f, 0x18, 0x67, 0x0, 0xb, 0x4, 0x0, @local, @empty, {[@lsrr={0x83, 0x3, 0x49}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048090}, 0x2004000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001b00), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x8, 0x3a, '#@}#[&.@,@G)+\xcb\'&,#{', 0x3a, '(', 0x3a, './file1', 0x3a, [0x46, 0x4f]}, 0x3d) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, 0x0, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 4m9.81575767s ago: executing program 34 (id=283): r0 = socket(0x25, 0x6, 0x8000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x7, 0x8, {{0x6, 0x4, 0x1, 0x3f, 0x18, 0x67, 0x0, 0xb, 0x4, 0x0, @local, @empty, {[@lsrr={0x83, 0x3, 0x49}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048090}, 0x2004000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001b00), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x8, 0x3a, '#@}#[&.@,@G)+\xcb\'&,#{', 0x3a, '(', 0x3a, './file1', 0x3a, [0x46, 0x4f]}, 0x3d) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, 0x0, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 3m21.827539504s ago: executing program 5 (id=458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)) 3m21.679256627s ago: executing program 5 (id=462): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) 3m20.660102103s ago: executing program 5 (id=469): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000000000183afffe80000000000000000000000000c201665efc088eaedf29fac2eab3fd5700aaff0200000000000000000000000000018600907800000000"], 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x0, 0xf423c, 0x0, 0x0, 0x6}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200890, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) 3m19.61258046s ago: executing program 5 (id=472): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[], 0xfd, 0x22b, &(0x7f00000006c0)="$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") chdir(&(0x7f0000004340)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfd14) mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 3m19.330010215s ago: executing program 5 (id=476): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x31) 3m18.960568021s ago: executing program 5 (id=478): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0x62) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x340, 0xffffffff, 0x0, 0xf0, 0x1b8, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @dev={0xac, 0x14, 0x14, 0x38}, 0x0, 0x0, 'dummy0\x00', 'wlan0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x1, 0x1, 0x7}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x4, 0x4]}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) open(&(0x7f0000000180)='./file0\x00', 0x2, 0x82) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x12, 0x60d, 0x118, 0x202, 0x278, 0x2e8, 0x2e8, 0x278, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x70}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0x0, 0xffffff00, 0xffffffff], [0x1fffffe00, 0xffffffff, 0xff, 0xffffffff], 'bridge0\x00', 'wlan1\x00', {}, {}, 0x2c, 0x8, 0x4, 0x50}, 0x0, 0x100, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@srh={{0x30}, {0xff, 0x1, 0x5, 0x8, 0x9, 0x2920, 0x8}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xff, 0xff, 0xffffff00, 0x7f8000ff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0x3, 0x400, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ptrace$pokeuser(0x6, r6, 0x358, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x31) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x509680, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) getpid() 3m18.801725434s ago: executing program 35 (id=478): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0x62) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x340, 0xffffffff, 0x0, 0xf0, 0x1b8, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @dev={0xac, 0x14, 0x14, 0x38}, 0x0, 0x0, 'dummy0\x00', 'wlan0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x1, 0x1, 0x7}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x4, 0x4]}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) open(&(0x7f0000000180)='./file0\x00', 0x2, 0x82) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x12, 0x60d, 0x118, 0x202, 0x278, 0x2e8, 0x2e8, 0x278, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x70}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0x0, 0xffffff00, 0xffffffff], [0x1fffffe00, 0xffffffff, 0xff, 0xffffffff], 'bridge0\x00', 'wlan1\x00', {}, {}, 0x2c, 0x8, 0x4, 0x50}, 0x0, 0x100, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@srh={{0x30}, {0xff, 0x1, 0x5, 0x8, 0x9, 0x2920, 0x8}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xff, 0xff, 0xffffff00, 0x7f8000ff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0x3, 0x400, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ptrace$pokeuser(0x6, r6, 0x358, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x31) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x509680, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) getpid() 2m37.3207205s ago: executing program 8 (id=609): memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0xa000000, 0x3}}]}}, 0xffffffffffffffff, 0x32, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2m25.765809601s ago: executing program 8 (id=641): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2m9.789547984s ago: executing program 36 (id=641): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2m0.226999452s ago: executing program 1 (id=694): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m55.793321686s ago: executing program 1 (id=703): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1m53.924727047s ago: executing program 1 (id=710): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x3da1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, 0x0, 0x800) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f00000020c0)={0x5, {0x29, 0x20, 0x2, 0x5}}) sendmmsg(r3, &(0x7f0000001500), 0x588, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) 1m52.441496112s ago: executing program 1 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) clock_getres(0x7ffffffff000, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x98, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getuid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(r0, &(0x7f0000000340)='./file2\x00', 0xc000, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m50.651068721s ago: executing program 1 (id=718): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r4 = timerfd_create(0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x8}) 1m48.086852143s ago: executing program 1 (id=722): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200040d1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bca) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000ffffffffffff08004500006000000000002f907800000000000000002480655800000001000053d3a14e10000800040f000086dd0000ffff080088be00000000100000000100000000003600080022eb000000002000000002000000000000000000000008006558"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000002060101000034fb0000"], 0x14}}, 0x2404c886) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x8004e500, &(0x7f0000000200)={0xfffffffa, 0x800005, 0x5, 0x2}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)={{0x108, 0x3, 0x9, 0x22f, 0x389, 0x3, 0x39f, 0xc3d}, "99fcd13282d70fd437fa7c6609c0e05b608c7a867f17d5f5ae392231408b5cbff3acc693cfffa85eea21e6663c84f0b8d089ea066de7bbffc63d64e394494ed8d7f6ea9d8c5bce31cbd513d45075d8d35e530b8c3e3c416742ea88745260582cf4bda70af8afabc1aa5b47e74f09eda6758fd52ce50201e9ffc087bd109f65b2c4b75285cd6311c694d206bc9653d592ee2a119381479c8d51d09880d08ff6438af370c02efa34184bf30233a412df732da1567922bc03642f43799fcbd81eccab48f962374192b1e1189abe20a48aa3336fe0d9b78732b720be6d2200e1a2344a5acb246a507087337844ce87334e6fec84", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb12) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x0, 0x0) sync() 1m32.709100588s ago: executing program 37 (id=722): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200040d1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bca) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000ffffffffffff08004500006000000000002f907800000000000000002480655800000001000053d3a14e10000800040f000086dd0000ffff080088be00000000100000000100000000003600080022eb000000002000000002000000000000000000000008006558"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000002060101000034fb0000"], 0x14}}, 0x2404c886) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x8004e500, &(0x7f0000000200)={0xfffffffa, 0x800005, 0x5, 0x2}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)={{0x108, 0x3, 0x9, 0x22f, 0x389, 0x3, 0x39f, 0xc3d}, "99fcd13282d70fd437fa7c6609c0e05b608c7a867f17d5f5ae392231408b5cbff3acc693cfffa85eea21e6663c84f0b8d089ea066de7bbffc63d64e394494ed8d7f6ea9d8c5bce31cbd513d45075d8d35e530b8c3e3c416742ea88745260582cf4bda70af8afabc1aa5b47e74f09eda6758fd52ce50201e9ffc087bd109f65b2c4b75285cd6311c694d206bc9653d592ee2a119381479c8d51d09880d08ff6438af370c02efa34184bf30233a412df732da1567922bc03642f43799fcbd81eccab48f962374192b1e1189abe20a48aa3336fe0d9b78732b720be6d2200e1a2344a5acb246a507087337844ce87334e6fec84", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb12) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x0, 0x0) sync() 42.35688421s ago: executing program 2 (id=889): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xead, 0x0, 0x0, 0x0, 0xffff0000}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0xf5, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r6, &(0x7f0000020940)={0x2020}, 0x2020) 41.356311457s ago: executing program 2 (id=890): bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 39.457379008s ago: executing program 2 (id=892): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 39.369432049s ago: executing program 2 (id=895): prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x50]}, 0x2e) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000009c0)={'vcan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r9, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r7, 0x0, 0x0, 0x0, 0x0, 0x3, r8}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) shutdown(r7, 0x0) r10 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r4) 32.65654274s ago: executing program 38 (id=908): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r4) 18.342389557s ago: executing program 3 (id=939): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000240), 0x22a2070, &(0x7f0000000440)={[{@metacopy_off}, {@metacopy_off}, {@workdir={'workdir', 0x3d, './file1'}}, {@verity_off}, {@nfs_export_off}, {@uuid_off}], [{@hash}, {@context={'context', 0x3d, 'staff_u'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '{,\'%+\'!.!'}}, {@dont_appraise}, {@dont_hash}]}) 17.955531543s ago: executing program 7 (id=941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x208) syz_emit_ethernet(0x96, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500600600fe8000000000000000000000000000bbfe8000"/51], 0x0) 17.696745908s ago: executing program 7 (id=942): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/consoles\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b35, &(0x7f0000000080)={'wlan1\x00', @random="000000008000"}) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() shutdown(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x5fb, 0xffffffffffffffa4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r5, &(0x7f0000000000)="3e3e538f0bfaf81a70aad4991e256f3fa46381c6566989", &(0x7f0000000040)=""/98}, 0x20) 17.062842998s ago: executing program 3 (id=944): ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000ffffff7f0000000000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_create(0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 16.291518151s ago: executing program 3 (id=947): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e00010d00000000fedbdf2507", @ANYRES32=0x0], 0x30}}, 0x0) 14.908907764s ago: executing program 3 (id=950): r0 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") clock_gettime(0x1, &(0x7f00000004c0)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000580)={{r3, r4/1000+60000}, {0x0, 0x2710}}, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r5) r6 = inotify_init1(0x800) fcntl$setstatus(r5, 0x4, 0x2c00) r7 = gettid() fcntl$setown(r5, 0x8, r7) fcntl$setsig(r6, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000942) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) dup(r1) 10.365512289s ago: executing program 7 (id=964): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xead, 0x0, 0x0, 0x0, 0xffff0000}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0xf5, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f0000020940)={0x2020}, 0x2020) 9.68557053s ago: executing program 9 (id=966): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xf8) getdents64(r1, 0x0, 0x22) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80108906, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) 9.458337094s ago: executing program 7 (id=969): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x6402}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r0) 9.314850896s ago: executing program 40 (id=969): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x6402}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r0) 9.253902607s ago: executing program 9 (id=973): r0 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) accept(r2, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setuid(0xee00) 5.634657027s ago: executing program 6 (id=978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user']) 5.634446997s ago: executing program 9 (id=979): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) 5.48632392s ago: executing program 41 (id=979): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) 5.023367087s ago: executing program 0 (id=983): ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000ffffff7f0000000000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_create(0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 4.562771895s ago: executing program 6 (id=984): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x24080, &(0x7f0000000080)={[{@noacl}, {@nodiscard}]}, 0x2, 0xbc8, &(0x7f0000002380)="$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") r1 = open(&(0x7f0000000380)='./file2\x00', 0x4200, 0x184) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, 0x0) memfd_create(0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f00000004c0)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)={0x10}, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r9, 0x0, 0x0) 3.234217267s ago: executing program 0 (id=985): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) futex(&(0x7f0000000280), 0x10b, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x1) tkill(r0, 0x16) 2.365062331s ago: executing program 6 (id=986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x208) syz_emit_ethernet(0x96, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500600600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2257b4975321"], 0x0) 2.253234903s ago: executing program 6 (id=987): socket(0xa, 0x3, 0x3a) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) accept(r2, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setuid(0xee00) 1.269852319s ago: executing program 0 (id=988): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noauto_da_alloc}, {@noinit_itable}, {@noload}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") creat(0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) chdir(&(0x7f0000000280)='./file0\x00') r1 = creat(&(0x7f00000003c0)='./bus\x00', 0x140) fcntl$setstatus(r1, 0x4, 0x46100) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) 1.176207681s ago: executing program 6 (id=989): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20071, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 469.442372ms ago: executing program 0 (id=990): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xf8) getdents64(r1, 0x0, 0x22) ioctl$sock_inet_SIOCSIFADDR(r0, 0x80108906, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) 103.026899ms ago: executing program 0 (id=991): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x80000000) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1) fallocate(r1, 0x3, 0x0, 0x8000c62) 0s ago: executing program 0 (id=992): ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000ffffff7f0000000000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_create(0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): ystem [ 271.470841][ T4907] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 271.509146][ T6944] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 271.517791][ T6944] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 271.542350][ T6944] EXT4-fs (loop7): 1 truncate cleaned up [ 271.558309][ T6944] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,grpid,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 271.709821][ T4907] usb 9-1: Using ep0 maxpacket: 16 [ 271.878147][ T6952] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 272.000381][ T4907] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 272.024182][ T4907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.067027][ T4907] usb 9-1: Product: syz [ 272.091263][ T4907] usb 9-1: Manufacturer: syz [ 272.116989][ T4907] usb 9-1: SerialNumber: syz [ 272.159411][ T4907] usb 9-1: config 0 descriptor?? [ 272.471266][ T4907] ums-onetouch 9-1:0.0: USB Mass Storage device detected [ 272.591359][ T4907] usb 9-1: USB disconnect, device number 4 [ 273.982059][ T6953] loop6: detected capacity change from 0 to 40427 [ 274.023371][ T6970] loop2: detected capacity change from 0 to 128 [ 274.034379][ T6953] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 274.049357][ T6953] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 274.061808][ T6953] F2FS-fs (loop6): invalid crc value [ 274.080969][ T6953] F2FS-fs (loop6): Found nat_bits in checkpoint [ 274.090588][ T6970] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.120049][ T6970] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.216538][ T6953] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 274.228366][ T6953] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 274.474975][ T6978] attempt to access beyond end of device [ 274.474975][ T6978] loop6: rw=0, want=71688, limit=40427 [ 274.502626][ T6978] attempt to access beyond end of device [ 274.502626][ T6978] loop6: rw=0, want=71688, limit=40427 [ 274.569892][ T6978] attempt to access beyond end of device [ 274.569892][ T6978] loop6: rw=0, want=71688, limit=40427 [ 274.622715][ T6953] attempt to access beyond end of device [ 274.622715][ T6953] loop6: rw=524288, want=69640, limit=40427 [ 274.683620][ T6953] attempt to access beyond end of device [ 274.683620][ T6953] loop6: rw=524288, want=69648, limit=40427 [ 274.696283][ T6967] loop8: detected capacity change from 0 to 40427 [ 274.742004][ T6953] attempt to access beyond end of device [ 274.742004][ T6953] loop6: rw=524288, want=69656, limit=40427 [ 274.753915][ T6953] attempt to access beyond end of device [ 274.753915][ T6953] loop6: rw=524288, want=69664, limit=40427 [ 274.760325][ T6967] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 274.778828][ T6967] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 274.789873][ T6953] attempt to access beyond end of device [ 274.789873][ T6953] loop6: rw=524288, want=69672, limit=40427 [ 274.821682][ T6967] F2FS-fs (loop8): invalid crc value [ 274.822637][ T6953] attempt to access beyond end of device [ 274.822637][ T6953] loop6: rw=524288, want=69680, limit=40427 [ 274.862213][ T6967] F2FS-fs (loop8): Found nat_bits in checkpoint [ 274.880019][ T6953] attempt to access beyond end of device [ 274.880019][ T6953] loop6: rw=524288, want=69688, limit=40427 [ 274.915386][ T6967] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 274.922872][ T6967] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 275.139971][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 275.532401][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.552950][ T23] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.750154][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.769433][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.787264][ T23] usb 3-1: Product: syz [ 275.796170][ T23] usb 3-1: Manufacturer: syz [ 275.806762][ T23] usb 3-1: SerialNumber: syz [ 275.870712][ T23] usb 3-1: selecting invalid altsetting 1 [ 276.015032][ T4522] F2FS-fs (loop6): Issue discard(8961, 8961, 255) failed, ret: -5 [ 276.314157][ T23] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 276.338349][ T23] cdc_ncm 3-1:1.1: bind() failure [ 276.386413][ T23] usb 3-1: USB disconnect, device number 6 [ 277.079379][ T6998] loop2: detected capacity change from 0 to 4096 [ 277.201986][ T7005] loop7: detected capacity change from 0 to 128 [ 277.331301][ T7005] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 277.506219][ T4228] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 277.550505][ T7005] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 277.949721][ T4228] usb 7-1: Using ep0 maxpacket: 32 [ 279.279769][ T4228] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 279.328682][ T4228] usb 7-1: config 0 has no interface number 0 [ 279.455963][ T7021] loop2: detected capacity change from 0 to 1024 [ 279.487104][ T4462] handle_bad_sector: 25347 callbacks suppressed [ 279.487123][ T4462] attempt to access beyond end of device [ 279.487123][ T4462] loop8: rw=524288, want=71432, limit=40427 [ 279.519947][ T4228] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 279.540002][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.559508][ T4228] usb 7-1: Product: syz [ 279.573064][ T4462] attempt to access beyond end of device [ 279.573064][ T4462] loop8: rw=524288, want=71440, limit=40427 [ 279.591196][ T4228] usb 7-1: Manufacturer: syz [ 279.605189][ T4228] usb 7-1: SerialNumber: syz [ 279.621449][ T4462] attempt to access beyond end of device [ 279.621449][ T4462] loop8: rw=524288, want=71448, limit=40427 [ 279.656700][ T4462] attempt to access beyond end of device [ 279.656700][ T4462] loop8: rw=524288, want=71456, limit=40427 [ 279.686088][ T4228] usb 7-1: config 0 descriptor?? [ 279.694573][ T4462] attempt to access beyond end of device [ 279.694573][ T4462] loop8: rw=524288, want=71464, limit=40427 [ 279.732918][ T4462] attempt to access beyond end of device [ 279.732918][ T4462] loop8: rw=524288, want=71472, limit=40427 [ 279.745889][ T4228] smsc95xx v2.0.0 [ 279.769555][ T4462] attempt to access beyond end of device [ 279.769555][ T4462] loop8: rw=524288, want=71480, limit=40427 [ 279.799175][ T4462] attempt to access beyond end of device [ 279.799175][ T4462] loop8: rw=524288, want=71488, limit=40427 [ 279.828883][ T4462] attempt to access beyond end of device [ 279.828883][ T4462] loop8: rw=524288, want=71496, limit=40427 [ 279.860561][ T4462] attempt to access beyond end of device [ 279.860561][ T4462] loop8: rw=524288, want=71504, limit=40427 [ 279.981812][ T7021] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,noinit_itable,noload,,errors=continue. Quota mode: none. [ 280.182501][ T4173] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 19: block 400:freeing already freed block (bit 25); block bitmap corrupt. [ 280.209730][ T4228] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 280.239632][ T4228] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 280.536122][ T4228] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 280.559766][ T4228] smsc95xx: probe of 7-1:0.67 failed with error -61 [ 282.096487][ T5786] usb 7-1: USB disconnect, device number 10 [ 282.210105][ T7046] loop6: detected capacity change from 0 to 2048 [ 282.330068][ T7046] EXT4-fs (loop6): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 282.889133][ T7059] loop6: detected capacity change from 0 to 512 [ 283.110217][ T7059] EXT4-fs (loop6): orphan cleanup on readonly fs [ 283.127340][ T7059] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.660: bg 0: block 248: padding at end of block bitmap is not set [ 283.148617][ T7059] Quota error (device loop6): write_blk: dquota write failed [ 283.156422][ T7059] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 283.167074][ T7059] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.660: Failed to acquire dquot type 1 [ 283.190199][ T7059] EXT4-fs (loop6): 1 truncate cleaned up [ 283.202578][ T7059] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 283.903969][ T7057] loop7: detected capacity change from 0 to 4096 [ 285.314444][ T4462] handle_bad_sector: 22803 callbacks suppressed [ 285.314464][ T4462] attempt to access beyond end of device [ 285.314464][ T4462] loop8: rw=0, want=70952, limit=40427 [ 285.415788][ T4462] attempt to access beyond end of device [ 285.415788][ T4462] loop8: rw=0, want=70960, limit=40427 [ 285.449755][ T4462] attempt to access beyond end of device [ 285.449755][ T4462] loop8: rw=0, want=70968, limit=40427 [ 285.499704][ T4462] attempt to access beyond end of device [ 285.499704][ T4462] loop8: rw=0, want=70976, limit=40427 [ 285.543088][ T4462] attempt to access beyond end of device [ 285.543088][ T4462] loop8: rw=0, want=70984, limit=40427 [ 285.584943][ T4462] attempt to access beyond end of device [ 285.584943][ T4462] loop8: rw=0, want=70992, limit=40427 [ 285.636861][ T4462] attempt to access beyond end of device [ 285.636861][ T4462] loop8: rw=0, want=71000, limit=40427 [ 285.678099][ T4462] attempt to access beyond end of device [ 285.678099][ T4462] loop8: rw=0, want=71008, limit=40427 [ 285.735237][ T4462] attempt to access beyond end of device [ 285.735237][ T4462] loop8: rw=0, want=71016, limit=40427 [ 285.774164][ T4462] attempt to access beyond end of device [ 285.774164][ T4462] loop8: rw=0, want=71024, limit=40427 [ 286.108101][ T7069] loop6: detected capacity change from 0 to 4096 [ 286.937063][ T7074] loop7: detected capacity change from 0 to 4096 [ 289.780054][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.670'. [ 289.794719][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 290.472355][ T4462] handle_bad_sector: 12852 callbacks suppressed [ 290.472555][ T4462] attempt to access beyond end of device [ 290.472555][ T4462] loop8: rw=0, want=71048, limit=40427 [ 290.669740][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 290.803084][ T4462] attempt to access beyond end of device [ 290.803084][ T4462] loop8: rw=0, want=71056, limit=40427 [ 290.959926][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 291.007557][ T4462] attempt to access beyond end of device [ 291.007557][ T4462] loop8: rw=0, want=71064, limit=40427 [ 291.034647][ T4462] attempt to access beyond end of device [ 291.034647][ T4462] loop8: rw=0, want=71072, limit=40427 [ 291.069218][ T4462] attempt to access beyond end of device [ 291.069218][ T4462] loop8: rw=0, want=71080, limit=40427 [ 291.099208][ T4462] attempt to access beyond end of device [ 291.099208][ T4462] loop8: rw=0, want=71088, limit=40427 [ 291.111946][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.129653][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.146272][ T4462] attempt to access beyond end of device [ 291.146272][ T4462] loop8: rw=0, want=71096, limit=40427 [ 291.168034][ T21] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 291.199844][ T4462] attempt to access beyond end of device [ 291.199844][ T4462] loop8: rw=0, want=71104, limit=40427 [ 291.211305][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.239110][ T21] usb 2-1: config 0 descriptor?? [ 291.245086][ T4462] attempt to access beyond end of device [ 291.245086][ T4462] loop8: rw=0, want=71112, limit=40427 [ 291.268854][ T4462] attempt to access beyond end of device [ 291.268854][ T4462] loop8: rw=0, want=71120, limit=40427 [ 291.342416][ T7107] loop6: detected capacity change from 0 to 4096 [ 292.406430][ T7110] chnl_net:caif_netlink_parms(): no params data found [ 292.673238][ T7110] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.708963][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.743662][ T7110] device bridge_slave_0 entered promiscuous mode [ 292.777266][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.814488][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.851347][ T7110] device bridge_slave_1 entered promiscuous mode [ 293.088086][ T7110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.129841][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 293.135831][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 293.152382][ T7110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.199145][ T21] usb 2-1: USB disconnect, device number 6 [ 293.343970][ T7110] team0: Port device team_slave_0 added [ 293.388250][ T7110] team0: Port device team_slave_1 added [ 293.399748][ T4252] Bluetooth: hci4: command 0x0409 tx timeout [ 293.496024][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.504065][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.532668][ T7110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.548345][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.555739][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.583015][ T7110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.675804][ T7110] device hsr_slave_0 entered promiscuous mode [ 293.696153][ T7110] device hsr_slave_1 entered promiscuous mode [ 293.736633][ T7110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.756508][ T7110] Cannot create hsr debugfs directory [ 294.053002][ T7110] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 294.082053][ T7110] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 294.102559][ T7110] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 294.154991][ T7110] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 294.452647][ T7110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.507240][ T7110] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.535668][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.546694][ T7131] loop6: detected capacity change from 0 to 4096 [ 294.555663][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.610778][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.637144][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.675207][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.682305][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.712972][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.745773][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.810330][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.817429][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.481559][ T4462] handle_bad_sector: 17550 callbacks suppressed [ 295.481578][ T4462] attempt to access beyond end of device [ 295.481578][ T4462] loop8: rw=524288, want=69664, limit=40427 [ 295.604873][ T4462] attempt to access beyond end of device [ 295.604873][ T4462] loop8: rw=524288, want=69672, limit=40427 [ 295.669790][ T4462] attempt to access beyond end of device [ 295.669790][ T4462] loop8: rw=524288, want=69680, limit=40427 [ 295.716953][ T4462] attempt to access beyond end of device [ 295.716953][ T4462] loop8: rw=524288, want=69688, limit=40427 [ 295.767038][ T4462] attempt to access beyond end of device [ 295.767038][ T4462] loop8: rw=524288, want=69696, limit=40427 [ 295.839668][ T4462] attempt to access beyond end of device [ 295.839668][ T4462] loop8: rw=524288, want=69704, limit=40427 [ 295.881774][ T4462] attempt to access beyond end of device [ 295.881774][ T4462] loop8: rw=524288, want=69712, limit=40427 [ 295.924950][ T4462] attempt to access beyond end of device [ 295.924950][ T4462] loop8: rw=524288, want=69720, limit=40427 [ 296.001947][ T4462] attempt to access beyond end of device [ 296.001947][ T4462] loop8: rw=524288, want=69728, limit=40427 [ 296.044251][ T4462] attempt to access beyond end of device [ 296.044251][ T4462] loop8: rw=524288, want=69736, limit=40427 [ 296.602370][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.603062][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.617918][ T4907] Bluetooth: hci4: command 0x041b tx timeout [ 296.700506][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.908647][ T7110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.979611][ T7110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.556409][ T7110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.918452][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.943743][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.968948][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.001259][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.024311][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.049261][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.066209][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.105093][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.130427][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.166183][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.211267][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.246015][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.393649][ T26] audit: type=1326 audit(2000000101.750:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.1.688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4af1557169 code=0x0 [ 298.548927][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.588163][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.629494][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.651414][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.679806][ T4907] Bluetooth: hci2: command 0x0406 tx timeout [ 298.688610][ T7110] device veth0_vlan entered promiscuous mode [ 298.689686][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 298.705761][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.726140][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.770757][ T7110] device veth1_vlan entered promiscuous mode [ 298.847648][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.880695][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 298.910101][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.952910][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.007437][ T7110] device veth0_macvtap entered promiscuous mode [ 299.035108][ T7110] device veth1_macvtap entered promiscuous mode [ 299.101447][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.149660][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.199603][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.238539][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.289063][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.346363][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.376708][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.398577][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.429500][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.480511][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.515857][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.560191][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.569039][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.632229][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.664690][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.702338][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.749729][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.799608][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.840431][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.865247][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.896901][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.952015][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.989660][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.021943][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.049963][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.099461][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.145701][ T7110] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.164649][ T7110] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.275921][ T7110] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.372494][ T7110] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.548921][ T4462] handle_bad_sector: 17463 callbacks suppressed [ 300.548954][ T4462] attempt to access beyond end of device [ 300.548954][ T4462] loop8: rw=524288, want=69640, limit=40427 [ 300.732496][ T4462] attempt to access beyond end of device [ 300.732496][ T4462] loop8: rw=524288, want=69648, limit=40427 [ 300.759817][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 300.804193][ T4462] attempt to access beyond end of device [ 300.804193][ T4462] loop8: rw=524288, want=69656, limit=40427 [ 302.104928][ T4462] attempt to access beyond end of device [ 302.104928][ T4462] loop8: rw=524288, want=69664, limit=40427 [ 302.119741][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.156983][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.259650][ T26] audit: type=1326 audit(2000000105.610:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.2.698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4640675169 code=0x0 [ 302.302640][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.334496][ T4462] attempt to access beyond end of device [ 302.334496][ T4462] loop8: rw=524288, want=69672, limit=40427 [ 302.350634][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.380664][ T4462] attempt to access beyond end of device [ 302.380664][ T4462] loop8: rw=524288, want=69680, limit=40427 [ 302.392733][ T4462] attempt to access beyond end of device [ 302.392733][ T4462] loop8: rw=524288, want=69688, limit=40427 [ 302.404861][ T4462] attempt to access beyond end of device [ 302.404861][ T4462] loop8: rw=524288, want=69696, limit=40427 [ 302.412128][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.417245][ T4462] attempt to access beyond end of device [ 302.417245][ T4462] loop8: rw=524288, want=69704, limit=40427 [ 302.444637][ T4462] attempt to access beyond end of device [ 302.444637][ T4462] loop8: rw=524288, want=69712, limit=40427 [ 302.535712][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 302.575392][ T7208] loop7: detected capacity change from 0 to 512 [ 302.622516][ T7186] loop1: detected capacity change from 0 to 8192 [ 304.433507][ T7208] EXT4-fs (loop7): orphan cleanup on readonly fs [ 304.446915][ T7208] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.699: bg 0: block 248: padding at end of block bitmap is not set [ 304.474574][ T7208] Quota error (device loop7): write_blk: dquota write failed [ 304.482391][ T7208] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 304.492700][ T7208] EXT4-fs error (device loop7): ext4_acquire_dquot:6197: comm syz.7.699: Failed to acquire dquot type 1 [ 304.510937][ T7208] EXT4-fs (loop7): 1 truncate cleaned up [ 304.544015][ T7213] loop2: detected capacity change from 0 to 2048 [ 304.675513][ T7208] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 305.087745][ T7213] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 305.128674][ T7213] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.450767][ T26] audit: type=1800 audit(2000000108.810:62): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.701" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 305.848881][ T4462] handle_bad_sector: 1799 callbacks suppressed [ 305.849092][ T4462] attempt to access beyond end of device [ 305.849092][ T4462] loop8: rw=0, want=69720, limit=40427 [ 306.131756][ T4462] attempt to access beyond end of device [ 306.131756][ T4462] loop8: rw=0, want=69728, limit=40427 [ 306.142861][ T4462] attempt to access beyond end of device [ 306.142861][ T4462] loop8: rw=0, want=69736, limit=40427 [ 306.154023][ T4462] attempt to access beyond end of device [ 306.154023][ T4462] loop8: rw=0, want=69744, limit=40427 [ 306.218967][ T4462] attempt to access beyond end of device [ 306.218967][ T4462] loop8: rw=0, want=69752, limit=40427 [ 306.284334][ T4462] attempt to access beyond end of device [ 306.284334][ T4462] loop8: rw=0, want=69760, limit=40427 [ 306.363497][ T4462] attempt to access beyond end of device [ 306.363497][ T4462] loop8: rw=0, want=69768, limit=40427 [ 306.461431][ T4462] attempt to access beyond end of device [ 306.461431][ T4462] loop8: rw=0, want=69776, limit=40427 [ 306.464950][ T7234] hub 6-0:1.0: USB hub found [ 306.477440][ T4462] attempt to access beyond end of device [ 306.477440][ T4462] loop8: rw=0, want=69784, limit=40427 [ 306.477605][ T4462] attempt to access beyond end of device [ 306.477605][ T4462] loop8: rw=0, want=69792, limit=40427 [ 306.522749][ T7234] hub 6-0:1.0: 1 port detected [ 306.944615][ T7242] loop9: detected capacity change from 0 to 512 [ 307.222397][ T26] audit: type=1326 audit(2000000110.580:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.1.710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4af1557169 code=0x0 [ 308.181364][ T7242] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.707: inode #1: comm syz.9.707: iget: illegal inode # [ 308.365318][ T7242] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.707: error while reading EA inode 1 err=-117 [ 308.428119][ T7242] EXT4-fs (loop9): 1 orphan inode deleted [ 308.464633][ T7242] EXT4-fs (loop9): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,journal_dev=0x0000000000008000,debug_want_extra_isize=0x0000000000000040,nouid32,resgid=0x0000000000000000,bsdgroups,usrjquota=,,errors=continue. Quota mode: none. [ 308.541050][ T7261] loop1: detected capacity change from 0 to 512 [ 308.578667][ T7261] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 308.761945][ T7269] loop2: detected capacity change from 0 to 512 [ 308.839946][ T7261] EXT4-fs (loop1): 1 truncate cleaned up [ 308.850388][ T7261] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 309.064698][ T7269] EXT4-fs (loop2): orphan cleanup on readonly fs [ 309.083398][ T7269] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.715: bg 0: block 248: padding at end of block bitmap is not set [ 309.106196][ T7269] Quota error (device loop2): write_blk: dquota write failed [ 309.114050][ T7269] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 309.124209][ T7269] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.715: Failed to acquire dquot type 1 [ 309.176171][ T7269] EXT4-fs (loop2): 1 truncate cleaned up [ 309.184677][ T7269] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 309.878495][ T7273] loop6: detected capacity change from 0 to 1024 [ 310.246862][ T7273] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 310.925629][ T4462] handle_bad_sector: 7350 callbacks suppressed [ 310.925649][ T4462] attempt to access beyond end of device [ 310.925649][ T4462] loop8: rw=0, want=71032, limit=40427 [ 310.943135][ T4462] attempt to access beyond end of device [ 310.943135][ T4462] loop8: rw=0, want=71040, limit=40427 [ 310.954292][ T4462] attempt to access beyond end of device [ 310.954292][ T4462] loop8: rw=0, want=71048, limit=40427 [ 310.965394][ T4462] attempt to access beyond end of device [ 310.965394][ T4462] loop8: rw=0, want=71056, limit=40427 [ 311.006178][ T4462] attempt to access beyond end of device [ 311.006178][ T4462] loop8: rw=0, want=71064, limit=40427 [ 311.387494][ T7290] loop6: detected capacity change from 0 to 512 [ 311.455632][ T4462] attempt to access beyond end of device [ 311.455632][ T4462] loop8: rw=0, want=71072, limit=40427 [ 311.586367][ T4462] attempt to access beyond end of device [ 311.586367][ T4462] loop8: rw=0, want=71080, limit=40427 [ 311.711138][ T4462] attempt to access beyond end of device [ 311.711138][ T4462] loop8: rw=0, want=71088, limit=40427 [ 311.775661][ T7290] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.721: corrupted inode contents [ 311.864520][ T4462] attempt to access beyond end of device [ 311.864520][ T4462] loop8: rw=0, want=71096, limit=40427 [ 311.909641][ T7290] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #16: comm syz.6.721: mark_inode_dirty error [ 311.978494][ T4462] attempt to access beyond end of device [ 311.978494][ T4462] loop8: rw=0, want=71104, limit=40427 [ 312.026910][ T7290] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.721: corrupted inode contents [ 312.132180][ T7290] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.721: mark_inode_dirty error [ 312.195597][ T7290] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.721: corrupted inode contents [ 312.336385][ T7290] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 312.390003][ T7290] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.721: corrupted inode contents [ 312.513773][ T7290] EXT4-fs error (device loop6): ext4_truncate:4272: inode #16: comm syz.6.721: mark_inode_dirty error [ 312.575874][ T7290] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 312.640048][ T7290] EXT4-fs (loop6): 1 truncate cleaned up [ 312.645715][ T7290] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 312.714901][ T7290] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.557614][ T26] audit: type=1326 audit(2000000116.910:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.6.723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3c9000169 code=0x0 [ 314.838374][ T7314] loop2: detected capacity change from 0 to 512 [ 314.910501][ T7314] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 314.959844][ T7314] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 315.006616][ T7314] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 315.064673][ T7314] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 315.085815][ T7314] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e018, mo2=0000] [ 315.140719][ T7314] EXT4-fs (loop2): orphan cleanup on readonly fs [ 315.148464][ T7314] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.728: bg 0: block 34: padding at end of block bitmap is not set [ 315.180383][ T7314] Quota error (device loop2): write_blk: dquota write failed [ 315.228433][ T7314] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 315.228545][ T7314] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.728: Failed to acquire dquot type 1 [ 315.310497][ T7314] EXT4-fs (loop2): 1 truncate cleaned up [ 315.327487][ T7314] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,bsdgroups,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 315.616879][ T7321] loop7: detected capacity change from 0 to 512 [ 315.800644][ T7308] loop6: detected capacity change from 0 to 40427 [ 315.971888][ T4462] handle_bad_sector: 16521 callbacks suppressed [ 315.971911][ T4462] attempt to access beyond end of device [ 315.971911][ T4462] loop8: rw=524288, want=69640, limit=40427 [ 316.029506][ T4462] attempt to access beyond end of device [ 316.029506][ T4462] loop8: rw=524288, want=69648, limit=40427 [ 316.092898][ T4462] attempt to access beyond end of device [ 316.092898][ T4462] loop8: rw=524288, want=69656, limit=40427 [ 316.135219][ T4462] attempt to access beyond end of device [ 316.135219][ T4462] loop8: rw=524288, want=69664, limit=40427 [ 316.186147][ T4462] attempt to access beyond end of device [ 316.186147][ T4462] loop8: rw=524288, want=69672, limit=40427 [ 316.238327][ T4462] attempt to access beyond end of device [ 316.238327][ T4462] loop8: rw=524288, want=69680, limit=40427 [ 316.296575][ T4462] attempt to access beyond end of device [ 316.296575][ T4462] loop8: rw=524288, want=69688, limit=40427 [ 316.338937][ T4462] attempt to access beyond end of device [ 316.338937][ T4462] loop8: rw=524288, want=69696, limit=40427 [ 316.385977][ T4462] attempt to access beyond end of device [ 316.385977][ T4462] loop8: rw=524288, want=69704, limit=40427 [ 316.428312][ T4462] attempt to access beyond end of device [ 316.428312][ T4462] loop8: rw=524288, want=69712, limit=40427 [ 317.448265][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.459613][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.567992][ T7323] loop2: detected capacity change from 0 to 512 [ 318.501857][ T7323] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 318.899390][ T7323] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 318.947322][ T7323] EXT4-fs (loop2): 1 truncate cleaned up [ 318.976229][ T7323] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,block_validity,quota,nombcache,,errors=continue. Quota mode: writeback. [ 320.428796][ T7335] loop2: detected capacity change from 0 to 512 [ 320.500042][ T7335] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 321.243260][ T4462] handle_bad_sector: 17439 callbacks suppressed [ 321.243280][ T4462] attempt to access beyond end of device [ 321.243280][ T4462] loop8: rw=0, want=71480, limit=40427 [ 321.261553][ T4462] attempt to access beyond end of device [ 321.261553][ T4462] loop8: rw=0, want=71488, limit=40427 [ 321.272670][ T4462] attempt to access beyond end of device [ 321.272670][ T4462] loop8: rw=0, want=71496, limit=40427 [ 321.283788][ T4462] attempt to access beyond end of device [ 321.283788][ T4462] loop8: rw=0, want=71504, limit=40427 [ 321.313159][ T26] audit: type=1326 audit(2000000124.670:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.9.736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb6e763169 code=0x0 [ 321.338594][ T4462] attempt to access beyond end of device [ 321.338594][ T4462] loop8: rw=0, want=71512, limit=40427 [ 321.377291][ T7335] EXT4-fs (loop2): 1 truncate cleaned up [ 321.387744][ T7335] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 321.433595][ T4462] attempt to access beyond end of device [ 321.433595][ T4462] loop8: rw=0, want=71520, limit=40427 [ 321.445230][ T7343] binder_alloc: 7342: binder_alloc_buf, no vma [ 321.494949][ T4462] attempt to access beyond end of device [ 321.494949][ T4462] loop8: rw=0, want=71528, limit=40427 [ 321.576055][ T4462] attempt to access beyond end of device [ 321.576055][ T4462] loop8: rw=0, want=71536, limit=40427 [ 321.619839][ T4462] attempt to access beyond end of device [ 321.619839][ T4462] loop8: rw=0, want=71544, limit=40427 [ 321.674556][ T4462] attempt to access beyond end of device [ 321.674556][ T4462] loop8: rw=0, want=71552, limit=40427 [ 323.276932][ T7349] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 323.544259][ T26] audit: type=1326 audit(2000000126.900:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2ed40169 code=0x7ffc0000 [ 323.647396][ T26] audit: type=1326 audit(2000000126.930:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2ed40169 code=0x7ffc0000 [ 323.713279][ T26] audit: type=1326 audit(2000000126.930:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2ed40169 code=0x7ffc0000 [ 323.813829][ T7365] loop7: detected capacity change from 0 to 512 [ 324.657872][ T7359] loop2: detected capacity change from 0 to 40427 [ 326.780398][ T7365] EXT4-fs: failed to create workqueue [ 326.786178][ T7365] EXT4-fs (loop7): mount failed [ 326.876220][ T26] audit: type=1326 audit(2000000126.930:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2ed40169 code=0x7ffc0000 [ 326.999724][ T4462] handle_bad_sector: 6401 callbacks suppressed [ 326.999741][ T4462] attempt to access beyond end of device [ 326.999741][ T4462] loop8: rw=524288, want=71368, limit=40427 [ 327.099615][ T26] audit: type=1326 audit(2000000126.930:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2ed40169 code=0x7ffc0000 [ 327.122542][ T4462] attempt to access beyond end of device [ 327.122542][ T4462] loop8: rw=524288, want=71376, limit=40427 [ 327.199764][ T4462] attempt to access beyond end of device [ 327.199764][ T4462] loop8: rw=524288, want=71384, limit=40427 [ 327.239602][ T26] audit: type=1326 audit(2000000126.930:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2ed40169 code=0x7ffc0000 [ 327.270067][ T4462] attempt to access beyond end of device [ 327.270067][ T4462] loop8: rw=524288, want=71392, limit=40427 [ 327.326873][ T4462] attempt to access beyond end of device [ 327.326873][ T4462] loop8: rw=524288, want=71400, limit=40427 [ 327.389601][ T26] audit: type=1326 audit(2000000126.930:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2ed40169 code=0x7ffc0000 [ 327.419678][ T4462] attempt to access beyond end of device [ 327.419678][ T4462] loop8: rw=524288, want=71408, limit=40427 [ 327.469657][ T4462] attempt to access beyond end of device [ 327.469657][ T4462] loop8: rw=524288, want=71416, limit=40427 [ 327.536438][ T26] audit: type=1326 audit(2000000126.930:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2ed40169 code=0x7ffc0000 [ 327.565127][ T4462] attempt to access beyond end of device [ 327.565127][ T4462] loop8: rw=524288, want=71424, limit=40427 [ 327.626356][ T4462] attempt to access beyond end of device [ 327.626356][ T4462] loop8: rw=524288, want=71432, limit=40427 [ 327.666515][ T26] audit: type=1326 audit(2000000126.930:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fae2ed40169 code=0x7ffc0000 [ 327.703089][ T4462] attempt to access beyond end of device [ 327.703089][ T4462] loop8: rw=524288, want=71440, limit=40427 [ 327.786312][ T26] audit: type=1326 audit(2000000126.930:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2ed40169 code=0x7ffc0000 [ 327.907747][ T26] audit: type=1326 audit(2000000126.930:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2ed40169 code=0x7ffc0000 [ 330.541128][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.753'. [ 330.665905][ T7393] team0: Port device team_slave_0 removed [ 330.855565][ T7389] chnl_net:caif_netlink_parms(): no params data found [ 330.941423][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 331.129981][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 331.137864][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.146175][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.154676][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.162636][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.170736][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.178781][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.197072][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.229705][ T7389] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.244873][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.448287][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.461476][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.469301][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.484998][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.505548][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.522715][ T7389] device bridge_slave_0 entered promiscuous mode [ 331.537296][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.557509][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.573887][ T5786] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 331.592192][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.624669][ T5786] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 331.637486][ T7389] device bridge_slave_1 entered promiscuous mode [ 331.812335][ T7389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.857829][ T7417] loop6: detected capacity change from 0 to 2048 [ 331.897007][ T7415] tipc: Started in network mode [ 331.911550][ T7415] tipc: Node identity 029c00298bb4, cluster identity 4711 [ 331.924596][ T7417] EXT4-fs (loop6): inline encryption not supported [ 331.950313][ T7415] tipc: Enabled bearer , priority 0 [ 331.957096][ T7417] EXT4-fs (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 331.968501][ T7389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.977818][ T7417] EXT4-fs (loop6): Unrecognized mount option "audit" or missing value [ 332.009772][ T4462] handle_bad_sector: 10261 callbacks suppressed [ 332.009788][ T4462] attempt to access beyond end of device [ 332.009788][ T4462] loop8: rw=524288, want=71296, limit=40427 [ 332.034415][ T7421] loop2: detected capacity change from 0 to 512 [ 332.057110][ T4462] attempt to access beyond end of device [ 332.057110][ T4462] loop8: rw=524288, want=71304, limit=40427 [ 332.074131][ T26] audit: type=1326 audit(2000000135.430:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.9.760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb6e763169 code=0x0 [ 332.097029][ T4462] attempt to access beyond end of device [ 332.097029][ T4462] loop8: rw=524288, want=71312, limit=40427 [ 332.116183][ T7415] device syzkaller0 entered promiscuous mode [ 332.143047][ T7389] team0: Port device team_slave_0 added [ 332.150070][ T7421] EXT4-fs (loop2): orphan cleanup on readonly fs [ 332.157612][ T4462] attempt to access beyond end of device [ 332.157612][ T4462] loop8: rw=524288, want=71320, limit=40427 [ 332.165434][ T7421] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.759: bg 0: block 248: padding at end of block bitmap is not set [ 332.179097][ T7417] loop6: detected capacity change from 0 to 256 [ 332.184738][ T7421] Quota error (device loop2): write_blk: dquota write failed [ 332.192236][ T4462] attempt to access beyond end of device [ 332.192236][ T4462] loop8: rw=524288, want=71328, limit=40427 [ 332.197178][ T7421] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 332.221279][ T7421] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.759: Failed to acquire dquot type 1 [ 332.233628][ T7421] EXT4-fs (loop2): 1 truncate cleaned up [ 332.239983][ T7421] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 332.253200][ T7389] team0: Port device team_slave_1 added [ 332.265751][ T4462] attempt to access beyond end of device [ 332.265751][ T4462] loop8: rw=524288, want=71336, limit=40427 [ 332.280402][ T4462] attempt to access beyond end of device [ 332.280402][ T4462] loop8: rw=524288, want=71344, limit=40427 [ 332.280713][ T7417] exfat: Deprecated parameter 'namecase' [ 332.292561][ T4462] attempt to access beyond end of device [ 332.292561][ T4462] loop8: rw=524288, want=71352, limit=40427 [ 332.332856][ T7417] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 332.367434][ T4462] attempt to access beyond end of device [ 332.367434][ T4462] loop8: rw=524288, want=71360, limit=40427 [ 332.424199][ T4462] attempt to access beyond end of device [ 332.424199][ T4462] loop8: rw=524288, want=71368, limit=40427 [ 332.438359][ T7389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.453801][ T7389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.533563][ T1108] Bluetooth: hci6: command 0x0409 tx timeout [ 332.539756][ T7389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.558981][ T7389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.567212][ T7389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.593866][ T7389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.608464][ T7414] tipc: Resetting bearer [ 333.188999][ T7414] tipc: Disabling bearer [ 333.196498][ T7] tipc: Node number set to 2301100073 [ 333.219732][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.6.758'. [ 333.412465][ T7389] device hsr_slave_0 entered promiscuous mode [ 333.491286][ T7389] device hsr_slave_1 entered promiscuous mode [ 333.535304][ T7389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.566473][ T7389] Cannot create hsr debugfs directory [ 334.454118][ T26] audit: type=1326 audit(2000000137.810:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.7.771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae2ed40169 code=0x0 [ 334.591617][ T7457] loop9: detected capacity change from 0 to 1024 [ 334.609836][ T23] Bluetooth: hci6: command 0x041b tx timeout [ 335.301098][ T7457] EXT4-fs (loop9): Test dummy encryption mode enabled [ 335.308700][ T7457] EXT4-fs (loop9): Test dummy encryption mode enabled [ 336.199409][ T7475] hub 6-0:1.0: USB hub found [ 336.205553][ T7475] hub 6-0:1.0: 1 port detected [ 336.851706][ T4176] Bluetooth: hci6: command 0x040f tx timeout [ 337.057333][ T4462] handle_bad_sector: 10063 callbacks suppressed [ 337.057353][ T4462] attempt to access beyond end of device [ 337.057353][ T4462] loop8: rw=524288, want=69640, limit=40427 [ 337.209630][ T4462] attempt to access beyond end of device [ 337.209630][ T4462] loop8: rw=524288, want=69648, limit=40427 [ 337.292223][ T4462] attempt to access beyond end of device [ 337.292223][ T4462] loop8: rw=524288, want=69656, limit=40427 [ 337.362393][ T4462] attempt to access beyond end of device [ 337.362393][ T4462] loop8: rw=524288, want=69664, limit=40427 [ 337.598387][ T4462] attempt to access beyond end of device [ 337.598387][ T4462] loop8: rw=524288, want=69672, limit=40427 [ 338.827730][ T4462] attempt to access beyond end of device [ 338.827730][ T4462] loop8: rw=524288, want=69680, limit=40427 [ 338.912131][ T4462] attempt to access beyond end of device [ 338.912131][ T4462] loop8: rw=524288, want=69688, limit=40427 [ 338.924082][ T4176] Bluetooth: hci6: command 0x0419 tx timeout [ 338.992579][ T4462] attempt to access beyond end of device [ 338.992579][ T4462] loop8: rw=524288, want=69696, limit=40427 [ 339.018344][ T7492] tipc: Started in network mode [ 339.030090][ T7492] tipc: Node identity 400, cluster identity 7 [ 339.037465][ T4462] attempt to access beyond end of device [ 339.037465][ T4462] loop8: rw=524288, want=69704, limit=40427 [ 339.055161][ T7492] tipc: Node number set to 1024 [ 339.065824][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.9.782'. [ 339.083797][ T4462] attempt to access beyond end of device [ 339.083797][ T4462] loop8: rw=524288, want=69712, limit=40427 [ 339.228851][ T7496] loop2: detected capacity change from 0 to 16 [ 339.347286][ T7496] erofs: (device loop2): mounted with root inode @ nid 36. [ 339.425047][ T7496] syz.2.785[7496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.425401][ T7496] syz.2.785[7496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.418620][ T7389] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.441144][ T7517] loop7: detected capacity change from 0 to 1024 [ 340.469334][ T7389] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.489925][ T7389] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.508061][ T7389] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 340.633229][ T7517] EXT4-fs (loop7): Test dummy encryption mode enabled [ 340.694282][ T7517] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 340.725539][ T7527] hub 6-0:1.0: USB hub found [ 340.730571][ T7527] hub 6-0:1.0: 1 port detected [ 340.735810][ T7] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 342.566886][ T4462] handle_bad_sector: 5644 callbacks suppressed [ 342.566903][ T4462] attempt to access beyond end of device [ 342.566903][ T4462] loop8: rw=524288, want=69640, limit=40427 [ 342.669833][ T7389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.687100][ T4462] attempt to access beyond end of device [ 342.687100][ T4462] loop8: rw=524288, want=69648, limit=40427 [ 342.724642][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.740200][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.747607][ T4462] attempt to access beyond end of device [ 342.747607][ T4462] loop8: rw=524288, want=69656, limit=40427 [ 342.800617][ T7389] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.817801][ T4462] attempt to access beyond end of device [ 342.817801][ T4462] loop8: rw=524288, want=69664, limit=40427 [ 342.848334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.863705][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.927531][ T4462] attempt to access beyond end of device [ 342.927531][ T4462] loop8: rw=524288, want=69672, limit=40427 [ 342.975834][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.982960][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.035145][ T4462] attempt to access beyond end of device [ 343.035145][ T4462] loop8: rw=524288, want=69680, limit=40427 [ 343.104845][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.138701][ T4462] attempt to access beyond end of device [ 343.138701][ T4462] loop8: rw=524288, want=69688, limit=40427 [ 343.201267][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.237019][ T4462] attempt to access beyond end of device [ 343.237019][ T4462] loop8: rw=524288, want=69696, limit=40427 [ 343.282004][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.289105][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.346840][ T4462] attempt to access beyond end of device [ 343.346840][ T4462] loop8: rw=524288, want=69704, limit=40427 [ 343.428076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.454913][ T4462] attempt to access beyond end of device [ 343.454913][ T4462] loop8: rw=524288, want=69712, limit=40427 [ 343.494866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.545101][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.201504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.358698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.460094][ T1108] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 344.545793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.657416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.685133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.694035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.703018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.714463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.739837][ T1108] usb 10-1: Using ep0 maxpacket: 16 [ 344.760594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.808655][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.879855][ T1108] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.903959][ T1108] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.936140][ T1108] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 344.965611][ T1108] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.006276][ T1108] usb 10-1: config 0 descriptor?? [ 345.263528][ T7389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.277329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.297214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.371571][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.397839][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.462700][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.483672][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.495275][ T1108] input: HID 05ac:8241 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:05AC:8241.0006/input/input9 [ 345.528282][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.556354][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.581044][ T7389] device veth0_vlan entered promiscuous mode [ 345.610154][ T1108] appleir 0003:05AC:8241.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 345.615215][ T7389] device veth1_vlan entered promiscuous mode [ 345.769466][ T7556] loop7: detected capacity change from 0 to 2048 [ 345.800586][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.828263][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.850546][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.860176][ T7556] EXT4-fs (loop7): inline encryption not supported [ 345.870088][ T7556] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 345.881706][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.919446][ T7556] EXT4-fs (loop7): Unrecognized mount option "audit" or missing value [ 345.948380][ T7389] device veth0_macvtap entered promiscuous mode [ 345.975919][ T7389] device veth1_macvtap entered promiscuous mode [ 346.034671][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.054115][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.075976][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.087914][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.105743][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.173643][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.193986][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.229631][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.287154][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.298310][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.308208][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.318778][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.330452][ T7389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.343050][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.362465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.491092][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.502219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.532549][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.543436][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.626630][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.678823][ T7556] loop7: detected capacity change from 0 to 256 [ 346.787459][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.810075][ T23] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 347.003362][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.065061][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.076942][ T7569] loop6: detected capacity change from 0 to 1024 [ 347.116913][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.149875][ T23] usb 10-1: device descriptor read/64, error -32 [ 347.163949][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.173962][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.188407][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.198426][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.209200][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.223131][ T7389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.230648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.246517][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.284614][ T7556] exfat: Deprecated parameter 'namecase' [ 347.419835][ T23] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 347.581871][ T4462] handle_bad_sector: 9959 callbacks suppressed [ 347.582071][ T4462] attempt to access beyond end of device [ 347.582071][ T4462] loop8: rw=524288, want=71264, limit=40427 [ 347.728167][ T7556] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 347.832198][ T7569] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 348.059668][ T4462] attempt to access beyond end of device [ 348.059668][ T4462] loop8: rw=524288, want=71272, limit=40427 [ 348.622076][ T7389] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.658023][ T7581] input: syz1 as /devices/virtual/input/input10 [ 348.679777][ T4462] attempt to access beyond end of device [ 348.679777][ T4462] loop8: rw=524288, want=71280, limit=40427 [ 348.691977][ T7389] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.724333][ T7389] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.747008][ T4462] attempt to access beyond end of device [ 348.747008][ T4462] loop8: rw=524288, want=71288, limit=40427 [ 348.792221][ T7389] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.804321][ T4462] attempt to access beyond end of device [ 348.804321][ T4462] loop8: rw=524288, want=71296, limit=40427 [ 348.816431][ T4462] attempt to access beyond end of device [ 348.816431][ T4462] loop8: rw=524288, want=71304, limit=40427 [ 348.827990][ T4462] attempt to access beyond end of device [ 348.827990][ T4462] loop8: rw=524288, want=71312, limit=40427 [ 348.841933][ T4462] attempt to access beyond end of device [ 348.841933][ T4462] loop8: rw=524288, want=71320, limit=40427 [ 348.873643][ T4462] attempt to access beyond end of device [ 348.873643][ T4462] loop8: rw=524288, want=71328, limit=40427 [ 348.933710][ T4462] attempt to access beyond end of device [ 348.933710][ T4462] loop8: rw=524288, want=71336, limit=40427 [ 349.438359][ T5041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.471496][ T5041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.541577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.561273][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.583861][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.611857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.702533][ T4228] Bluetooth: hci3: command 0x0406 tx timeout [ 349.824731][ T7601] hub 6-0:1.0: USB hub found [ 349.830372][ T7601] hub 6-0:1.0: 1 port detected [ 349.923393][ T5063] usb 10-1: USB disconnect, device number 2 [ 350.451532][ T26] audit: type=1326 audit(2000000153.810:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cddf56169 code=0x7ffc0000 [ 350.685188][ T26] audit: type=1326 audit(2000000153.830:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cddf56169 code=0x7ffc0000 [ 351.160856][ T26] audit: type=1326 audit(2000000153.830:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cddf56169 code=0x7ffc0000 [ 352.197010][ T7619] loop6: detected capacity change from 0 to 256 [ 352.243028][ T7619] exfat: Bad value for 'umask' [ 352.265176][ T26] audit: type=1326 audit(2000000153.830:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cddf56169 code=0x7ffc0000 [ 352.379644][ T26] audit: type=1326 audit(2000000153.830:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cddf56169 code=0x7ffc0000 [ 352.567367][ T26] audit: type=1326 audit(2000000153.830:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cddf56169 code=0x7ffc0000 [ 353.060077][ T4462] handle_bad_sector: 3899 callbacks suppressed [ 353.060098][ T4462] attempt to access beyond end of device [ 353.060098][ T4462] loop8: rw=524288, want=69640, limit=40427 [ 353.180026][ T4462] attempt to access beyond end of device [ 353.180026][ T4462] loop8: rw=524288, want=69648, limit=40427 [ 353.192172][ T26] audit: type=1326 audit(2000000153.830:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cddf56169 code=0x7ffc0000 [ 353.259849][ T4462] attempt to access beyond end of device [ 353.259849][ T4462] loop8: rw=524288, want=69656, limit=40427 [ 353.290470][ T26] audit: type=1326 audit(2000000153.830:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cddf56169 code=0x7ffc0000 [ 353.315100][ T26] audit: type=1326 audit(2000000153.830:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cddf56169 code=0x7ffc0000 [ 353.356205][ T26] audit: type=1326 audit(2000000153.830:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cddf56169 code=0x7ffc0000 [ 353.367624][ T4462] attempt to access beyond end of device [ 353.367624][ T4462] loop8: rw=524288, want=69664, limit=40427 [ 353.472882][ T4462] attempt to access beyond end of device [ 353.472882][ T4462] loop8: rw=524288, want=69672, limit=40427 [ 353.508622][ T7631] loop2: detected capacity change from 0 to 1024 [ 353.525306][ T4462] attempt to access beyond end of device [ 353.525306][ T4462] loop8: rw=524288, want=69680, limit=40427 [ 353.557261][ T4462] attempt to access beyond end of device [ 353.557261][ T4462] loop8: rw=524288, want=69688, limit=40427 [ 353.599500][ T4462] attempt to access beyond end of device [ 353.599500][ T4462] loop8: rw=524288, want=69696, limit=40427 [ 353.639713][ T4462] attempt to access beyond end of device [ 353.639713][ T4462] loop8: rw=524288, want=69704, limit=40427 [ 353.676033][ T4462] attempt to access beyond end of device [ 353.676033][ T4462] loop8: rw=524288, want=69712, limit=40427 [ 353.900435][ T7631] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 354.174597][ T7624] loop9: detected capacity change from 0 to 40427 [ 354.729824][ T7624] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 354.756136][ T7624] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 354.831865][ T7624] F2FS-fs (loop9): invalid crc value [ 354.866065][ T7643] loop6: detected capacity change from 0 to 2048 [ 354.876527][ T7624] F2FS-fs (loop9): Found nat_bits in checkpoint [ 354.959896][ T7643] EXT4-fs (loop6): Mount option "dioread_nolock" incompatible with ext2 [ 355.038144][ T7624] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 355.057755][ T7624] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 358.228164][ T4462] handle_bad_sector: 5714 callbacks suppressed [ 358.228209][ T4462] attempt to access beyond end of device [ 358.228209][ T4462] loop8: rw=524288, want=70200, limit=40427 [ 358.252288][ T4462] attempt to access beyond end of device [ 358.252288][ T4462] loop8: rw=524288, want=70208, limit=40427 [ 358.266114][ T4462] attempt to access beyond end of device [ 358.266114][ T4462] loop8: rw=524288, want=70216, limit=40427 [ 358.279272][ T4462] attempt to access beyond end of device [ 358.279272][ T4462] loop8: rw=524288, want=70224, limit=40427 [ 358.559825][ T4462] attempt to access beyond end of device [ 358.559825][ T4462] loop8: rw=524288, want=70232, limit=40427 [ 358.649509][ T4462] attempt to access beyond end of device [ 358.649509][ T4462] loop8: rw=524288, want=70240, limit=40427 [ 358.663582][ T7684] netlink: 16 bytes leftover after parsing attributes in process `syz.7.839'. [ 358.674467][ T4462] attempt to access beyond end of device [ 358.674467][ T4462] loop8: rw=524288, want=70248, limit=40427 [ 358.686584][ T4462] attempt to access beyond end of device [ 358.686584][ T4462] loop8: rw=524288, want=70256, limit=40427 [ 358.698117][ T4462] attempt to access beyond end of device [ 358.698117][ T4462] loop8: rw=524288, want=70264, limit=40427 [ 358.709739][ T4462] attempt to access beyond end of device [ 358.709739][ T4462] loop8: rw=524288, want=70272, limit=40427 [ 359.148619][ T7688] loop6: detected capacity change from 0 to 512 [ 359.322347][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.9.836'. [ 359.399131][ T7688] EXT4-fs (loop6): 1 orphan inode deleted [ 359.442490][ T7688] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 359.457883][ T7688] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.187421][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 360.187437][ T26] audit: type=1800 audit(2000000163.540:92): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.841" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 360.295271][ T7686] loop3: detected capacity change from 0 to 40427 [ 360.300742][ T26] audit: type=1800 audit(2000000163.580:93): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.841" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 360.324791][ T7709] loop9: detected capacity change from 0 to 256 [ 360.377890][ T7686] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 360.415911][ T7686] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 360.486677][ T7686] F2FS-fs (loop3): invalid crc value [ 360.504714][ T7712] loop2: detected capacity change from 0 to 512 [ 360.555933][ T7709] loop9: detected capacity change from 0 to 512 [ 360.572702][ T7686] F2FS-fs (loop3): Found nat_bits in checkpoint [ 361.119974][ T7712] EXT4-fs (loop2): Ignoring removed orlov option [ 361.210609][ T7712] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 361.263191][ T7686] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 361.270419][ T7712] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 361.301645][ T7686] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 361.395273][ T7712] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 361.680274][ T7712] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 361.688197][ T7712] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=6040e01c, mo2=0000] [ 361.788506][ T7712] EXT4-fs (loop2): failed to initialize system zone (-117) [ 361.826690][ T7712] EXT4-fs (loop2): mount failed [ 362.455594][ T7734] loop9: detected capacity change from 0 to 512 [ 362.578069][ T7734] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.804924][ T7724] loop6: detected capacity change from 0 to 40427 [ 362.845609][ T7724] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 362.862567][ T7724] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 362.910091][ T7724] F2FS-fs (loop6): invalid crc value [ 362.937724][ T7724] F2FS-fs (loop6): Found nat_bits in checkpoint [ 363.049169][ T7724] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 363.070136][ T7747] loop3: detected capacity change from 0 to 2048 [ 363.086839][ T7724] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 363.232188][ T4462] handle_bad_sector: 14744 callbacks suppressed [ 363.232226][ T4462] attempt to access beyond end of device [ 363.232226][ T4462] loop8: rw=0, want=71040, limit=40427 [ 363.322821][ T7747] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 363.376784][ T4462] attempt to access beyond end of device [ 363.376784][ T4462] loop8: rw=0, want=71048, limit=40427 [ 363.488351][ T4462] attempt to access beyond end of device [ 363.488351][ T4462] loop8: rw=0, want=71056, limit=40427 [ 363.545013][ T4462] attempt to access beyond end of device [ 363.545013][ T4462] loop8: rw=0, want=71064, limit=40427 [ 363.556816][ T4462] attempt to access beyond end of device [ 363.556816][ T4462] loop8: rw=0, want=71072, limit=40427 [ 363.558857][ T7747] device wireguard0 entered promiscuous mode [ 363.569327][ T4462] attempt to access beyond end of device [ 363.569327][ T4462] loop8: rw=0, want=71080, limit=40427 [ 363.713958][ T4462] attempt to access beyond end of device [ 363.713958][ T4462] loop8: rw=0, want=71088, limit=40427 [ 363.929738][ T4462] attempt to access beyond end of device [ 363.929738][ T4462] loop8: rw=0, want=71096, limit=40427 [ 364.076380][ T4462] attempt to access beyond end of device [ 364.076380][ T4462] loop8: rw=0, want=71104, limit=40427 [ 364.095692][ T4462] attempt to access beyond end of device [ 364.095692][ T4462] loop8: rw=0, want=71112, limit=40427 [ 364.226429][ T7767] netlink: 76 bytes leftover after parsing attributes in process `syz.7.858'. [ 364.424065][ T7772] loop9: detected capacity change from 0 to 128 [ 364.857892][ T7779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.859'. [ 368.068896][ T7799] loop2: detected capacity change from 0 to 512 [ 368.121240][ T7803] netlink: 76 bytes leftover after parsing attributes in process `syz.3.871'. [ 368.133994][ T7799] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 368.211093][ T7799] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 368.219074][ T7799] System zones: 1-12 [ 368.239578][ T4462] handle_bad_sector: 5465 callbacks suppressed [ 368.239593][ T4462] attempt to access beyond end of device [ 368.239593][ T4462] loop8: rw=524288, want=71664, limit=40427 [ 368.272966][ T4462] attempt to access beyond end of device [ 368.272966][ T4462] loop8: rw=524288, want=71672, limit=40427 [ 368.284849][ T4462] attempt to access beyond end of device [ 368.284849][ T4462] loop8: rw=524288, want=71680, limit=40427 [ 368.352842][ T7799] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.869: corrupted in-inode xattr [ 368.379288][ T7799] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.869: couldn't read orphan inode 15 (err -117) [ 368.379392][ T4462] attempt to access beyond end of device [ 368.379392][ T4462] loop8: rw=524288, want=71688, limit=40427 [ 368.408395][ T7806] loop6: detected capacity change from 0 to 4096 [ 368.429025][ T7799] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 368.447058][ T4462] attempt to access beyond end of device [ 368.447058][ T4462] loop8: rw=0, want=69640, limit=40427 [ 368.472394][ T4462] attempt to access beyond end of device [ 368.472394][ T4462] loop8: rw=0, want=69648, limit=40427 [ 368.491877][ T4462] attempt to access beyond end of device [ 368.491877][ T4462] loop8: rw=0, want=69656, limit=40427 [ 368.513584][ T4462] attempt to access beyond end of device [ 368.513584][ T4462] loop8: rw=0, want=69664, limit=40427 [ 368.533049][ T4462] attempt to access beyond end of device [ 368.533049][ T4462] loop8: rw=0, want=69672, limit=40427 [ 368.559752][ T4462] attempt to access beyond end of device [ 368.559752][ T4462] loop8: rw=0, want=69680, limit=40427 [ 369.158577][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.874'. [ 371.371533][ T7827] loop9: detected capacity change from 0 to 128 [ 373.292327][ T4462] handle_bad_sector: 4373 callbacks suppressed [ 373.292370][ T4462] attempt to access beyond end of device [ 373.292370][ T4462] loop8: rw=524288, want=69720, limit=40427 [ 373.868301][ T4462] attempt to access beyond end of device [ 373.868301][ T4462] loop8: rw=524288, want=69728, limit=40427 [ 373.921960][ T4462] attempt to access beyond end of device [ 373.921960][ T4462] loop8: rw=524288, want=69736, limit=40427 [ 373.984413][ T4462] attempt to access beyond end of device [ 373.984413][ T4462] loop8: rw=524288, want=69744, limit=40427 [ 374.049750][ T4462] attempt to access beyond end of device [ 374.049750][ T4462] loop8: rw=524288, want=69752, limit=40427 [ 374.113578][ T4462] attempt to access beyond end of device [ 374.113578][ T4462] loop8: rw=524288, want=69760, limit=40427 [ 374.170247][ T4462] attempt to access beyond end of device [ 374.170247][ T4462] loop8: rw=524288, want=69768, limit=40427 [ 374.217606][ T4462] attempt to access beyond end of device [ 374.217606][ T4462] loop8: rw=524288, want=69776, limit=40427 [ 374.256752][ T7839] loop3: detected capacity change from 0 to 8192 [ 374.267788][ T4462] attempt to access beyond end of device [ 374.267788][ T4462] loop8: rw=524288, want=69784, limit=40427 [ 374.308978][ T4462] attempt to access beyond end of device [ 374.308978][ T4462] loop8: rw=524288, want=69792, limit=40427 [ 374.780392][ T7843] overlayfs: filesystem on './file1' not supported [ 375.111385][ T7845] netlink: 76 bytes leftover after parsing attributes in process `syz.9.883'. [ 375.666697][ T7852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.885'. [ 376.500812][ T7848] loop7: detected capacity change from 0 to 8192 [ 379.122665][ T4462] handle_bad_sector: 4092 callbacks suppressed [ 379.122685][ T4462] attempt to access beyond end of device [ 379.122685][ T4462] loop8: rw=524288, want=69640, limit=40427 [ 379.203864][ T4462] attempt to access beyond end of device [ 379.203864][ T4462] loop8: rw=524288, want=69648, limit=40427 [ 379.258821][ T4462] attempt to access beyond end of device [ 379.258821][ T4462] loop8: rw=524288, want=69656, limit=40427 [ 379.484356][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.058655][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.115829][ T4462] attempt to access beyond end of device [ 380.115829][ T4462] loop8: rw=524288, want=69664, limit=40427 [ 380.147896][ T4462] attempt to access beyond end of device [ 380.147896][ T4462] loop8: rw=524288, want=69672, limit=40427 [ 380.189510][ T4462] attempt to access beyond end of device [ 380.189510][ T4462] loop8: rw=524288, want=69680, limit=40427 [ 380.225711][ T4462] attempt to access beyond end of device [ 380.225711][ T4462] loop8: rw=524288, want=69688, limit=40427 [ 380.255569][ T4462] attempt to access beyond end of device [ 380.255569][ T4462] loop8: rw=524288, want=69696, limit=40427 [ 380.285330][ T4462] attempt to access beyond end of device [ 380.285330][ T4462] loop8: rw=524288, want=69704, limit=40427 [ 380.316316][ T4462] attempt to access beyond end of device [ 380.316316][ T4462] loop8: rw=524288, want=69712, limit=40427 [ 381.589011][ T7885] loop2: detected capacity change from 0 to 512 [ 381.667009][ T7888] loop6: detected capacity change from 0 to 16 [ 381.725772][ T7888] erofs: (device loop6): mounted with root inode @ nid 36. [ 381.732132][ T7885] EXT4-fs (loop2): orphan cleanup on readonly fs [ 381.750961][ T7885] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kfree: bg 0: block 248: padding at end of block bitmap is not set [ 381.766604][ T7888] syz.6.893[7888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.766709][ T7888] syz.6.893[7888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.784300][ T7885] Quota error (device loop2): write_blk: dquota write failed [ 381.807963][ T7885] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 381.828228][ T7885] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm kfree: Failed to acquire dquot type 1 [ 381.981194][ T7885] EXT4-fs (loop2): 1 truncate cleaned up [ 382.017815][ T7885] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 382.126309][ T7897] hub 6-0:1.0: USB hub found [ 382.131779][ T7897] hub 6-0:1.0: 1 port detected [ 382.810156][ T7885] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 382.925130][ T7898] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.895: deleted inode referenced: 12 [ 383.110896][ T7885] Quota error (device loop2): write_blk: dquota write failed [ 383.135088][ T7885] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 383.189495][ T7885] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm kfree: Failed to acquire dquot type 1 [ 383.247009][ T7885] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 383.573648][ T4173] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 383.878610][ T4173] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 384.022960][ T7913] netlink: 16 bytes leftover after parsing attributes in process `syz.6.897'. [ 384.692652][ T4462] handle_bad_sector: 13074 callbacks suppressed [ 384.692670][ T4462] attempt to access beyond end of device [ 384.692670][ T4462] loop8: rw=524288, want=71512, limit=40427 [ 385.753510][ T4462] attempt to access beyond end of device [ 385.753510][ T4462] loop8: rw=524288, want=71520, limit=40427 [ 386.323800][ T7934] hub 6-0:1.0: USB hub found [ 386.329778][ T7934] hub 6-0:1.0: 1 port detected [ 387.259657][ T4462] attempt to access beyond end of device [ 387.259657][ T4462] loop8: rw=524288, want=71528, limit=40427 [ 387.365090][ T4462] attempt to access beyond end of device [ 387.365090][ T4462] loop8: rw=524288, want=71536, limit=40427 [ 387.467823][ T4462] attempt to access beyond end of device [ 387.467823][ T4462] loop8: rw=524288, want=71544, limit=40427 [ 387.589662][ T4462] attempt to access beyond end of device [ 387.589662][ T4462] loop8: rw=524288, want=71552, limit=40427 [ 387.654047][ T7941] loop9: detected capacity change from 0 to 16 [ 387.687843][ T4462] attempt to access beyond end of device [ 387.687843][ T4462] loop8: rw=524288, want=71560, limit=40427 [ 387.759649][ T4462] attempt to access beyond end of device [ 387.759649][ T4462] loop8: rw=524288, want=71568, limit=40427 [ 387.859188][ T4250] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.869986][ T4462] attempt to access beyond end of device [ 387.869986][ T4462] loop8: rw=524288, want=71576, limit=40427 [ 387.963026][ T4462] attempt to access beyond end of device [ 387.963026][ T4462] loop8: rw=524288, want=71584, limit=40427 [ 388.364896][ T7941] erofs: (device loop9): mounted with root inode @ nid 36. [ 388.392259][ T4250] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.490403][ T7941] syz.9.907[7941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.490545][ T7941] syz.9.907[7941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.571635][ T4250] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.806912][ T4250] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.089967][ T7958] hub 6-0:1.0: USB hub found [ 389.096394][ T7958] hub 6-0:1.0: 1 port detected [ 389.783209][ T4462] handle_bad_sector: 4301 callbacks suppressed [ 389.783228][ T4462] attempt to access beyond end of device [ 389.783228][ T4462] loop8: rw=0, want=71048, limit=40427 [ 389.933577][ T4462] attempt to access beyond end of device [ 389.933577][ T4462] loop8: rw=0, want=71056, limit=40427 [ 390.015849][ T4462] attempt to access beyond end of device [ 390.015849][ T4462] loop8: rw=0, want=71064, limit=40427 [ 390.099734][ T4462] attempt to access beyond end of device [ 390.099734][ T4462] loop8: rw=0, want=71072, limit=40427 [ 390.199854][ T4462] attempt to access beyond end of device [ 390.199854][ T4462] loop8: rw=0, want=71080, limit=40427 [ 390.273832][ T7953] chnl_net:caif_netlink_parms(): no params data found [ 390.290405][ T4462] attempt to access beyond end of device [ 390.290405][ T4462] loop8: rw=0, want=71088, limit=40427 [ 390.461726][ T4462] attempt to access beyond end of device [ 390.461726][ T4462] loop8: rw=0, want=71096, limit=40427 [ 390.473170][ T4462] attempt to access beyond end of device [ 390.473170][ T4462] loop8: rw=0, want=71104, limit=40427 [ 390.518736][ T4462] attempt to access beyond end of device [ 390.518736][ T4462] loop8: rw=0, want=71112, limit=40427 [ 390.530441][ T4462] attempt to access beyond end of device [ 390.530441][ T4462] loop8: rw=0, want=71120, limit=40427 [ 391.440023][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.6.914'. [ 391.681714][ T7972] loop6: detected capacity change from 0 to 1024 [ 391.701562][ T4545] Bluetooth: hci0: command 0x0409 tx timeout [ 391.744781][ T7976] fuse: Unknown parameter 'grou00000000000000000000' [ 391.915771][ T7972] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,noinit_itable,noload,,errors=continue. Quota mode: none. [ 391.992746][ T7953] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.049640][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.108192][ T7953] device bridge_slave_0 entered promiscuous mode [ 392.203095][ T7953] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.057582][ T7953] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.130364][ T7953] device bridge_slave_1 entered promiscuous mode [ 393.322931][ T7953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.371282][ T7953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.573642][ T7953] team0: Port device team_slave_0 added [ 393.604601][ T7953] team0: Port device team_slave_1 added [ 393.719791][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 393.795321][ T7953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.803367][ T7953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.829922][ T4176] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 394.009056][ T7953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.133385][ T7953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.158609][ T7953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.245268][ T7953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.374862][ T7953] device hsr_slave_0 entered promiscuous mode [ 394.419984][ T7953] device hsr_slave_1 entered promiscuous mode [ 394.469658][ T7953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.477265][ T7953] Cannot create hsr debugfs directory [ 394.552738][ T4250] device hsr_slave_0 left promiscuous mode [ 394.565318][ T4250] device hsr_slave_1 left promiscuous mode [ 394.604993][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.609722][ T4176] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.624038][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.644894][ T4250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.659853][ T4176] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.669647][ T4250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.741018][ T4250] device veth1_macvtap left promiscuous mode [ 394.757372][ T4250] device veth0_macvtap left promiscuous mode [ 394.779800][ T4250] device veth1_vlan left promiscuous mode [ 394.785831][ T4250] device veth0_vlan left promiscuous mode [ 394.808897][ T4462] handle_bad_sector: 10922 callbacks suppressed [ 394.808917][ T4462] attempt to access beyond end of device [ 394.808917][ T4462] loop8: rw=524288, want=70096, limit=40427 [ 394.819768][ T4176] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 394.878051][ T4176] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 394.878105][ T4462] attempt to access beyond end of device [ 394.878105][ T4462] loop8: rw=524288, want=70104, limit=40427 [ 394.898312][ T4176] usb 7-1: SerialNumber: syz [ 394.939683][ T4462] attempt to access beyond end of device [ 394.939683][ T4462] loop8: rw=524288, want=70112, limit=40427 [ 394.980112][ T4462] attempt to access beyond end of device [ 394.980112][ T4462] loop8: rw=524288, want=70120, limit=40427 [ 394.990593][ T4176] usb 7-1: bad CDC descriptors [ 394.997916][ T4176] usb-storage 7-1:1.0: USB Mass Storage device detected [ 395.012201][ T4462] attempt to access beyond end of device [ 395.012201][ T4462] loop8: rw=524288, want=70128, limit=40427 [ 395.049258][ T4176] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 395.054890][ T4462] attempt to access beyond end of device [ 395.054890][ T4462] loop8: rw=524288, want=70136, limit=40427 [ 395.130870][ T4462] attempt to access beyond end of device [ 395.130870][ T4462] loop8: rw=524288, want=70144, limit=40427 [ 395.192571][ T4462] attempt to access beyond end of device [ 395.192571][ T4462] loop8: rw=524288, want=70152, limit=40427 [ 395.244267][ T4462] attempt to access beyond end of device [ 395.244267][ T4462] loop8: rw=524288, want=70160, limit=40427 [ 395.295307][ T4462] attempt to access beyond end of device [ 395.295307][ T4462] loop8: rw=524288, want=70168, limit=40427 [ 395.565311][ T4250] team0 (unregistering): Port device team_slave_1 removed [ 395.636847][ T7] usb 7-1: USB disconnect, device number 12 [ 395.640201][ T4250] team0 (unregistering): Port device team_slave_0 removed [ 395.709895][ T4250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.777524][ T4250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.799918][ T4543] Bluetooth: hci0: command 0x040f tx timeout [ 396.982034][ T4250] bond0 (unregistering): Released all slaves [ 397.065912][ T8022] loop6: detected capacity change from 0 to 2048 [ 397.531111][ T8022] loop6: p2 p3 < > p4 < p5 > [ 397.545329][ T8022] loop6: partition table partially beyond EOD, truncated [ 397.857403][ T8022] loop6: p3 start 4284289 is beyond EOD, truncated [ 397.864789][ T8026] fuse: Unknown parameter 'grou00000000000000000000' [ 397.884995][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.9.925'. [ 397.989687][ T4543] Bluetooth: hci0: command 0x0419 tx timeout [ 398.277950][ T5044] udevd[5044]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 398.752300][ T4193] udevd[4193]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 398.800853][ T4192] udevd[4192]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 398.972987][ T8040] loop3: detected capacity change from 0 to 512 [ 399.177377][ T8045] loop7: detected capacity change from 0 to 1024 [ 399.206225][ T8040] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 399.263696][ T8040] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.285739][ T8045] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 399.285739][ T8045] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 399.285739][ T8045] [ 399.340335][ T8045] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 399.388640][ T8045] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,noinit_itable,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,noacl,user_xattr,quota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 401.744102][ T26] audit: type=1326 audit(2000000205.100:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c9000169 code=0x7ffc0000 [ 401.980612][ T4462] handle_bad_sector: 9928 callbacks suppressed [ 401.980633][ T4462] attempt to access beyond end of device [ 401.980633][ T4462] loop8: rw=524288, want=71472, limit=40427 [ 402.260679][ T26] audit: type=1326 audit(2000000205.100:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c9000169 code=0x7ffc0000 [ 402.303405][ T4462] attempt to access beyond end of device [ 402.303405][ T4462] loop8: rw=524288, want=71480, limit=40427 [ 402.359634][ T4462] attempt to access beyond end of device [ 402.359634][ T4462] loop8: rw=524288, want=71488, limit=40427 [ 402.402204][ T26] audit: type=1326 audit(2000000205.130:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb3c9000169 code=0x7ffc0000 [ 402.459778][ T4462] attempt to access beyond end of device [ 402.459778][ T4462] loop8: rw=524288, want=71496, limit=40427 [ 402.497708][ T26] audit: type=1326 audit(2000000205.130:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c9000169 code=0x7ffc0000 [ 402.531404][ T26] audit: type=1326 audit(2000000205.130:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c9000169 code=0x7ffc0000 [ 402.541236][ T4462] attempt to access beyond end of device [ 402.541236][ T4462] loop8: rw=524288, want=71504, limit=40427 [ 402.553903][ T26] audit: type=1326 audit(2000000205.130:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3c9000169 code=0x7ffc0000 [ 402.589794][ T8060] loop3: detected capacity change from 0 to 1024 [ 402.596597][ T4462] attempt to access beyond end of device [ 402.596597][ T4462] loop8: rw=524288, want=71512, limit=40427 [ 402.629666][ T26] audit: type=1326 audit(2000000205.130:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c9000169 code=0x7ffc0000 [ 402.675214][ T8062] loop6: detected capacity change from 0 to 512 [ 402.677342][ T4462] attempt to access beyond end of device [ 402.677342][ T4462] loop8: rw=524288, want=71520, limit=40427 [ 402.706134][ T8060] EXT4-fs (loop3): Ignoring removed nobh option [ 402.713202][ T8060] EXT4-fs (loop3): Ignoring removed bh option [ 402.719353][ T26] audit: type=1326 audit(2000000205.130:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c9000169 code=0x7ffc0000 [ 402.743530][ T8060] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 402.755872][ T4462] attempt to access beyond end of device [ 402.755872][ T4462] loop8: rw=524288, want=71528, limit=40427 [ 402.790963][ T8062] EXT4-fs (loop6): orphan cleanup on readonly fs [ 402.805339][ T4462] attempt to access beyond end of device [ 402.805339][ T4462] loop8: rw=524288, want=71536, limit=40427 [ 402.817128][ T4462] attempt to access beyond end of device [ 402.817128][ T4462] loop8: rw=524288, want=71544, limit=40427 [ 402.819752][ T8062] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm kfree: bg 0: block 248: padding at end of block bitmap is not set [ 402.899452][ T8060] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 402.927436][ T8062] Quota error (device loop6): write_blk: dquota write failed [ 402.937272][ T8062] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 402.947937][ T8062] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm kfree: Failed to acquire dquot type 1 [ 403.048050][ T8060] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.939: Allocating blocks 497-513 which overlap fs metadata [ 403.080778][ T8062] EXT4-fs (loop6): 1 truncate cleaned up [ 403.093100][ T8062] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 403.173475][ T7953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 403.234304][ T7953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 403.255704][ T8060] EXT4-fs (loop3): pa ffff8880178c09a0: logic 128, phys. 385, len 8 [ 403.264060][ T8060] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 403.315782][ T7953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 403.392547][ T7953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.537606][ T8078] fuse: Unknown parameter 'group_i00000000000000000000' [ 403.807116][ T7953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.864881][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 403.940311][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 403.975814][ T7953] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.017047][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.077168][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.171606][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.179041][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.261336][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.316563][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.371999][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.396700][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.403816][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.586493][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 404.615925][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.636857][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 404.663566][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 404.718261][ T7953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.761091][ T7953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.815755][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 404.869972][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.631702][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.683402][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.718839][ T8097] loop9: detected capacity change from 0 to 1024 [ 405.726172][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.748364][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.798328][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.826459][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.947'. [ 405.859732][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.975360][ T8097] EXT4-fs (loop9): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 405.995765][ T8102] loop3: detected capacity change from 0 to 16 [ 406.080235][ T8102] erofs: (device loop3): mounted with root inode @ nid 36. [ 406.145524][ T8102] syz.3.950[8102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.145663][ T8102] syz.3.950[8102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.216856][ T8108] loop6: detected capacity change from 0 to 512 [ 406.284299][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.297238][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.354267][ T7953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.422364][ T8108] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 406.525750][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 406.540648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.620050][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 406.629390][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.674002][ T7953] device veth0_vlan entered promiscuous mode [ 406.775221][ T8113] loop9: detected capacity change from 0 to 512 [ 406.964567][ T8113] EXT4-fs (loop9): orphan cleanup on readonly fs [ 406.989828][ T4462] handle_bad_sector: 15653 callbacks suppressed [ 406.989847][ T4462] attempt to access beyond end of device [ 406.989847][ T4462] loop8: rw=0, want=71360, limit=40427 [ 407.007519][ T4462] attempt to access beyond end of device [ 407.007519][ T4462] loop8: rw=0, want=71368, limit=40427 [ 407.018858][ T4462] attempt to access beyond end of device [ 407.018858][ T4462] loop8: rw=0, want=71376, limit=40427 [ 407.031068][ T4462] attempt to access beyond end of device [ 407.031068][ T4462] loop8: rw=0, want=71384, limit=40427 [ 407.043268][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 407.055219][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 407.065593][ T8113] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm kfree: bg 0: block 248: padding at end of block bitmap is not set [ 407.072002][ T7953] device veth1_vlan entered promiscuous mode [ 407.087598][ T8113] Quota error (device loop9): write_blk: dquota write failed [ 407.116517][ T7953] device veth0_macvtap entered promiscuous mode [ 407.126523][ T7953] device veth1_macvtap entered promiscuous mode [ 407.143189][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.159199][ T8113] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 407.173268][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.244450][ T4462] attempt to access beyond end of device [ 407.244450][ T4462] loop8: rw=0, want=71392, limit=40427 [ 407.283750][ T4462] attempt to access beyond end of device [ 407.283750][ T4462] loop8: rw=0, want=71400, limit=40427 [ 407.299085][ T8113] EXT4-fs error (device loop9): ext4_acquire_dquot:6197: comm kfree: Failed to acquire dquot type 1 [ 407.497263][ T8113] EXT4-fs (loop9): 1 truncate cleaned up [ 407.527961][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.767896][ T4462] attempt to access beyond end of device [ 407.767896][ T4462] loop8: rw=0, want=71408, limit=40427 [ 407.789294][ T8113] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 407.809641][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.830003][ T4462] attempt to access beyond end of device [ 407.830003][ T4462] loop8: rw=0, want=71416, limit=40427 [ 407.863444][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.873981][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.919889][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.920145][ T4462] attempt to access beyond end of device [ 407.920145][ T4462] loop8: rw=0, want=71424, limit=40427 [ 407.944431][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.954884][ T8120] fuse: Unknown parameter 'group_i00000000000000000000' [ 407.979704][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.999603][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.999835][ T4462] attempt to access beyond end of device [ 407.999835][ T4462] loop8: rw=0, want=71432, limit=40427 [ 408.009438][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.009458][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.021324][ T7953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.091648][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.110989][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.139717][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 408.163605][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.221013][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.270293][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 408.302001][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.353781][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.409740][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.469744][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.482420][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.495330][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.512774][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.531867][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.543087][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.554776][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.565870][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.577645][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.596781][ T7953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.614153][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.655001][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.865401][ T7953] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.875458][ T7953] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.886387][ T7953] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.901171][ T7953] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.110478][ T8135] loop7: detected capacity change from 0 to 16 [ 409.228163][ T8135] erofs: (device loop7): mounted with root inode @ nid 36. [ 409.255947][ T8135] syz.7.962[8135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.256080][ T8135] syz.7.962[8135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.345072][ T8138] hub 6-0:1.0: USB hub found [ 409.361977][ T8138] hub 6-0:1.0: 1 port detected [ 410.073279][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.109389][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.231028][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 410.297641][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.331182][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.417477][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 410.461698][ T8144] loop9: detected capacity change from 0 to 1024 [ 410.770796][ T8144] EXT4-fs (loop9): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 411.178988][ T8137] chnl_net:caif_netlink_parms(): no params data found [ 411.614977][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.659139][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.672297][ T8170] loop9: detected capacity change from 0 to 16 [ 411.682642][ T8137] device bridge_slave_0 entered promiscuous mode [ 411.742623][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.775838][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.810696][ T8170] erofs: (device loop9): mounted with root inode @ nid 36. [ 411.854075][ T8137] device bridge_slave_1 entered promiscuous mode [ 411.885516][ T8170] syz.9.973[8170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.885648][ T8170] syz.9.973[8170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.987999][ T8173] hub 6-0:1.0: USB hub found [ 412.005008][ T8173] hub 6-0:1.0: 1 port detected [ 412.040200][ T4545] Bluetooth: hci6: command 0x0409 tx timeout [ 412.613498][ T8137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.664229][ T4462] handle_bad_sector: 8256 callbacks suppressed [ 412.664247][ T4462] attempt to access beyond end of device [ 412.664247][ T4462] loop8: rw=524288, want=69640, limit=40427 [ 412.728732][ T8137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.787159][ T4462] attempt to access beyond end of device [ 412.787159][ T4462] loop8: rw=524288, want=69648, limit=40427 [ 412.844701][ T4250] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.898674][ T4462] attempt to access beyond end of device [ 412.898674][ T4462] loop8: rw=524288, want=69656, limit=40427 [ 412.962589][ T4462] attempt to access beyond end of device [ 412.962589][ T4462] loop8: rw=524288, want=69664, limit=40427 [ 413.001206][ T8137] team0: Port device team_slave_0 added [ 413.018452][ T4462] attempt to access beyond end of device [ 413.018452][ T4462] loop8: rw=524288, want=69672, limit=40427 [ 413.064153][ T8137] team0: Port device team_slave_1 added [ 413.090652][ T4462] attempt to access beyond end of device [ 413.090652][ T4462] loop8: rw=524288, want=69680, limit=40427 [ 413.149656][ T4462] attempt to access beyond end of device [ 413.149656][ T4462] loop8: rw=524288, want=69688, limit=40427 [ 413.183519][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.200078][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.228250][ T4462] attempt to access beyond end of device [ 413.228250][ T4462] loop8: rw=524288, want=69696, limit=40427 [ 413.259205][ T4462] attempt to access beyond end of device [ 413.259205][ T4462] loop8: rw=524288, want=69704, limit=40427 [ 413.289621][ T4462] attempt to access beyond end of device [ 413.289621][ T4462] loop8: rw=524288, want=69712, limit=40427 [ 413.311312][ T8137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.388895][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.416554][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.535766][ T8137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.747656][ T8137] device hsr_slave_0 entered promiscuous mode [ 413.786298][ T8137] device hsr_slave_1 entered promiscuous mode [ 413.876126][ T8176] chnl_net:caif_netlink_parms(): no params data found [ 414.133161][ T5786] Bluetooth: hci6: command 0x041b tx timeout [ 414.142232][ T4250] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.930361][ T4176] Bluetooth: hci2: command 0x0409 tx timeout [ 415.259892][ T4250] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.315518][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.329709][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.352423][ T8176] device bridge_slave_0 entered promiscuous mode [ 415.378985][ T4250] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.430636][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.437751][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.471468][ T8176] device bridge_slave_1 entered promiscuous mode [ 415.582052][ T8176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.642865][ T8176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.668003][ T8200] syz.0.982[8200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.668149][ T8200] syz.0.982[8200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.712981][ T4250] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.846559][ T4250] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.882228][ T8176] team0: Port device team_slave_0 added [ 415.918719][ T8176] team0: Port device team_slave_1 added [ 415.960327][ T4250] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.078749][ T4250] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.159731][ T8176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.171726][ T8176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.199677][ T4176] Bluetooth: hci6: command 0x040f tx timeout [ 416.239667][ T8176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.299742][ T8176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.306952][ T8176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.387027][ T8176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.537836][ T8209] loop6: detected capacity change from 0 to 4096 [ 416.585249][ T8176] device hsr_slave_0 entered promiscuous mode [ 416.602859][ T8176] device hsr_slave_1 entered promiscuous mode [ 416.732838][ T8176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.748803][ T8176] Cannot create hsr debugfs directory [ 417.113402][ T4545] Bluetooth: hci2: command 0x041b tx timeout [ 417.314579][ T8201] chnl_net:caif_netlink_parms(): no params data found [ 417.345177][ T4250] tipc: Left network mode [ 417.669558][ T4462] handle_bad_sector: 21714 callbacks suppressed [ 417.669579][ T4462] attempt to access beyond end of device [ 417.669579][ T4462] loop8: rw=524288, want=70728, limit=40427 [ 417.747234][ T4462] attempt to access beyond end of device [ 417.747234][ T4462] loop8: rw=524288, want=70736, limit=40427 [ 417.792193][ T4462] attempt to access beyond end of device [ 417.792193][ T4462] loop8: rw=524288, want=70744, limit=40427 [ 417.804068][ T5786] Bluetooth: hci4: command 0x0409 tx timeout [ 417.817630][ T8201] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.833456][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.847442][ T4462] attempt to access beyond end of device [ 417.847442][ T4462] loop8: rw=524288, want=70752, limit=40427 [ 417.860633][ T8201] device bridge_slave_0 entered promiscuous mode [ 417.885046][ T4462] attempt to access beyond end of device [ 417.885046][ T4462] loop8: rw=524288, want=70760, limit=40427 [ 417.911486][ T8201] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.923079][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.931672][ T4462] attempt to access beyond end of device [ 417.931672][ T4462] loop8: rw=524288, want=70768, limit=40427 [ 417.951071][ T8201] device bridge_slave_1 entered promiscuous mode [ 417.967749][ T4462] attempt to access beyond end of device [ 417.967749][ T4462] loop8: rw=524288, want=70776, limit=40427 [ 418.029183][ T4462] attempt to access beyond end of device [ 418.029183][ T4462] loop8: rw=524288, want=70784, limit=40427 [ 418.077128][ T4462] attempt to access beyond end of device [ 418.077128][ T4462] loop8: rw=524288, want=70792, limit=40427 [ 418.091038][ T8201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.112561][ T4462] attempt to access beyond end of device [ 418.112561][ T4462] loop8: rw=524288, want=70800, limit=40427 [ 418.131886][ T8201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.223774][ T8201] team0: Port device team_slave_0 added [ 418.255451][ T8201] team0: Port device team_slave_1 added [ 418.279954][ T5063] Bluetooth: hci6: command 0x0419 tx timeout [ 418.345374][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.366874][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.447701][ T8201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.570769][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.581247][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.636472][ T8201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.881241][ T8201] device hsr_slave_0 entered promiscuous mode [ 418.899465][ T8201] device hsr_slave_1 entered promiscuous mode [ 418.908986][ T8201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.171551][ T5063] Bluetooth: hci2: command 0x040f tx timeout [ 419.272246][ T8201] Cannot create hsr debugfs directory [ 419.890144][ T5786] Bluetooth: hci4: command 0x041b tx timeout [ 420.027053][ T8137] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.057222][ T8137] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.091034][ T8137] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 420.123301][ T8137] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 420.336325][ T8201] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.368473][ T8176] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 420.397801][ T8176] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 420.452543][ T8176] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 420.499929][ T8176] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 420.576884][ T8201] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.837754][ T8201] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.892478][ T8137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.982602][ T8201] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.065446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 421.089277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.166155][ T8137] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.232892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 421.249746][ T5063] Bluetooth: hci2: command 0x0419 tx timeout [ 421.255159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 421.293399][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.300606][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.338455][ T8176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.376831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 421.405109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 421.420746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.452300][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.459453][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.506796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 421.535119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 421.562282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 421.593647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.683516][ T8176] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.728037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.752473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 421.771213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.800474][ T27] INFO: task syz-executor:6428 blocked for more than 145 seconds. [ 421.808327][ T27] Not tainted 5.15.179-syzkaller #0 [ 421.821258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 421.839604][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 421.843689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.901283][ T27] task:syz-executor state:D stack:20184 pid: 6428 ppid: 1 flags:0x00004004 [ 421.960725][ T4176] Bluetooth: hci4: command 0x040f tx timeout [ 421.969856][ T27] Call Trace: [ 421.973154][ T27] [ 421.976101][ T27] __schedule+0x12c4/0x45b0 [ 422.009757][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 422.030760][ T27] ? print_irqtrace_events+0x210/0x210 [ 422.036302][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 422.049573][ T27] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 422.055586][ T27] ? release_firmware_map_entry+0x190/0x190 [ 422.069568][ T27] ? __might_sleep+0xc0/0xc0 [ 422.074246][ T27] ? prepare_to_wait_event+0x3aa/0x3e0 [ 422.089576][ T27] schedule+0x11b/0x1f0 [ 422.093836][ T27] wb_wait_for_completion+0x164/0x290 [ 422.099229][ T27] ? __bpf_trace_writeback_inode_template+0x20/0x20 [ 422.115234][ T27] ? init_wait_entry+0xd0/0xd0 [ 422.129585][ T27] __writeback_inodes_sb_nr+0x2ce/0x370 [ 422.135229][ T27] ? writeback_inodes_sb_nr+0x30/0x30 [ 422.149570][ T27] ? cpumask_next+0xc3/0xf0 [ 422.154133][ T27] ? get_nr_dirty_inodes+0x25f/0x2e0 [ 422.159430][ T27] sync_filesystem+0xa0/0x220 [ 422.180658][ T27] generic_shutdown_super+0x6b/0x310 [ 422.185980][ T27] kill_block_super+0x7a/0xe0 [ 422.227952][ T27] kill_f2fs_super+0x2ff/0x3c0 [ 422.232906][ T27] ? f2fs_mount+0x40/0x40 [ 422.237270][ T27] ? unregister_shrinker+0x266/0x320 [ 422.268924][ T27] ? unregister_shrinker+0x266/0x320 [ 422.280361][ T27] deactivate_locked_super+0xa0/0x110 [ 422.290022][ T27] cleanup_mnt+0x44e/0x500 [ 422.294459][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 422.311373][ T27] task_work_run+0x129/0x1a0 [ 422.319649][ T27] exit_to_user_mode_loop+0x106/0x130 [ 422.325532][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 422.347553][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 422.360983][ T27] do_syscall_64+0x47/0xb0 [ 422.365622][ T27] ? clear_bhb_loop+0x15/0x70 [ 422.379563][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 422.385545][ T27] RIP: 0033:0x7fdbd66fe497 [ 422.399580][ T27] RSP: 002b:00007ffdf7890ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 422.408058][ T27] RAX: 0000000000000000 RBX: 00007fdbd677e08c RCX: 00007fdbd66fe497 [ 422.416501][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf7890f60 [ 422.425356][ T27] RBP: 00007ffdf7890f60 R08: 0000000000000000 R09: 0000000000000000 [ 422.433741][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf7891ff0 [ 422.469556][ T27] R13: 00007fdbd677e08c R14: 000000000004325e R15: 00007ffdf7892030 [ 422.477582][ T27] [ 422.501537][ T27] [ 422.501537][ T27] Showing all locks held in the system: [ 422.517213][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 422.529876][ T27] 3 locks held by kworker/u4:0/9: [ 422.534921][ T27] 1 lock held by khungtaskd/27: [ 422.551536][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 422.579593][ T27] #0: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 422.580355][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 422.589060][ T27] 2 locks held by getty/3924: [ 422.619633][ T27] #0: ffff88807ec28098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 422.620537][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 422.659661][ T27] #1: ffffc900025ae2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 422.679588][ T4462] handle_bad_sector: 27741 callbacks suppressed [ 422.679607][ T4462] attempt to access beyond end of device [ 422.679607][ T4462] loop8: rw=524288, want=70688, limit=40427 [ 422.699107][ T27] 3 locks held by kworker/1:3/4176: [ 422.706270][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 422.727149][ T27] #1: ffffc90002f2fd20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 422.739222][ T4462] attempt to access beyond end of device [ 422.739222][ T4462] loop8: rw=524288, want=70696, limit=40427 [ 422.750998][ T27] #2: ffffffff8cb23aa8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 422.762537][ T4462] attempt to access beyond end of device [ 422.762537][ T4462] loop8: rw=524288, want=70704, limit=40427 [ 422.774458][ T27] 7 locks held by kworker/u4:5/4250: [ 422.780105][ T4462] attempt to access beyond end of device [ 422.780105][ T4462] loop8: rw=524288, want=70712, limit=40427 [ 422.791854][ T27] #0: ffff8880175cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 422.802515][ T4462] attempt to access beyond end of device [ 422.802515][ T4462] loop8: rw=524288, want=70720, limit=40427 [ 422.814239][ T27] #1: ffffc9000328fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 422.825582][ T27] #2: ffffffff8dc37e10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x166/0xc90 [ 422.836011][ T4462] attempt to access beyond end of device [ 422.836011][ T4462] loop8: rw=524288, want=70728, limit=40427 [ 422.848010][ T27] #3: ffffffff8dc43ac8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x4d/0x220 [ 422.858224][ T4462] attempt to access beyond end of device [ 422.858224][ T4462] loop8: rw=524288, want=70736, limit=40427 [ 422.870225][ T27] #4: ffff888054e68628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_netdev_notifier_call+0x4d4/0x1210 [ 422.881731][ T4462] attempt to access beyond end of device [ 422.881731][ T4462] loop8: rw=524288, want=70744, limit=40427 [ 422.893476][ T27] #5: ffff8880520acd40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_netdev_notifier_call+0x4e2/0x1210 [ 422.904396][ T4462] attempt to access beyond end of device [ 422.904396][ T4462] loop8: rw=524288, want=70752, limit=40427 [ 422.916192][ T27] #6: ffff888054e697b0 (&local->sta_mtx){+.+.}-{3:3}, at: __sta_info_flush+0x183/0x4d0 [ 422.926355][ T4462] attempt to access beyond end of device [ 422.926355][ T4462] loop8: rw=524288, want=70760, limit=40427 [ 422.943192][ T27] 2 locks held by kworker/u4:6/4265: [ 422.948486][ T27] 4 locks held by kworker/u4:10/4462: [ 422.959565][ T27] 3 locks held by kworker/1:9/4545: [ 422.964768][ T27] #0: ffff88802ba97938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 422.999661][ T27] #1: ffffc9000332fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 423.019595][ T27] #2: ffffffff8dc43ac8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd8/0x16f0 [ 423.029031][ T27] 3 locks held by kworker/0:10/4920: [ 423.049553][ T27] #0: ffff88802ba97938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 423.080116][ T27] #1: ffffc9000412fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 423.099535][ T27] #2: ffffffff8dc43ac8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd8/0x16f0 [ 423.108977][ T27] 2 locks held by kworker/0:11/4921: [ 423.129606][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 423.149546][ T27] #1: ffffc9000150fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 423.180819][ T27] 2 locks held by kworker/1:10/5063: [ 423.186127][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 423.209576][ T27] #1: ffffc9000331fd20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 423.239760][ T27] 1 lock held by syz-executor/6428: [ 423.245724][ T27] #0: ffff888069bcc0e0 (&type->s_umount_key#53){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 423.269576][ T27] 1 lock held by syz.1.722/7295: [ 423.274540][ T27] #0: ffff888069bcc0e0 (&type->s_umount_key#53){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 423.300789][ T27] 1 lock held by syz-executor/8176: [ 423.306131][ T27] #0: ffffffff8cb23aa8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 423.329609][ T27] 6 locks held by syz-executor/8201: [ 423.334909][ T27] #0: ffff88807edc2460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 423.359569][ T27] #1: ffff88801a587c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 423.369370][ T27] #2: ffff88814795c748 (kn->active#294){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 423.399614][ T27] #3: ffffffff8d584148 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b0/0x910 [ 423.429567][ T27] #4: ffff888063799178 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 423.438841][ T27] #5: ffffffff8dc43ac8 (rtnl_mutex){+.+.}-{3:3}, at: devlink_nl_port_fill+0x2ab/0x910 [ 423.469610][ T27] 6 locks held by syz.6.989/8229: [ 423.474679][ T27] 3 locks held by syz.0.992/8236: [ 423.489575][ T27] #0: ffff888072610ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 423.499396][ T27] #1: ffff888072610078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 423.520836][ T27] #2: ffffffff8dd8e588 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 423.540407][ T27] [ 423.542748][ T27] ============================================= [ 423.542748][ T27] [ 423.622547][ T27] NMI backtrace for cpu 1 [ 423.626912][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0 [ 423.634895][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 423.644957][ T27] Call Trace: [ 423.648241][ T27] [ 423.651177][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 423.655874][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 423.661525][ T27] ? panic+0x860/0x860 [ 423.665607][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 423.670730][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 423.675676][ T27] ? __wake_up_klogd+0xd5/0x100 [ 423.680537][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 423.686698][ T27] ? _printk+0xd1/0x120 [ 423.690859][ T27] ? panic+0x860/0x860 [ 423.694933][ T27] ? __wake_up_klogd+0xcc/0x100 [ 423.699790][ T27] ? panic+0x860/0x860 [ 423.703871][ T27] ? __rcu_read_unlock+0x92/0x100 [ 423.708913][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 423.714994][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 423.720994][ T27] watchdog+0xe72/0xeb0 [ 423.725170][ T27] kthread+0x3f6/0x4f0 [ 423.729247][ T27] ? hungtask_pm_notify+0x50/0x50 [ 423.734279][ T27] ? kthread_blkcg+0xd0/0xd0 [ 423.738879][ T27] ret_from_fork+0x1f/0x30 [ 423.743321][ T27] [ 423.747809][ T27] Sending NMI from CPU 1 to CPUs 0: [ 423.753362][ C0] NMI backtrace for cpu 0 [ 423.753373][ C0] CPU: 0 PID: 4509 Comm: kworker/u4:13 Not tainted 5.15.179-syzkaller #0 [ 423.753390][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 423.753400][ C0] Workqueue: phy24 ieee80211_iface_work [ 423.753420][ C0] RIP: 0010:memset_erms+0xb/0x10 [ 423.753439][ C0] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 423.753452][ C0] RSP: 0018:ffffc900033ff568 EFLAGS: 00000203 [ 423.753465][ C0] RAX: 00000000000000fc RBX: 0000000000000248 RCX: 0000000000000000 [ 423.753476][ C0] RDX: 0000000000000037 RSI: 00000000000000fc RDI: ffffed100f51c880 [ 423.753487][ C0] RBP: ffffc900033ff790 R08: dffffc0000000000 R09: ffffed100f51c849 [ 423.753500][ C0] R10: 0000000000000006 R11: ffff888026ef1dc0 R12: ffff88807a8e4000 [ 423.753511][ C0] R13: ffff888017441dc0 R14: 0000000000000b20 R15: ffff888017441dc0 [ 423.753523][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 423.753537][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.753548][ C0] CR2: 00002000001f7000 CR3: 000000006485c000 CR4: 00000000003506f0 [ 423.753563][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 423.753572][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 423.753582][ C0] Call Trace: [ 423.753586][ C0] [ 423.753592][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 423.753609][ C0] ? read_lock_is_recursive+0x10/0x10 [ 423.753628][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 423.753645][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 423.753671][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 423.753688][ C0] ? nmi_handle+0xf7/0x370 [ 423.753706][ C0] ? memset_erms+0xb/0x10 [ 423.753721][ C0] ? default_do_nmi+0x62/0x150 [ 423.753746][ C0] ? exc_nmi+0xa8/0x100 [ 423.753762][ C0] ? end_repeat_nmi+0x16/0x31 [ 423.753785][ C0] ? memset_erms+0xb/0x10 [ 423.753801][ C0] ? memset_erms+0xb/0x10 [ 423.753818][ C0] ? memset_erms+0xb/0x10 [ 423.753834][ C0] [ 423.753838][ C0] [ 423.753842][ C0] ____kasan_kmalloc+0x78/0xf0 [ 423.753864][ C0] ? mark_lock+0x98/0x340 [ 423.753882][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 423.753914][ C0] ? slab_post_alloc_hook+0x73/0x380 [ 423.753936][ C0] __kmalloc+0x168/0x300 [ 423.753951][ C0] ? ieee802_11_parse_elems_crc+0xb3/0x1130 [ 423.753974][ C0] ieee802_11_parse_elems_crc+0xb3/0x1130 [ 423.753994][ C0] ? __mutex_lock_common+0x444/0x25a0 [ 423.754016][ C0] ? mark_lock+0x98/0x340 [ 423.754032][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 423.754047][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 423.754069][ C0] ? ieee80211_queue_delayed_work+0x160/0x160 [ 423.754087][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 423.754107][ C0] ieee80211_ibss_rx_queued_mgmt+0x380/0x2af0 [ 423.754129][ C0] ? mark_lock+0x98/0x340 [ 423.754146][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 423.754164][ C0] ? print_irqtrace_events+0x210/0x210 [ 423.754184][ C0] ? ieee80211_ibss_rx_no_sta+0x720/0x720 [ 423.754202][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 423.754218][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 423.754238][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 423.754253][ C0] ? _raw_spin_unlock+0x40/0x40 [ 423.754270][ C0] ? kcov_remote_start+0x6f/0x480 [ 423.754290][ C0] ? kcov_remote_start+0xf2/0x480 [ 423.754309][ C0] ieee80211_iface_work+0x78f/0xcc0 [ 423.754330][ C0] process_one_work+0x8a1/0x10c0 [ 423.754357][ C0] ? worker_detach_from_pool+0x260/0x260 [ 423.754376][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 423.754392][ C0] ? kthread_data+0x4e/0xc0 [ 423.754407][ C0] ? wq_worker_running+0x97/0x170 [ 423.754424][ C0] worker_thread+0xaca/0x1280 [ 423.754454][ C0] kthread+0x3f6/0x4f0 [ 423.754469][ C0] ? rcu_lock_release+0x20/0x20 [ 423.754487][ C0] ? kthread_blkcg+0xd0/0xd0 [ 423.754503][ C0] ret_from_fork+0x1f/0x30 [ 423.754527][ C0] [ 424.170189][ T5786] Bluetooth: hci4: command 0x0419 tx timeout [ 424.270883][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 424.277760][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0 [ 424.285749][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 424.295819][ T27] Call Trace: [ 424.299108][ T27] [ 424.302047][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 424.306744][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 424.312389][ T27] ? panic+0x860/0x860 [ 424.316479][ T27] panic+0x318/0x860 [ 424.320380][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 424.326025][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 424.332203][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 424.337416][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 424.343495][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 424.349654][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 424.355823][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 424.361989][ T27] watchdog+0xeb0/0xeb0 [ 424.366170][ T27] kthread+0x3f6/0x4f0 [ 424.370253][ T27] ? hungtask_pm_notify+0x50/0x50 [ 424.375295][ T27] ? kthread_blkcg+0xd0/0xd0 [ 424.379898][ T27] ret_from_fork+0x1f/0x30 [ 424.384341][ T27] [ 424.387668][ T27] Kernel Offset: disabled [ 424.392001][ T27] Rebooting in 86400 seconds..