last executing test programs: 14m3.271077158s ago: executing program 32 (id=165): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 12m55.796331963s ago: executing program 33 (id=468): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d77696e39352c696f636861727365743d63703836392c757466383d302c696f636861727365743d63703836362c696f636861727365743d63703733372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c636f6465706167653d3836312c756e695f786c6174653d312c757466383d302c73686f72746e616d653d77696e39352c726f6469722c696f636861727365743d6d61637475726b6973682c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c00e1d625f10b9ee0a39b75b922489840691b55fdd962d869c07e5720a738d425cd66a3c97ccd3f631568b5d6c3"], 0x6, 0x2d5, &(0x7f0000000980)="$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") socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 10m16.764785079s ago: executing program 2 (id=1345): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000000)={0xffffffffffffffff, 0x20ff, {0x0, 0x0, 0x0, 0x80000000, 0xc, 0x0, 0x3, 0x14, 0x10, "f753f31c9be57f78bd9f64fbb301de8914e6d28814a3986d8341fd518c3f7a31148a9b663b6d078296d3c583cf99f8e1872d9e65962abeb6b7ff14f7bd714924", "dd43e7f13cbe11f479fc8e298091c67f6c77b257ed4be05e5c868bbcfe521f0e49f9908a23b77db46220a85eb90b475c4cbc66af174579d78ce77e80ff156221", "c1f51f7cedfcc624d68a69e314494fa585371a94a785cb62dce711169c9e1040", [0x0, 0xfffffffffffff711]}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000e3002400028014000180080001000000000008000200b61e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x8c8) 10m16.498906514s ago: executing program 2 (id=1350): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/183, 0xb7}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 10m15.007178406s ago: executing program 2 (id=1357): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080004400000000330000000030a010100000000000000000500000a0900030073797a310000000008000b400000000208000a4000000001b01a00000c0a010200000000000000000100000a080004400000000194040380900400800800034000000003340007800a0001007175657565000000240002800600014000fc0000060001400006000006000140000800000600024000050000880001808400010097f8cb7896ea475c8d2c4535d8c65ff7ad0b5b3a50043a8dd63319305db6a6571150533dcf15d8e5e5428e74af599d5b51844b6f33f8a19d36b13ea57d7a202f52709857361e44f932bcb4f321df6223155b50538a2a63a2d188a2fb19903ec947ab74645265691b04295d2783a90f4a808ec910e34aeaa5446b5d608bc1c9ac0c00054000000400000000000900090073797a3000000000a0030b80680301800e000100696d6d6564696174650000005403028024000280200002800900020073797a3000000000080003400000000308000180fffffffb2c030280d0000100cbbf9ca57781ba8af1d91b2174ee264a7215ca7bfa91398ee0997ac9551784ba7526ede5eb28e6262ba4dbaa4832c46f810ca32224c5ce81f3b48ecc83ac8a6044ee53c17db9760e88b4481fbc622ce3e0d7dd20df4429312285d710998afc49a6b9b5974eb687b7d65d4e8de95a18ecce5d93562b9c815ee949b9d9557403743fb500f9d5f4b2f4ec55289c2b7b0a130251dc4be522c4e82ee59725b8a95b80224b37a0ca3f98c4d31ecb37466b5efaac3e848c17d62fff2ddd8c2d8109018e58fb70d20340b99cee1d41c2100002800900020073797a31000000000001010073f58b808015d5975f1e2cd4616cab823137268aa0d769c822cd12fed53bfc328c9427813570bd38067e65e955a88c6ab129b22549860875d50ce2c698761c30fe7af55d8f44c0b9961e822f124282393d85fc3e5e5dc4ac7a631cdbf6088f086b88607abfb99b70adcf28509e28914b4f5f2d3ef39b50283bbef7feab9885d2b0f8e4d193180d8cbd5e79ad9583d4e8d1e1914414b86290fea96395671c471eb60596bde245bf025941dd65fa7f77910270150bbc35380ff7f6c9cc75844ef414c16651708f7e2281bde923e0dcf0f25f08ad960df97f51d027f53f1be56f1e74158137df92811300c630cd5a7f61d79db501a22b8fadaf7780bbdaec000100bf20a688cdb0f73886eb68fda6d850fe1fee22529d789378af6a9ea81820e6849c90a5a401c7efa577214956c9c6426fde11277adc1a99923f2e964011f727ef664b9251b97041bd273894abb2afab9152f2caf1ff7fefcdd3c9e1b45102cafb8c2563e97cd83c8159ab5458886668708d4ec72d34c50e63438092101b2a59872cf9fd8f41c8aaf549e8d7c7b9f9c0d64257e75e94071df7ed5946104c2aff559b076b019e4db9e4cf8f3a42c790507b7518ca8568e4c827c3d119884cfa3e8dd059f910f6b5c96e055181bea30b5641a446294eb05d66aaee0ba9b8ec897d5c515450c390cd07585c000100788d024f9472e9acb0822419171458b64ca12a41582c8882a32a75a830f3ddb85524fbc17182d3b2d2bb21b5d0ff235e81ac7e423a5af267b72c3c838969e05e8b457e49ce2a30189e1fa4a5ffd5844acf43fe370c984cdf340001800b00010074756e6e656c00002400028008000340000000000800014000000000080002400000000c0800014000000000100007800a000100696e6e657200000018150380f812008029000640f8b874b533d19ca8172b26a026ff9cc94a89affc94f96430ad19b0d5c0c697c94a3219b0f50000000c000540000000000000000830010b8034000180090001006d6574610000000024000280080003400000001508000140000000030800034000000017080003400000000110000180090001006d657461000000004c00018011000100666c6f775f6f66666c6f616400000000340002800900010073797a31000000000900010073797a30000000000900010073797a32000000000900010073797a3000000000100001800b00010064796e736574000020000180080001006f7366001400028008000140000000160800014000000014200001800c000100636f756e74657200100002800900024000000000000000041800018011000100666c6f775f6f66666c6f6164000000000c00018008000100667764001800018008000100667764000c000280080003400000000a100001800a00010071756f746100000008100a8004100100fcc4508d12a3a34ac7a8fec39b2706f8f96a08b4eecb14853b22f7e2e008ea9b0a81151e1f2fb3a3a7febd62062b0479f7720a7215d62d238665c9533612e227bda94479a400512a4693fa96f43ef865a8399e95daa89f1306160b68ab000d7346fb2887af75d9a4d327166afd393e6ab05f01a7e589e4e8f7baa5f66d4604ee7ebe77a9d08a3e331e029fba024d0bff5fc789b97e4a70dfb984934fcd87b31b6d7808c2db5101e3765c11d0c4fbedb303e704137d18f9c32a123f564f3bebeed5bf5fed4c900741a71995c618db10082953866a318877a6a2075f8f170ccf4813d010a9beac396286205055021632c0e8c3719e0afbe6118210adb28a7afb52fbb1edbbddffafa65876b3cd1c0a8d10d60c476c353848d95c9aaf9e4cfac4229a2ea096ea7106060b681fc4947faf3a1b396866a9342a43956abd42c7426f78c6909c29ede22a39d1fce4cf574de76fe39f0938715c75065e172fa2ad1f65998ca8d667df64589ca8ff7b3b16c5b1e3340ded2fe31258ad7b82e350b4bbaff02f9fbac55b30a87e3a248d7a465761d6957009ea57e35507593cb58080209145a35cfe1f09b261ed4b05af102f5af2654607e97b9b228192b9d83f5a6f1188d091d0b458e4c1ebded53e0ac3b7136b856b6d4bcce82ae5475db4efa7e92f43193ada9b7cb46c380931132046dfe4fca09333f500ade7e7d24c2cfbb7f8acd766f94eda1280f520c56dfaaa06c99cbadc0b69122bc6411b71612f5c0cfe91bf55b769d111a9da0cee440879dd8837391e5834c3cdabe4bf187d77b903e4afa858e2c60ff31aa96ad740909fe49111c31e459d21e334332c1bdc14a73caf5cdbcbc9b4185f03955cc433f4ea94bea0e25c440160bb64492bb22186863588576a00a8648ce4a2ee846e83a9a56ab57d0fe60212c7786e9fa94c7f8b4ed40e40ed55148ed5b123f57930b0f950bb968b883d45b0d0451a313a116224a9833845c5f09f847299da9cca671b9ec137151408f61696be33175c6abb68147229c556ce6dd3766dab9371e46391cd94a92b7c7e11a1eef608f5bd2e145a32f796a3f0b4c09b80e7f9e8b1fb64ea45ef26ca380227a2e43cb0d1dfe36c55743b52205f62d2b81b723c7f4dab4cf9d9d5fe145e21d66286b2e5e2b983ca9a7d6afffed88d3c348af4ab911c83ca1364883c13916133d3dd190ba4076547d6ef36f85a45dfdf28d3aef7f07ca0625324ed04d65efb28c58ed7b38da32b473639fbf6fddd6476dbf33b7cf5cdb0d5e74cc91ba0469a324317dd53753e187251ade277679a4d6733e981aa1777d81aa9f492acec3ee29b757a27615af95d59950895f8bb11c79e02f7930452ad230df4f1ae448b32c225048cb456ac334a46e9ffee75f3c4053895d15c1a63c0dba4e0f68fb980262c63dddc60c48ee9783e9f464d14c9bcc1226da00dffbb56aa7a190a4326f19556fbc884fc821c6944b43d29a05f37530894f7573c2171bdbeb8ab6038f2658be4cd3f04e85a6764940801e980be2e58775bb1fd0367511ac3b4debbc449e4fa7820702a8ba29378efcff70f1c81e8ebf85a81aef09900c5ccd24281f600941521ea483bfe75380bed0191b031eb9695b4b29296a0808d9a91704faf17832d36fcbdab9ec1e760b5e62d4ca14fadcb499f7cf8520bf7fde0165803f09274882ab8920555cdb5de4493b42e51314109c709ac508ed92af7b7be904d7f9d53989d6d0b9f63b2f84e7e6045937a27369cf6336a8a9171564431a1cdef8f6aa3f302ab074a5c4acbb90d0d5b302eca9dfa6e7b41f1b38e84ba08192837ef02e49f51f907d33ee62830f6680d9ec38d7b6cb686f57f3b1ed71fe6d16052fe60b6743f491f2bb68a547edc7826cd1e89fd4834f8b743adaf7bcb4bc726d69592ab3bac69194aa706f824802f1de6d652673a99bb14a1572373548eddd915e735e6b9ea139a3fbe5fc179e33222477dd3165ff6e7da06ba777dc2e458e7da66af454ab76c1639447c823a11642ceebaaf155bba733147a0495204e480fa92d5dd633e2c7c735a115eaffe6228ec4839e9edb96809e165b34dbe317ea6e6d81c5507a005efcf3a274166ce23fef4c948769a31fd1449ffdbdfa8c5fe5447915c96c77d3628768267e4e7945ca3f37bd206d13e4069def1cc0762439227b650c2dbb6dbdd09f1bb1915e87e1761af31cde7bdf667f0fcfe674239d554035cfe4c0718ae2edb8a813391cb0a692dba5f4174547b7977dff187d0ee145a81591d5cd809247597d694a4723e644489676d23aa5b67fccfd7b957a7c24fcffa482729fc43fd909484999dd93fdd98421a03b6466c39c17e0af17ce0d17e379cdd827f6f39a144c327deee15dfe257ed59d05b25dd9ec1131e143caccd9dfdc543e7b2049310d4dbe35bd242ddcbf3b47709ae56c54e3687fe214aab5f75cb346a6e3f3a7d02db53521c642886c91f8038970a08eb9d54b78266daa8cf0060934ea4e1cca4d12ebabfe7c1c2405dac2ca1e8e10a61111cb321c98d5ee1c7aab5a6e30d468ffcf7d36e34be82e5a6d64656078103e57ee5895a7f94440c9f3ca8ae2fcf21805b6373905fb15f90b7359996d62683a30fe298661bf389d5fcac371c49cae567562680c23b3b528afc21b5b188e8f9d277a0b6898922282c467e6dc1566f084aad6104a2159f7fd8b8b7dd980cb4a568fa838613bfb774f926aef89519646cbaac83e1aac17cd05fadf75e69fc0b7db86d99fc07d48e6ae02ba97dc3ef6306608908db5dc51a34d04dcc1bac193a193e2ccbe87c3a7f46966ba9cdca5e3f9510b061d1c6bd810c2543a7ed7be741559974eab5590d94e2eb6a21065b9f465052a20a6af1c7e25de2e0658d810954f6275f445f025f3113c624dea6be77c544498d8d900d33273d5d44ef97fee0cdfa00f705d83922817cb4644dbd1f725d89a4ea6eb4c381c0fb132f9e3072f7a569537d6fad726b3e59258f0c7d2bf36ced01d937591acd00da1e32a09fb2ef509c23a8c005718f439e961c23d80574639fd5af819171a39e0ba744a72d9f8f3e2cfeb19e5d030958d8552cbb13dce513cd5496d60d084750837f62536958d68db8e8332462d231916be4ba2e507cc5d415a12d057090ab46ccce24b510eae799bf6e5d59df94b56ddd84a0481543d6167d16cfc150811a14be242faec4d080a5abcfd12e6cc3429d528a5ddf8570fb577bf6dd381294482274c442577bd6b6c423ee14b52894189d93fae0a6a975340de806fc3a27bad4a20edfb9d855af6dcd8b9280158bb158de86b228785a053d1a4afddb4a58f59d4b0746d3e48554297a4827f8a2f01a9e2990fc73c2edd553c3493a81382f95332d7eb7d1bbad650cfecefe1e8c5822a82ce1a1c9e84783c035df981a7b2e39301129456c627adf8778491dbb38db1005e7aaabe3ec565c6eb0bf8862242fbcb469e9908ac652ea0269b7dc362f3c29fbd1267f2c9970b223bbf50e0eb3e79e0e841b67056fe0d964bfa68c42e38ef9b3d473124c9277675aefe36ccf62fbf5343545953b7de121f87c7f779a55d40f398f0de5d32743dd34ed5f5852b3d92d3f12fdff82bc49817c780fe890d93fe622b2039f6ec01b6b39bd25adf6ef13ee996243fdc6fc53c3af4d4c15d2e4b6623a1b387a8886a3b4ee02dd3bf451db48326404c95a16f4414792b4bfe791a4658980367268da40249a7accea316393b7fdfb0c71610044f62949eba87ee03a8fc647f4a3957879242b50475c8cae9a8b4ae589269161e62850bb36d79ef2b551bbadc68d932a82ec3d101c338c6ffc5dd100fada4a145e4e01d7033df70f969afb0e8e799d07f24657ef6a9014904a0a29d6f05920cc4c5f02bfdf9dcf142576e1ad1b388bdd75543d0394560ed3543297be7bb8ba7a3106a586ed940b2d65054e0d8a72514f59c634c5d1154da85e1b60bc0e70393c801a6bedd5927cb4860abfabf7b72ed3380e56911a3cee016aeb2def8127557fab0204f82b8206d684c85b76e6e445db3f2ad92c641bd62366d076f83f68284d5723599ad1af6a60141ee685ef62a9df87f099c28991f7f925ed88fe4479cae4c1f6e9bd68e1a059e2c02bacf5ec170b7578041150e8e2a69b0f31d526ae7ceb27e7f2b7e3c771185ff26ad098b29eeb6624429bb81121f6e7529cc3f49a72187fab67853715d57c8a9a8661fd6e9d37e9b1124b11857527a4cac879c660344b6dfe4425ee881d6db2f2370b78b941674f0c95e257f919fe4d56880af2879a05bdfccc86214f8eeae45a19426a5fa411d69fb6640f4fb93ae91a6e389e1538a4395b30eba207458ad159ed873c3b0aa9efa3d660fce4466452958fda13fc270fac9ccefd1e5c207dfa1dc0a102cebacce605f1e865fbe402ccb8fda10c226126fc37a658a4fe71aa32a05f84de138f6b2a8b11b8f32463438e5430e485711ef2610368a8ab1a6b37e048a08b9db23ae54feab40e6a5fd0b3477c236eaabce86bcf24c6502623cd9908d52b6a4faf341f9f16ead0f2d8194d6092576f9af2c9932daeb6f65aa0a2c65c71d2d3355c74b23d1926347069786934879692d35e6ee22e13fbfef49065afb66b11bd1d5bd8ae6f994f8b827a36b8f9fcd8c031091a288fa0c7cbb9f5ecce4f09034e9885b21cf2fa0de9baadbf8b47b65b141db474035fd876baa2075f50d5e529fdb13b1c2aea904b9a7cb7988f94fb2fdde05c075609f262b5fecbf86bda3442aa129eda9c64e9a063532d2f75af92dc3c59bc48ebd28c8cdf7d71294a071ac688135d71baed31fd776ef2a7cfc6935d6ef5174f10869679e74b70d8e94e4d00279bb4455701b89583e5991bd6220e3821b3f232e6e854e3e0917135547ca3f20953ef972895a8512b6cfc46336a7ece6ad278fc8c43f9b1bc805c382e6b471746d143d25083c6704088519ac8b3e46f5b295f348b7fea6ae45a32254ce6d73601bfe841386b9946009562503253f39296ab63cd7173d0f5814cd23c80dddbebd421ebccf7e80a9e31c8598044fe8f2a4a25ce185882baec5eb47223883f172e031a9e5eef5ee5868a292fb639229a244a82cb06a89621c457639ed4baaf17c946c1623f3532ada49899316fc1b3e21714cfc8d5469bfdce1e8a89f19b2f36ac13647653649d4c01aa161d1d9f7fb47c7829b41a99aaffc03eb35cf675cc91d42b7edd281324c2c3f1f4cfb5b4df051616f4e3af3af06dbf18ebda3c49dc7573010d7a44fe2cb416945f3b01f62adda779d4ca03ac7e62e3271854b2a4e0e4a0c7839b2b9db8f0363353ec6f1c5bf4897a11536f0dca87e690105d3542ede5c40ad74ccede476855390921824b70b3703ed6ea5391e8a0b8e6177f33420a6c40f32802d368633c64233002c996207fa14846f4be02545cbcdc4bee8df0ad76f95ed2bc61ebb7f09c1a71b0701818a5c7e46f2c5c7c4a3793f62378bb38b459531d475b8c37b2b14954f82a6a8eaf9ce61850c5b1d7bbe5ca9693a61a2a6e726d5fca2bdcf2fa0f002df7014393a28e8782f88d73049fba77ec3b61b89a56174411735991faf6b256ca311611f440c4fdae60c0883bb2ff5f27db943209e10f7ac5a8d01f09f7385892a578b9baba05c07a1cd302585c9d6e04c65cb370e8d1ad6e0d3139f8c4cd7269be913cfe14b9cdee1483c3c751fe4737ebe96f54b577caac8949752300fc6dcee5f33dc7b3233a41aec95621cedf90ebe25b4cee48b7e7dbbda5552509e5c8000b80100001800a00010072616e6765000000140001800e000100627974656f7264657200000010000180090001006d61737100000000100001800b0001006e756d67656e0000100001800a00010072616e6765000000640001800a00010071756f7461000000540002800c000440000000000000000108000240000000010800024000000002080002400000000208000240000000030c00014000000000000000060c00044000000000000000060c00014000000000000000000c0001800800010066776400b0000b801c0001800b00010065787468647200000c00028008000440000000fb2800018008000100666962001c00028008000340000000040800024000000002080003400000000c20000180080001006475700014000280080002400000000c0800024000000017100001800b00010074756e6e656c0000100001800b000100736f636b657400001c0001800a000100696e6e65720000000c00028008000340000000100c00018007000100727400000c0005400000000000000005f00100801c010b80400001800a00010071756f7461000000300002800c00014000000000000000040c00044000000000000000060c0001400000000000000b6208000240000000040c0001800800010064757000100001800b00010064796e7365740000100001800a00010071756575650000004c0001800b0001007470726f787900003c0002800800014000000001080001400000000a0800034000000004080002400000000208000240000000090800034000000000080002400000001150000180070001"], 0x1b4c}}, 0x0) 10m14.824564783s ago: executing program 2 (id=1360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1002) 10m14.515077162s ago: executing program 2 (id=1361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c000000200001801400020076657468310000000000", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) 10m14.204209194s ago: executing program 2 (id=1364): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 9m59.021859019s ago: executing program 34 (id=1364): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 8m48.407728941s ago: executing program 6 (id=1815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000ffffb703000008000000b70400000000000085000000030000009500000000000000267dbbebddfd1030581f12800463de5177075edf620cbb75b0fad82fd25b47a442a3abd5917c92a2e888b9e0f914f65506f202cc495de632385352afe048d294a08162b3e19ceb5bd806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x22, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8m47.065742246s ago: executing program 6 (id=1819): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000300)=""/56}, 0x20) 8m46.836661827s ago: executing program 6 (id=1822): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x122) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) close(r1) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x1) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 8m46.455315014s ago: executing program 6 (id=1827): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {0x0, 0xfff3}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 8m46.229011102s ago: executing program 6 (id=1832): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(0x0, 0x3) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 8m45.545590197s ago: executing program 6 (id=1834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x81, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb17, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0xb, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x400, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x2}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x0, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) 8m29.447538878s ago: executing program 35 (id=1834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x81, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb17, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0xb, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x400, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x2}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x0, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) 6m1.458972598s ago: executing program 1 (id=2926): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x4000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) 6m1.318699639s ago: executing program 1 (id=2928): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) 6m1.150799466s ago: executing program 1 (id=2930): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="e00679e389c05d6305bcd703fb9b7fc42d010000000000008014f4fd2674b144eb6e941fc91ae8fe1195876600ce57689f3fdc8f01b45961a041d540104a39b1f0bcc4efcfcb60f4f9fde253e92dc2e121679f763850f61cbbccabb7c1f76290154f37554bb904ccf867979a55c79105e843b4673dd1e4a5bef6ec4bf7815df61d921f622c36f7b67c8cbc6d4f8830", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xc}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x1}) 6m1.029557851s ago: executing program 1 (id=2932): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 6m0.322229088s ago: executing program 1 (id=2935): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r1, &(0x7f00000004c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0x8ee) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd2c, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 5m58.239071346s ago: executing program 1 (id=2945): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_free\x00', r0, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040), 0xff, 0x240, &(0x7f00000002c0)="$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") 5m56.908181995s ago: executing program 36 (id=2945): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_free\x00', r0, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040), 0xff, 0x240, &(0x7f00000002c0)="$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") 4m21.975181692s ago: executing program 8 (id=3564): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, 0x0, 0x0) 4m21.722269277s ago: executing program 8 (id=3565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="9d1100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) keyctl$clear(0x3, 0xfffffffffffffffd) 4m20.646890844s ago: executing program 8 (id=3570): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000880)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001040)={0x0, 0x9, 0x100}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xfe, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4m18.575361801s ago: executing program 8 (id=3580): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x20000000) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322021, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) 4m14.734891949s ago: executing program 8 (id=3591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000006340)={0x2020}, 0x2058) write$FUSE_IOCTL(r5, &(0x7f0000002140)={0x20, 0x0, 0x0, {0x403, 0x4, 0x80003ff, 0xffe}}, 0x20) syz_fuse_handle_req(r5, &(0x7f0000004340)="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", 0x2000, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x8001, 0x1, 0x0, {0x1, 0xfffffffffffffffe, 0x4000000000003, 0x219, 0x2, 0xc, 0x1000, 0x0, 0x1, 0xc000, 0xbca4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x302) unshare(0x64000600) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@acl}, {@bh}, {@dioread_nolock}]}, 0x1, 0x583, &(0x7f0000001080)="$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") io_setup(0x1ff, &(0x7f0000001540)) getpgid(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008380)={0x2020}, 0x2020) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) 4m11.02678904s ago: executing program 8 (id=3597): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbd5, 0x28}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x10}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3m55.615917462s ago: executing program 37 (id=3597): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbd5, 0x28}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x10}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2m3.546070307s ago: executing program 0 (id=3904): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) r1 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}}, 0xc800) 2m3.372671845s ago: executing program 0 (id=3905): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@mcast2}, &(0x7f00000001c0)=0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3deff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r5, &(0x7f0000000000), 0x0, 0x3ab3, 0x3) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff73}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x9) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) 2m0.010107224s ago: executing program 0 (id=3915): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m57.966972134s ago: executing program 0 (id=3917): socketpair$unix(0x1, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) 1m57.655110163s ago: executing program 0 (id=3921): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x7, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m57.633890008s ago: executing program 0 (id=3922): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) 1m42.350658171s ago: executing program 38 (id=3922): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) 14.53088453s ago: executing program 7 (id=4338): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 14.366737475s ago: executing program 7 (id=4340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3, 0x0, 0x5}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13.380695146s ago: executing program 7 (id=4347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x8001000000000000, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 12.630001738s ago: executing program 7 (id=4357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3, 0x0, 0x5}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 12.055125039s ago: executing program 7 (id=4364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x952, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x393}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000e00)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) 11.875145098s ago: executing program 7 (id=4366): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="04fe", 0x2}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1}, 0x20160) 5.450076529s ago: executing program 4 (id=4413): r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000340)=0x101, 0x4) listen(r0, 0x0) 5.290348307s ago: executing program 4 (id=4414): utimensat(0xffffffffffffffff, 0x0, 0x0, 0x7c97d668bcd9f9d9) 5.288549283s ago: executing program 5 (id=4415): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2140, 0x0) 5.279577338s ago: executing program 4 (id=4416): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x3) lseek(r0, 0x1, 0x1) getdents(r0, &(0x7f0000001180)=""/4074, 0xfea) 5.225661653s ago: executing program 4 (id=4417): syz_usb_connect(0x3, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0xce, 0x70, 0xe5, 0x20, 0x19d2, 0xfff6, 0xc3db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xb0, 0x5, 0xf0, 0x5, [{{0x9, 0x4, 0xf0, 0x51, 0x1, 0xff, 0xff, 0xff, 0x4, [], [{{0x9, 0x5, 0x9, 0x8, 0x400, 0x3f, 0x1, 0x81}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.73900533s ago: executing program 3 (id=4421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xffe0}, {0x9, 0xfff2}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 4.598531594s ago: executing program 9 (id=4422): openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000366, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@oldalloc}, {@errors_remount}, {@init_itable}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$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") r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000400)={0x10002000, 0x0, 0x0}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112270000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000001180)=[@uexit={0x0, 0x18, 0x6a20}, @cpuid={0x2, 0x18, {0x7ff, 0x6}}, @code={0x1, 0x5e, {"66b881008ee0673e262e0f01c20f01cac4c1b859be0000008066baf80cb81d18b18bef66bafc0cb015ee0f01f8b8010000000f01d9b9240200000f32660f38f684370001c0fe660f3882440d01"}}, @uexit={0x0, 0x18, 0x1}], 0xa6}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000300)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x28) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) 2.426455863s ago: executing program 9 (id=4423): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x20002, 0x80195760, 0x1000000, 0x8000000}) 2.26142551s ago: executing program 9 (id=4424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.177126763s ago: executing program 9 (id=4425): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000000000), 0x0) 2.090930763s ago: executing program 3 (id=4426): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setitimer(0x1, &(0x7f0000000000)={{0x2, 0x5}, {0x13, 0xffffffffffffffff}}, 0x0) 2.023176689s ago: executing program 4 (id=4427): r0 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x40, &(0x7f0000000240)=0xff, 0x1) 2.022800394s ago: executing program 9 (id=4428): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) fchmodat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x11) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setpgid(r1, r1) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) 1.994725319s ago: executing program 5 (id=4429): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000000029, 0xd, &(0x7f0000000000), 0x0) 1.955648593s ago: executing program 3 (id=4430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x2, 0x0, @loopback, 0x401}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) shutdown(r0, 0x1) 1.838190198s ago: executing program 3 (id=4431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000002880)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7409bf", 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0xa0}, @local}}}}, 0x0) 1.782713159s ago: executing program 4 (id=4432): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000040)={0x0, &(0x7f0000000640)=ANY=[], 0x1d8}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x16c, &(0x7f0000000480)="$eJzs2jFL80AYB/Dn7Wux9CM4Cc1QhzZpqiLoLAhObi5isXf1MDGSCNJOwS+gOMSPoKOrbn6Ezm5u6uIqKJEkl5omAaFSIvj/LXnIc/nflSs3XcO2zBZ3GkQL7sXWU2mNIrzFO7LcIKL5oBj6/mWTMnZH/aHvNjMDanfyWe95m7dcGEzPZgAAAAAAAAAAAAAAAAAAAAAA/BG1Z1lU9z3riguDtRJdpz846BgGs534jULyjg5xz1rlQmHtsbz6G5ES3t8R3vppkKeN9ZUgqeKHXik9n3psHqlOf9AQZqfHeuxQ19vL2qKmLelqmKXGif/ivHO5JqIKJd6P5rv5uk/0oGXvE1E1eszMCe/sJEwv5/3+SQo3r3X9HkX/KBnFtIp484tez3ZQPL4Q5Y+pyGUy2ykn/6v/ozErO2GroMV/+L9iK6dapM8P6s62a/fB+dHcs4zud+dH/PUkk5fkt6mTGaBonwEAAP//ZJomBQ==") r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000180)='./file3\x00', 0x8c0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES8], 0x4, 0x443b, &(0x7f00000088c0)="$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") r3 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) sysinfo(&(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) 1.724618012s ago: executing program 5 (id=4433): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x20002, 0x80195760, 0x1000000, 0x8000000}) 1.612258114s ago: executing program 3 (id=4434): syz_clone(0x2211000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="d8b07da8a079e98f7663074742d57c4d12f7ca8dabf267b0617ef36c3f0682b946f2270ab4edbe20facf6f1d6052d5fe92744c") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x5c}}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.483572248s ago: executing program 5 (id=4435): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xd4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x6004014}, 0x4000) 1.327192412s ago: executing program 3 (id=4436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="ff0700000000749c890000040054ca75e73051f834aed5ad41ade9bda79c6e43f02001df2d2d14b5ec4c72c7e5fb59b2b4577cf146a8318b314d8fcfb8a1d824561c568392e0d13b8d05dd0000000000", 0x50}, {&(0x7f0000000100)="dd053bb1c651146c934a8e2bd1c9", 0xe}], 0x2) 1.282693587s ago: executing program 5 (id=4437): syz_usb_connect(0x3, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0xce, 0x70, 0xe5, 0x20, 0x19d2, 0xfff6, 0xc3db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xb0, 0x5, 0xf0, 0x5, [{{0x9, 0x4, 0xf0, 0x51, 0x1, 0xff, 0xff, 0xff, 0x4, [], [{{0x9, 0x5, 0x9, 0x8, 0x400, 0x3f, 0x1, 0x81}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.019573663s ago: executing program 9 (id=4438): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2140, 0x0) 0s ago: executing program 5 (id=4439): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x3000480, &(0x7f00000000c0)={[{@errors_continue}, {@usrquota}, {@discard}, {@errors_remount}, {@nodiscard}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@uid}, {@quota}]}, 0x21, 0x623f, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): ounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.452043][T17324] kernel profiling enabled (shift: 7) [ 727.501323][T17327] loop7: detected capacity change from 0 to 256 [ 727.509786][T17327] vfat: Unknown parameter 'nonumt`il' [ 728.928081][T17345] loop5: detected capacity change from 0 to 2048 [ 728.935428][T17345] ext4: Unknown parameter 'obj_role' [ 729.988816][T17352] loop7: detected capacity change from 0 to 1024 [ 730.031067][T17352] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.560903][T17360] loop5: detected capacity change from 0 to 128 [ 730.578942][T17360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 730.585747][T17360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 731.434751][T17360] EXT4-fs (loop5): Test dummy encryption mode enabled [ 731.662047][T17360] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 731.915693][T17360] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 732.036873][T17360] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 732.700658][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.908833][T15775] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 734.244099][T17371] loop7: detected capacity change from 0 to 512 [ 734.251391][T17371] EXT4-fs: Ignoring removed mblk_io_submit option [ 734.257911][T17371] EXT4-fs: Ignoring removed bh option [ 734.311509][T17371] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 734.362815][T17371] EXT4-fs (loop7): 1 truncate cleaned up [ 734.377567][T17371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.192699][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.000860][T17379] loop7: detected capacity change from 0 to 2048 [ 736.137414][T17379] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.160360][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 736.160376][ T30] audit: type=1800 audit(13540191.650:2761): pid=17379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3620" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 736.435704][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.966666][T17397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 738.595278][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3627'. [ 738.724617][T17319] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3606'. [ 739.755218][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3633'. [ 740.004174][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3633'. [ 743.289270][T17438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3638'. [ 743.392793][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3638'. [ 743.705911][T17448] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 743.735624][T17448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 743.745303][T17448] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 743.753940][T17448] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 743.767202][T17448] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 743.963700][T17452] overlayfs: failed to resolve './file1': -2 [ 745.786867][T17448] Bluetooth: hci1: command 0x0406 tx timeout [ 745.837470][ T5849] Bluetooth: hci3: command tx timeout [ 746.361529][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3641'. [ 748.014481][ T5856] Bluetooth: hci3: command tx timeout [ 748.388977][T16388] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 748.559570][T17443] chnl_net:caif_netlink_parms(): no params data found [ 749.516480][T16388] usb 8-1: Using ep0 maxpacket: 16 [ 749.524019][T16388] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 749.536431][T16388] usb 8-1: config 0 has no interface number 0 [ 749.542695][T16388] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.575405][T16388] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.595636][T16388] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 749.617554][T16388] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.711879][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3653'. [ 750.293745][ T5856] Bluetooth: hci3: command tx timeout [ 750.339886][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3653'. [ 750.353658][T16388] usb 8-1: config 0 descriptor?? [ 750.448587][T16388] usb 8-1: can't set config #0, error -71 [ 750.483045][T16388] usb 8-1: USB disconnect, device number 7 [ 750.693903][T17520] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 750.724882][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3656'. [ 750.907081][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3658'. [ 750.964027][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3658'. [ 751.041242][ T6177] bond0 (unregistering): Released all slaves [ 751.360273][ T6177] bond1 (unregistering): Released all slaves [ 751.490718][T17539] input: syz1 as /devices/virtual/input/input7 [ 752.306466][ T5856] Bluetooth: hci3: command tx timeout [ 752.621193][ T6177] tipc: Left network mode [ 753.084122][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.042591][T17443] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.056784][T17443] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.074408][T17443] bridge_slave_0: entered allmulticast mode [ 754.171063][T17443] bridge_slave_0: entered promiscuous mode [ 754.342588][T17443] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.350625][T17443] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.364605][T17443] bridge_slave_1: entered allmulticast mode [ 754.375566][T17443] bridge_slave_1: entered promiscuous mode [ 754.870426][T17562] fuse: Bad value for 'fd' [ 755.105271][T17560] loop7: detected capacity change from 0 to 2048 [ 755.153361][T17560] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 755.166827][T16389] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 755.205907][ T30] audit: type=1800 audit(13540210.690:2762): pid=17560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3668" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 755.468982][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.482469][T17443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.495715][T17443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.526512][T16389] usb 10-1: Using ep0 maxpacket: 32 [ 756.197304][T16389] usb 10-1: config 176 has an invalid interface number: 240 but max is 3 [ 756.205806][T16389] usb 10-1: config 176 has an invalid interface number: 171 but max is 3 [ 756.215594][T16389] usb 10-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 756.233259][T16389] usb 10-1: config 176 has 2 interfaces, different from the descriptor's value: 4 [ 756.243648][T16389] usb 10-1: config 176 has no interface number 0 [ 756.250981][T16389] usb 10-1: config 176 has no interface number 1 [ 756.257613][T16389] usb 10-1: config 176 interface 240 altsetting 81 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 756.269580][T16389] usb 10-1: config 176 interface 171 altsetting 237 has an invalid descriptor for endpoint zero, skipping [ 756.328003][T16389] usb 10-1: config 176 interface 171 altsetting 237 has an invalid descriptor for endpoint zero, skipping [ 756.354702][T16389] usb 10-1: config 176 interface 171 altsetting 237 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 756.368619][T16389] usb 10-1: config 176 interface 240 has no altsetting 0 [ 756.375780][T16389] usb 10-1: config 176 interface 171 has no altsetting 0 [ 756.386850][T17443] team0: Port device team_slave_0 added [ 756.404830][T16389] usb 10-1: New USB device found, idVendor=19d2, idProduct=fff6, bcdDevice=c3.db [ 756.424306][T17443] team0: Port device team_slave_1 added [ 756.430820][T16389] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.441121][T16389] usb 10-1: Product: ᘩ弸摯ȶ§誒愳ṇᒻࣣ뻖å‹ëª´ë¦Œä¿ˆä½«âŒ‹ã´’✫硉࿾ᤖ붗嵿呈弳ጚ臰䣋æ—ꟸ楞痡ä¶â‡¾î§Œá‡µé¹“᤻濾ë·è°¿å…µï”“ꈵä€ï¯ æ¨ƒê»ä•‡ä‚’췼쓜 [ 756.461785][T16389] usb 10-1: Manufacturer: አ[ 756.466753][T16389] usb 10-1: SerialNumber: â Š [ 756.551549][ T6177] hsr_slave_0: left promiscuous mode [ 756.570439][ T6177] hsr_slave_1: left promiscuous mode [ 756.605121][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3672'. [ 756.659823][T17579] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3672'. [ 756.705291][T16389] option 10-1:176.240: GSM modem (1-port) converter detected [ 756.784804][T16389] usb 10-1: USB disconnect, device number 3 [ 756.805407][T16389] option 10-1:176.240: device disconnected [ 756.855947][T17580] loop3: detected capacity change from 0 to 2048 [ 756.959718][T17580] loop3: detected capacity change from 0 to 256 [ 756.982225][T17580] exfat: Unknown parameter 'ÿÿ00000000000000000000' [ 758.322030][T17591] loop3: detected capacity change from 0 to 512 [ 758.702196][T17591] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 759.536687][T17609] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3680'. [ 760.223817][T17612] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3681'. [ 760.234319][T17612] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3681'. [ 761.099698][T17582] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3675'. [ 761.252219][T17443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.276919][T17443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.359855][T17443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.382023][T17443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.391379][T17443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.557987][T17626] loop7: detected capacity change from 0 to 164 [ 761.617196][T17626] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 761.622837][T17443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.789202][T17629] loop3: detected capacity change from 0 to 128 [ 761.971908][ T30] audit: type=1800 audit(13540217.370:2763): pid=17629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3683" name="file1" dev="loop3" ino=1048664 res=0 errno=0 [ 762.454505][T17633] loop9: detected capacity change from 0 to 512 [ 762.543354][T17443] hsr_slave_0: entered promiscuous mode [ 762.560538][T17443] hsr_slave_1: entered promiscuous mode [ 762.576325][T17443] debugfs: 'hsr0' already exists in 'hsr' [ 762.579825][T17633] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.582370][T17443] Cannot create hsr debugfs directory [ 762.981412][T15378] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.267683][T17654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3694'. [ 763.281901][T17654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3694'. [ 763.391472][T17657] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3693'. [ 764.290269][T17673] loop9: detected capacity change from 0 to 164 [ 764.345253][T17673] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 764.567878][T17667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3698'. [ 765.391453][T17443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 766.580687][T17443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 766.652705][T17443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 766.770366][T17443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 766.928918][T17699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3707'. [ 767.007794][T17708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3707'. [ 767.354981][T17713] loop7: detected capacity change from 0 to 256 [ 767.374618][T17443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.475071][T17713] FAT-fs (loop7): Directory bread(block 64) failed [ 767.502801][T17443] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.524988][T17713] FAT-fs (loop7): Directory bread(block 65) failed [ 767.559355][T17713] FAT-fs (loop7): Directory bread(block 66) failed [ 767.565947][T17713] FAT-fs (loop7): Directory bread(block 67) failed [ 767.597357][T12682] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.604654][T12682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.643538][T17713] FAT-fs (loop7): Directory bread(block 68) failed [ 767.650251][T17713] FAT-fs (loop7): Directory bread(block 69) failed [ 767.656941][T17713] FAT-fs (loop7): Directory bread(block 70) failed [ 767.663502][T17713] FAT-fs (loop7): Directory bread(block 71) failed [ 767.670936][T17713] FAT-fs (loop7): Directory bread(block 72) failed [ 767.680852][T17713] FAT-fs (loop7): Directory bread(block 73) failed [ 767.728725][T12672] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.735978][T12672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.924612][T17443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 768.531792][T17443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.702789][T17443] veth0_vlan: entered promiscuous mode [ 768.766114][T17443] veth1_vlan: entered promiscuous mode [ 768.853599][T17738] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 768.913860][T12672] Bluetooth: hci4: Frame reassembly failed (-84) [ 769.057705][T17443] veth0_macvtap: entered promiscuous mode [ 769.107120][T17443] veth1_macvtap: entered promiscuous mode [ 769.201559][T17443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.251191][T17443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.379055][T12676] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.422045][T12676] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.473774][ T6467] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.517718][T12682] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.623425][T17731] loop5: detected capacity change from 0 to 40427 [ 769.704960][T17731] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 769.736420][T17731] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 769.785572][ T6177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.791423][T17731] F2FS-fs (loop5): invalid crc value [ 769.813024][ T6177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.935808][T12676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.956198][T12676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.092240][T17731] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 770.140441][T17731] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 770.156994][T17731] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 770.375448][T17745] loop3: detected capacity change from 0 to 40427 [ 770.396268][T17448] Bluetooth: hci2: command 0x0406 tx timeout [ 771.334335][ T5849] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 771.418257][T17763] loop0: detected capacity change from 0 to 512 [ 771.529481][T17763] EXT4-fs: Ignoring removed mblk_io_submit option [ 771.535987][T17763] EXT4-fs: Ignoring removed bh option [ 771.567957][T17745] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 771.595666][T17763] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 771.903551][T17763] EXT4-fs (loop0): 1 truncate cleaned up [ 771.921070][T17763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 772.044682][T17745] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 772.099697][T17745] F2FS-fs (loop3): invalid crc value [ 772.329386][T17443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.431117][T17745] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 772.536795][T17775] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3727'. [ 772.580222][T17775] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3727'. [ 773.588677][T17796] loop3: detected capacity change from 0 to 256 [ 773.853041][T17800] loop7: detected capacity change from 0 to 512 [ 774.763475][T17803] loop5: detected capacity change from 0 to 512 [ 774.791406][T17803] EXT4-fs: Ignoring removed mblk_io_submit option [ 774.798547][T17803] EXT4-fs: Ignoring removed bh option [ 775.224510][T17803] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 777.062505][T17803] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 777.062891][T17800] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 777.072916][T17800] EXT4-fs: failed to create workqueue [ 777.087910][T17800] EXT4-fs (loop7): mount failed [ 777.093030][T17803] EXT4-fs: failed to create workqueue [ 777.098494][T17803] EXT4-fs (loop5): mount failed [ 777.711779][T17811] loop0: detected capacity change from 0 to 2048 [ 778.020696][T17811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.567299][T17823] loop7: detected capacity change from 0 to 512 [ 779.589434][T17443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.599765][T17823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 779.720237][T17823] EXT4-fs (loop7): orphan cleanup on readonly fs [ 779.743347][T17823] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3741: bg 0: block 248: padding at end of block bitmap is not set [ 779.769948][T17823] Quota error (device loop7): write_blk: dquota write failed [ 779.778042][T17823] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 779.788399][T17823] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3741: Failed to acquire dquot type 1 [ 779.823327][T17823] EXT4-fs (loop7): 1 truncate cleaned up [ 779.861203][T17823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 781.395546][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3745'. [ 781.411962][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3745'. [ 781.634350][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.926266][T17867] random: crng reseeded on system resumption [ 783.385119][T16389] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 783.450373][T17865] loop3: detected capacity change from 0 to 1024 [ 783.461272][T17865] ext4: Unknown parameter 'fsmagic' [ 783.540313][T16389] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.564387][T16389] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 783.587355][T16389] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.621667][T16389] usb 10-1: config 0 descriptor?? [ 784.766871][T17858] deleting an unspecified loop device is not supported. [ 784.989949][T16389] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 785.045906][T16389] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0007/input/input8 [ 785.257052][T16389] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 785.292631][T17887] loop3: detected capacity change from 0 to 1024 [ 785.354822][T17887] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 785.365647][T16389] usb 10-1: USB disconnect, device number 4 [ 785.441850][T17887] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3759: Invalid block bitmap block 0 in block_group 0 [ 785.528547][T17887] Quota error (device loop3): write_blk: dquota write failed [ 785.539666][T17887] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 785.550368][T17887] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3759: Failed to acquire dquot type 0 [ 785.577674][T17887] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.3759: Freeing blocks not in datazone - block = 0, count = 4096 [ 785.604252][T17887] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3759: Invalid inode bitmap blk 0 in block_group 0 [ 785.626183][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3761'. [ 785.636531][T17887] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 785.649565][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3761'. [ 785.656484][T17455] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 785.665812][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3761'. [ 785.676457][T17455] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:51: Failed to release dquot type 0 [ 785.688421][T17887] EXT4-fs (loop3): 1 orphan inode deleted [ 785.696014][T17887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.763148][T15211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.836755][T16374] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 786.218567][T17913] loop0: detected capacity change from 0 to 256 [ 786.399261][T17914] loop9: detected capacity change from 0 to 128 [ 786.432469][T17914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 786.439811][T17914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 786.467481][T17913] exfat: Unknown parameter 'fsmagic' [ 786.906663][T16374] usb 8-1: Using ep0 maxpacket: 8 [ 786.925591][T16374] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.937588][T17914] EXT4-fs (loop9): Test dummy encryption mode enabled [ 787.892090][T16374] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 787.901802][T16374] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.892829][T16374] usb 8-1: config 0 descriptor?? [ 789.650925][T17914] EXT4-fs: error -4 creating inode table initialization thread [ 789.659491][T17914] EXT4-fs (loop9): mount failed [ 789.686522][T16374] usb 8-1: can't set config #0, error -71 [ 789.694025][T16374] usb 8-1: USB disconnect, device number 8 [ 791.441799][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3774'. [ 791.477066][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3774'. [ 791.486029][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3774'. [ 791.524392][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'. [ 791.533973][T17936] veth1_to_batadv: entered promiscuous mode [ 791.540828][T17936] veth1_to_batadv: entered allmulticast mode [ 791.553649][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'. [ 793.209638][T17946] overlayfs: missing 'lowerdir' [ 795.611460][T17951] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 797.042377][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'. [ 797.054650][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'. [ 797.066281][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'. [ 797.888620][T17448] Bluetooth: hci4: command 0x1003 tx timeout [ 798.126828][T17977] usb usb1: usbfs: process 17977 (syz.9.3787) did not claim interface 0 before use [ 798.846898][ T5856] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 799.216696][T17981] overlayfs: missing 'lowerdir' [ 800.712569][T17989] tipc: Enabled bearer , priority 0 [ 801.087858][T17988] tipc: Disabling bearer [ 802.141271][T18013] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 802.150285][T18013] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 805.126570][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3799'. [ 805.793735][T18031] loop7: detected capacity change from 0 to 512 [ 805.805417][T18031] EXT4-fs: Ignoring removed mblk_io_submit option [ 805.812433][T18031] EXT4-fs: Ignoring removed bh option [ 805.896904][T18031] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 805.951584][T18031] EXT4-fs (loop7): 1 truncate cleaned up [ 805.967666][T18031] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.461529][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.843630][T18041] loop7: detected capacity change from 0 to 512 [ 806.915189][T18041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.954438][T18041] bridge0: port 3(syz_tun) entered blocking state [ 806.988545][T18041] bridge0: port 3(syz_tun) entered disabled state [ 806.995206][T18041] syz_tun: entered allmulticast mode [ 807.004077][T18041] syz_tun: entered promiscuous mode [ 807.011203][T18041] bridge0: port 3(syz_tun) entered blocking state [ 807.017852][T18041] bridge0: port 3(syz_tun) entered forwarding state [ 807.028842][T18046] syz_tun: left allmulticast mode [ 807.033930][T18046] syz_tun: left promiscuous mode [ 807.797943][T18046] bridge0: port 3(syz_tun) entered disabled state [ 807.934796][T18046] bridge_slave_0: left allmulticast mode [ 807.995001][T18046] bridge_slave_0: left promiscuous mode [ 808.027036][T18046] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.075698][T18046] bridge_slave_1: left allmulticast mode [ 808.096659][T18046] bridge_slave_1: left promiscuous mode [ 808.102507][T18046] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.219600][T18046] team0: Port device team_slave_0 removed [ 808.247207][T18046] team0: Port device team_slave_1 removed [ 808.424478][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.652690][T18049] serio: Serial port ptm0 [ 809.032038][T18060] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 809.040921][T18060] overlayfs: missing 'lowerdir' [ 809.271554][T18067] loop5: detected capacity change from 0 to 512 [ 809.287452][T18067] EXT4-fs: Ignoring removed mblk_io_submit option [ 809.300276][T18067] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 809.312584][T18067] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 809.321242][T18067] EXT4-fs (loop5): orphan cleanup on readonly fs [ 809.331379][T18067] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3813: Invalid block bitmap block 0 in block_group 0 [ 809.423040][T18067] EXT4-fs (loop5): Remounting filesystem read-only [ 809.441330][T18067] Quota error (device loop5): write_blk: dquota write failed [ 809.489747][T18067] Quota error (device loop5): write_blk: dquota write failed [ 809.504875][T18071] loop7: detected capacity change from 0 to 128 [ 809.546909][T18067] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 809.578118][T18067] EXT4-fs (loop5): 1 orphan inode deleted [ 810.840376][T18067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 810.954817][ T30] audit: type=1326 audit(13540266.440:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 811.273076][T18084] loop3: detected capacity change from 0 to 512 [ 811.280797][T18084] EXT4-fs: Ignoring removed mblk_io_submit option [ 811.287503][T18084] EXT4-fs: Ignoring removed bh option [ 811.588243][T18086] loop0: detected capacity change from 0 to 128 [ 811.613832][T18086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 811.621313][T18086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 811.950017][T18063] loop9: detected capacity change from 0 to 40427 [ 811.978087][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3813'. [ 811.994298][ T30] audit: type=1326 audit(13540266.440:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 812.018766][T18086] EXT4-fs (loop0): Test dummy encryption mode enabled [ 812.041026][T18084] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 812.630937][T18086] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 812.659796][ T30] audit: type=1326 audit(13540266.440:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 812.689150][ T30] audit: type=1326 audit(13540266.450:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 813.706449][ T30] audit: type=1326 audit(13540266.450:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 814.328113][T18084] EXT4-fs (loop3): 1 truncate cleaned up [ 814.335670][T18084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.463830][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.551082][T15775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.608835][T15211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.709575][ T30] audit: type=1326 audit(13540266.450:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 814.732588][ T30] audit: type=1326 audit(13540266.450:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 814.775297][ T30] audit: type=1326 audit(13540266.450:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 815.017529][ T30] audit: type=1326 audit(13540266.450:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 815.280602][ T30] audit: type=1326 audit(13540266.450:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 815.337001][ T30] audit: type=1326 audit(13540266.450:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 815.403375][T17443] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 815.442778][ T30] audit: type=1326 audit(13540266.450:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 815.552961][T18100] loop3: detected capacity change from 0 to 128 [ 815.568088][T18100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 815.574882][T18100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 815.594528][T18100] EXT4-fs (loop3): Test dummy encryption mode enabled [ 815.673038][T18100] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 816.421161][ T30] audit: type=1326 audit(13540266.470:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 816.444035][ T30] audit: type=1326 audit(13540266.470:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 816.682377][T18104] loop9: detected capacity change from 0 to 256 [ 817.312459][ T30] audit: type=1326 audit(13540266.800:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.7.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2c7178e929 code=0x7ffc0000 [ 817.591468][T15211] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 817.846455][T16387] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 818.007061][T16387] usb 10-1: Using ep0 maxpacket: 32 [ 818.032198][T16387] usb 10-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 818.063456][T16387] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.086618][T16387] usb 10-1: Product: syz [ 818.095582][T16387] usb 10-1: Manufacturer: syz [ 818.830625][T16387] usb 10-1: SerialNumber: syz [ 818.840562][T16387] usb 10-1: config 0 descriptor?? [ 819.169168][T16387] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 819.419274][T18139] loop5: detected capacity change from 0 to 512 [ 819.429567][T18139] EXT4-fs: Ignoring removed mblk_io_submit option [ 819.436656][T18139] EXT4-fs: Ignoring removed bh option [ 819.712412][T16387] usb 10-1: USB disconnect, device number 5 [ 819.836854][T18139] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 819.861078][T18139] EXT4-fs (loop5): 1 truncate cleaned up [ 819.868704][T18139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.204472][T15775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.509972][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3836'. [ 820.531689][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3836'. [ 821.255272][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 821.255291][ T30] audit: type=1326 audit(13802676.734:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18161 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7ffc0000 [ 821.291712][ T30] audit: type=1326 audit(13802676.774:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18161 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7ffc0000 [ 821.314701][ T30] audit: type=1326 audit(13802676.774:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18161 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579358e929 code=0x7ffc0000 [ 821.340218][ T30] audit: type=1326 audit(13802676.774:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18161 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7ffc0000 [ 821.370461][ T30] audit: type=1326 audit(13802676.774:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18161 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7ffc0000 [ 821.454381][ T30] audit: type=1326 audit(13802676.774:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18161 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579358e929 code=0x7ffc0000 [ 821.560212][ T30] audit: type=1326 audit(13802676.854:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18161 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7ffc0000 [ 821.668738][ T30] audit: type=1326 audit(13802676.854:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18161 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7ffc0000 [ 822.276174][ T30] audit: type=1326 audit(13802676.854:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18161 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f579358e929 code=0x7ffc0000 [ 822.918753][ T30] audit: type=1326 audit(13802676.854:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18161 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7ffc0000 [ 823.316362][T18186] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3844'. [ 823.830247][T18187] input: syz1 as /devices/virtual/input/input9 [ 824.111797][T18180] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 824.419926][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3849'. [ 824.476269][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3849'. [ 824.633889][T18198] overlayfs: missing 'lowerdir' [ 826.331580][T18206] loop0: detected capacity change from 0 to 1024 [ 826.366218][T18206] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (61418!=35945) [ 826.409954][T18206] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 826.454494][T18206] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 826.485994][T18206] EXT4-fs (loop0): orphan cleanup on readonly fs [ 826.521888][T18206] EXT4-fs error (device loop0): ext4_quota_enable:7124: inode #3: comm syz.0.3851: iget: bad i_size value: 1407374883559424 [ 826.587097][T18206] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.3851: Bad quota inode: 3, type: 0 [ 826.637813][T18206] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 826.679567][T18206] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 826.815055][T18206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 828.640275][T18219] loop3: detected capacity change from 0 to 256 [ 828.681913][T18219] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 828.692835][T18219] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 828.827743][T18219] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 828.848588][T17443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.965117][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3856'. [ 830.344392][T18229] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3858'. [ 831.041042][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3857'. [ 831.126028][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3857'. [ 831.162615][T18234] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3860'. [ 831.423923][T18238] overlayfs: failed to resolve './file0': -2 [ 833.198045][T18250] loop3: detected capacity change from 0 to 256 [ 833.389398][T18250] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 835.367212][T18260] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3866'. [ 835.389561][T18268] loop0: detected capacity change from 0 to 128 [ 835.717710][T18273] loop9: detected capacity change from 0 to 1024 [ 835.750420][T18273] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 836.442927][T18275] overlay: filesystem on ./file0 not supported [ 836.796624][T18273] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.3869: Invalid block bitmap block 0 in block_group 0 [ 836.856469][T18273] __quota_error: 20 callbacks suppressed [ 836.856497][T18273] Quota error (device loop9): write_blk: dquota write failed [ 836.870061][T18273] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 836.880654][T18273] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3869: Failed to acquire dquot type 0 [ 836.910669][T18273] EXT4-fs error (device loop9): ext4_free_blocks:6587: comm syz.9.3869: Freeing blocks not in datazone - block = 0, count = 4096 [ 836.932008][T18273] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.3869: Invalid inode bitmap blk 0 in block_group 0 [ 836.949519][T18273] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 836.961978][T18273] EXT4-fs (loop9): 1 orphan inode deleted [ 836.978834][T18273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.934516][ T13] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-8 [ 837.953940][ T13] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 840.593856][T18292] fuse: Bad value for 'fd' [ 840.762860][T15378] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.867042][T18305] random: crng reseeded on system resumption [ 842.361386][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'. [ 842.380535][T18301] overlayfs: failed to resolve './file0': -2 [ 842.582929][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'. [ 844.326742][T16385] kernel read not supported for file /508/oom_adj (pid: 16385 comm: kworker/0:9) [ 844.372179][T18320] loop5: detected capacity change from 0 to 512 [ 845.430660][T18320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 845.565460][T18320] bridge0: port 1(syz_tun) entered blocking state [ 845.619835][T18320] bridge0: port 1(syz_tun) entered disabled state [ 845.657572][T18320] syz_tun: entered allmulticast mode [ 845.724193][T18320] syz_tun: entered promiscuous mode [ 845.831219][T18320] bridge0: port 1(syz_tun) entered blocking state [ 845.837920][T18320] bridge0: port 1(syz_tun) entered forwarding state [ 847.439916][T18357] xt_bpf: check failed: parse error [ 848.006705][T15775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.394701][T18364] overlayfs: failed to resolve './file0': -2 [ 849.369635][T18355] loop3: detected capacity change from 0 to 40427 [ 850.671518][T18377] loop9: detected capacity change from 0 to 1024 [ 850.797157][T18377] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 850.864072][T18377] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.3899: Invalid block bitmap block 0 in block_group 0 [ 850.883482][T18377] Quota error (device loop9): write_blk: dquota write failed [ 850.891536][T18377] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 850.901987][T18377] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3899: Failed to acquire dquot type 0 [ 850.934855][T18377] EXT4-fs error (device loop9): ext4_free_blocks:6587: comm syz.9.3899: Freeing blocks not in datazone - block = 0, count = 4096 [ 850.954327][T18377] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.3899: Invalid inode bitmap blk 0 in block_group 0 [ 850.977242][T18377] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 850.988306][T18377] EXT4-fs (loop9): 1 orphan inode deleted [ 851.003919][T18377] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 851.284145][T12717] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-8 [ 851.317356][T12717] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:46: Failed to release dquot type 0 [ 851.946116][ T30] audit: type=1326 audit(13802963.429:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c6d8e929 code=0x7ffc0000 [ 852.012568][ T30] audit: type=1326 audit(13802963.459:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c6d8e929 code=0x7ffc0000 [ 852.119907][ T30] audit: type=1326 audit(13802963.459:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04c6d8e929 code=0x7ffc0000 [ 852.142327][ T30] audit: type=1326 audit(13802963.459:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c6d8e929 code=0x7ffc0000 [ 852.166422][ T30] audit: type=1326 audit(13802963.459:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c6d8e929 code=0x7ffc0000 [ 852.775991][T18397] loop3: detected capacity change from 0 to 1024 [ 852.792288][T18397] EXT4-fs: Ignoring removed bh option [ 853.113843][T18397] EXT4-fs: Mount option(s) incompatible with ext2 [ 853.249561][ T30] audit: type=1326 audit(13802963.469:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04c6d8e929 code=0x7ffc0000 [ 853.272544][ T30] audit: type=1326 audit(13802963.469:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.0.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c6d8e929 code=0x7ffc0000 [ 853.312741][T15378] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.441220][T18401] loop5: detected capacity change from 0 to 1024 [ 853.462133][T18401] EXT4-fs: Ignoring removed nobh option [ 853.500517][T18401] EXT4-fs: Ignoring removed bh option [ 853.514481][T18403] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3909'. [ 853.546031][T18403] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3909'. [ 853.562897][T18401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.829957][T18414] siw: device registration error -23 [ 854.877664][T18423] loop7: detected capacity change from 0 to 256 [ 857.328082][T15775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.090266][T18454] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 858.099281][T18454] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 859.017562][ T5882] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 859.064277][ T5882] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 859.256588][T18463] loop0: detected capacity change from 0 to 512 [ 859.302045][T18463] EXT4-fs (loop0): 1 orphan inode deleted [ 859.309796][T18463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.607643][T12675] __quota_error: 8 callbacks suppressed [ 859.607665][T12675] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 859.688593][T12675] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 1 [ 859.819082][ T30] audit: type=1326 audit(13802971.299:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18460 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7fc00000 [ 859.846135][T18469] loop3: detected capacity change from 0 to 256 [ 859.887538][T18469] exfat: Bad value for 'uid' [ 859.901749][ T30] audit: type=1326 audit(13802971.299:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18460 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c7178e929 code=0x7fc00000 [ 859.902715][T18469] exfat: Bad value for 'uid' [ 859.931957][ T30] audit: type=1326 audit(13802971.299:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18460 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7fc00000 [ 860.023211][ T30] audit: type=1326 audit(13802971.299:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18460 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7fc00000 [ 860.061934][T18469] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3925'. [ 860.091555][ T30] audit: type=1326 audit(13802971.299:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18460 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7fc00000 [ 860.150098][ T30] audit: type=1326 audit(13802971.299:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18460 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7fc00000 [ 860.223617][ T30] audit: type=1326 audit(13802971.299:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18460 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7fc00000 [ 860.282058][ T30] audit: type=1326 audit(13802971.299:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18460 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7fc00000 [ 860.527678][ T30] audit: type=1326 audit(13802971.299:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18460 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7178e929 code=0x7fc00000 [ 864.106723][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 864.769623][T18514] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 864.778849][T18514] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 866.887767][T16397] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 866.930746][T16397] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 867.025707][T18530] loop3: detected capacity change from 0 to 256 [ 867.052737][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3940'. [ 867.128840][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3940'. [ 867.786605][T17448] Bluetooth: hci3: command 0x0406 tx timeout [ 867.818919][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 867.819266][ T30] audit: type=1326 audit(14065379.295:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.9.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e73f8e929 code=0x7fc00000 [ 867.923653][ T30] audit: type=1326 audit(14065379.335:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.9.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e73f8e929 code=0x7fc00000 [ 867.981000][T16387] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 867.999679][ T30] audit: type=1326 audit(14065379.345:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.9.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e73f8e929 code=0x7fc00000 [ 868.036206][ T30] audit: type=1326 audit(14065379.345:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.9.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e73f8e929 code=0x7fc00000 [ 868.059097][ T30] audit: type=1326 audit(14065379.445:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.9.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e73f8e929 code=0x7fc00000 [ 868.082416][ T30] audit: type=1326 audit(14065379.445:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.9.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e73f8e929 code=0x7fc00000 [ 868.120085][ T30] audit: type=1326 audit(14065379.445:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.9.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e73f8e929 code=0x7fc00000 [ 868.156482][ T30] audit: type=1326 audit(14065379.445:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.9.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e73f8e929 code=0x7fc00000 [ 868.210047][ T30] audit: type=1326 audit(14065379.445:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.9.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e73f8e929 code=0x7fc00000 [ 868.275030][ T30] audit: type=1326 audit(14065379.445:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18522 comm="syz.9.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e73f8e929 code=0x7fc00000 [ 868.300835][T16387] usb 4-1: Using ep0 maxpacket: 32 [ 868.351723][T16387] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 868.374811][T16387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.534184][T16387] usb 4-1: Product: syz [ 868.544797][T16387] usb 4-1: Manufacturer: syz [ 868.571114][T16387] usb 4-1: SerialNumber: syz [ 868.585537][T16387] usb 4-1: config 0 descriptor?? [ 868.824957][T16387] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 869.194319][T18559] overlayfs: missing 'lowerdir' [ 870.941627][T16387] usb 4-1: USB disconnect, device number 4 [ 871.270911][T18577] loop3: detected capacity change from 0 to 1024 [ 871.303028][T18577] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 871.434694][T18577] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3956: Invalid block bitmap block 0 in block_group 0 [ 871.456888][T18577] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3956: Failed to acquire dquot type 0 [ 871.474730][T18577] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.3956: Freeing blocks not in datazone - block = 0, count = 4096 [ 871.500462][T18577] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3956: Invalid inode bitmap blk 0 in block_group 0 [ 871.515920][T18577] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 871.536605][T12671] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 0 [ 871.549595][T18577] EXT4-fs (loop3): 1 orphan inode deleted [ 871.567508][T18577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.167636][T17443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.232522][T18591] loop5: detected capacity change from 0 to 256 [ 873.261002][T15211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.678021][T17448] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 874.691040][T17448] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 874.700216][T17448] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 874.720578][T17448] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 874.729184][T17448] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 875.789891][T18611] loop7: detected capacity change from 0 to 4096 [ 875.879061][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.574638][T16397] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 876.791152][ T5856] Bluetooth: hci4: command tx timeout [ 876.833161][T18611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 876.889199][T16387] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 877.031647][T12717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.947680][T16387] usb 4-1: Using ep0 maxpacket: 32 [ 877.966213][T16387] usb 4-1: config 176 has an invalid interface number: 240 but max is 3 [ 877.987400][T16387] usb 4-1: config 176 has an invalid interface number: 171 but max is 3 [ 878.035510][T16387] usb 4-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 878.121661][T16387] usb 4-1: config 176 has 2 interfaces, different from the descriptor's value: 4 [ 878.144859][T16387] usb 4-1: config 176 has no interface number 0 [ 878.165988][T16387] usb 4-1: config 176 has no interface number 1 [ 878.182809][T16387] usb 4-1: config 176 interface 240 altsetting 81 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 878.205861][T12717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.208683][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3970'. [ 878.241635][T16387] usb 4-1: config 176 interface 171 altsetting 237 has an invalid descriptor for endpoint zero, skipping [ 878.410278][T16387] usb 4-1: config 176 interface 171 altsetting 237 has an invalid descriptor for endpoint zero, skipping [ 878.434906][T16387] usb 4-1: config 176 interface 171 altsetting 237 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 878.483625][T16387] usb 4-1: config 176 interface 240 has no altsetting 0 [ 878.490959][T16387] usb 4-1: config 176 interface 171 has no altsetting 0 [ 878.501166][T16387] usb 4-1: New USB device found, idVendor=19d2, idProduct=fff6, bcdDevice=c3.db [ 878.510588][T16387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.519530][T16387] usb 4-1: Product: ᘩ弸摯ȶ§誒愳ṇᒻࣣ뻖å‹ëª´ë¦Œä¿ˆä½«âŒ‹ã´’✫硉࿾ᤖ붗嵿呈弳ጚ臰䣋æ—ꟸ楞痡ä¶â‡¾î§Œá‡µé¹“᤻濾ë·è°¿å…µï”“ꈵä€ï¯ æ¨ƒê»ä•‡ä‚’췼쓜 [ 878.540591][T16387] usb 4-1: Manufacturer: አ[ 878.545255][T16387] usb 4-1: SerialNumber: â Š [ 878.585170][T12717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.774034][T16387] option 4-1:176.240: GSM modem (1-port) converter detected [ 878.828639][T16387] usb 4-1: USB disconnect, device number 5 [ 878.852876][T16387] option 4-1:176.240: device disconnected [ 878.866902][ T5856] Bluetooth: hci4: command tx timeout [ 878.975500][T12717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.765736][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.926611][T18606] chnl_net:caif_netlink_parms(): no params data found [ 879.941839][T18637] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3973'. [ 880.200167][T12717] bridge_slave_1: left allmulticast mode [ 880.211146][T12717] bridge_slave_1: left promiscuous mode [ 880.221930][T12717] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.939506][T12717] bridge_slave_0: left allmulticast mode [ 880.954780][ T5856] Bluetooth: hci4: command tx timeout [ 880.961185][T12717] bridge_slave_0: left promiscuous mode [ 880.980048][T12717] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.770299][T12717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.788072][T12717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.800662][T12717] bond0 (unregistering): Released all slaves [ 882.020808][T18661] loop4: detected capacity change from 0 to 7 [ 882.045926][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 882.055227][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 882.065289][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 882.074602][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 882.085367][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 882.094628][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 882.103963][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 882.113204][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 882.136141][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 882.145396][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 882.208474][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 882.217839][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 882.239679][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 882.248939][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 882.257071][T18661] ldm_validate_partition_table(): Disk read failed. [ 882.269863][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 882.279116][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 882.302501][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 882.311771][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 882.339031][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 882.348304][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 882.357185][T18661] Dev loop4: unable to read RDB block 0 [ 882.374152][T18661] loop4: unable to read partition table [ 882.393681][T18661] loop4: partition table beyond EOD, truncated [ 882.413703][T18661] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 882.551728][T18606] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.575711][T18606] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.610988][T18606] bridge_slave_0: entered allmulticast mode [ 882.636562][T18606] bridge_slave_0: entered promiscuous mode [ 882.661374][T18606] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.676547][T18606] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.707070][T18606] bridge_slave_1: entered allmulticast mode [ 882.715966][T18606] bridge_slave_1: entered promiscuous mode [ 883.026816][ T5856] Bluetooth: hci4: command tx timeout [ 884.342014][T18690] loop7: detected capacity change from 0 to 512 [ 884.487271][T18690] EXT4-fs (loop7): unsupported inode size: 22272 [ 884.487370][T18690] EXT4-fs (loop7): blocksize: 1024 [ 885.075375][T18606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.471555][T12717] hsr_slave_0: left promiscuous mode [ 885.513813][T12717] hsr_slave_1: left promiscuous mode [ 885.530288][T12717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.530470][T12717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.569837][T12717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.569890][T12717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.648853][T18685] loop7: detected capacity change from 0 to 512 [ 885.656187][T12717] veth1_macvtap: left promiscuous mode [ 885.656267][T12717] veth0_macvtap: left promiscuous mode [ 885.656589][T12717] veth1_vlan: left promiscuous mode [ 885.656721][T12717] veth0_vlan: left promiscuous mode [ 885.699664][T18685] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.003988][T18697] [U]  [ 886.013757][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.571907][T12677] Bluetooth: hci3: Frame reassembly failed (-84) [ 887.324738][ T5911] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 888.628713][T17448] Bluetooth: hci3: command 0x1003 tx timeout [ 888.635902][ T5856] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 888.825158][T12717] team0 (unregistering): Port device team_slave_1 removed [ 888.931382][T12717] team0 (unregistering): Port device team_slave_0 removed [ 888.963255][T18714] loop7: detected capacity change from 0 to 1024 [ 888.971156][T18714] EXT4-fs: Ignoring removed nobh option [ 888.977816][T18714] EXT4-fs: Ignoring removed bh option [ 889.008221][T18714] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 889.421717][T18723] overlayfs: conflicting lowerdir path [ 889.506648][ T5911] usb 6-1: device not accepting address 3, error -71 [ 890.424334][T18606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.743870][T18606] team0: Port device team_slave_0 added [ 890.804786][T18606] team0: Port device team_slave_1 added [ 891.093289][T18749] overlayfs: missing 'workdir' [ 891.439341][T18606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.686636][T18606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.810942][T18606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.875294][T18606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.909742][T18606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.982461][T18606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.858843][T12672] Bluetooth: hci3: Frame reassembly failed (-84) [ 893.856770][T16388] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 894.077144][T16388] usb 10-1: Using ep0 maxpacket: 32 [ 894.166392][T16388] usb 10-1: config 9 has an invalid interface number: 236 but max is 1 [ 894.259932][T16388] usb 10-1: config 9 has no interface number 1 [ 894.300211][T16388] usb 10-1: config 9 interface 236 has no altsetting 0 [ 894.352637][T16388] usb 10-1: config 9 interface 0 has no altsetting 0 [ 894.404536][T16388] usb 10-1: New USB device found, idVendor=0471, idProduct=2093, bcdDevice=e6.1a [ 894.450736][T16388] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.492307][T16388] usb 10-1: Product: syz [ 894.514476][T16388] usb 10-1: Manufacturer: syz [ 894.539953][T16388] usb 10-1: SerialNumber: syz [ 894.866607][ T5856] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 894.875170][T17448] Bluetooth: hci3: command 0x1003 tx timeout [ 895.002050][T17448] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 895.042999][T16388] usb 10-1: USB disconnect, device number 6 [ 895.245687][T18606] hsr_slave_0: entered promiscuous mode [ 895.314207][T18606] hsr_slave_1: entered promiscuous mode [ 895.350091][T18606] debugfs: 'hsr0' already exists in 'hsr' [ 895.355998][T18606] Cannot create hsr debugfs directory [ 895.423484][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.046386][ T5882] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 896.228849][ T5882] usb 6-1: too many configurations: 228, using maximum allowed: 8 [ 896.269687][ T5882] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 896.288188][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.312294][ T5882] usb 6-1: Product: syz [ 896.326397][ T5882] usb 6-1: Manufacturer: syz [ 896.331171][ T5882] usb 6-1: SerialNumber: syz [ 896.347431][ T5882] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 896.465955][T16374] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 896.806717][T16388] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 896.938760][T18606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 896.951832][T18606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 896.964816][T18606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 896.978206][T16388] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 896.982395][T18606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 896.987916][T16388] usb 8-1: config 0 has no interface number 0 [ 897.001002][T16388] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 897.014092][T16388] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 897.026222][T16388] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 897.039857][T16388] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.052048][T16388] usb 8-1: config 0 descriptor?? [ 897.065070][T18788] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 897.078066][T16385] usb 6-1: USB disconnect, device number 5 [ 897.097299][T16389] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 897.107076][T16388] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 897.146739][T16377] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 897.154803][T18606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.174064][T18606] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.187866][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.195178][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.213441][T12717] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.220737][T12717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.267109][T16389] usb 10-1: Using ep0 maxpacket: 8 [ 897.278603][T16389] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 897.300283][T16389] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 897.309825][T16389] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.318396][T16389] usb 10-1: Product: syz [ 897.322690][T16389] usb 10-1: Manufacturer: syz [ 897.326886][T16377] usb 4-1: Using ep0 maxpacket: 32 [ 897.331554][T16388] usb 8-1: USB disconnect, device number 9 [ 897.344449][T16377] usb 4-1: config 9 has an invalid interface number: 236 but max is 1 [ 897.344832][T16389] usb 10-1: SerialNumber: syz [ 897.369426][T16377] usb 4-1: config 9 has no interface number 1 [ 897.370699][T16389] usb 10-1: config 0 descriptor?? [ 897.375598][T16377] usb 4-1: config 9 interface 236 has no altsetting 0 [ 897.386824][T16389] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 897.392268][T16377] usb 4-1: config 9 interface 0 has no altsetting 0 [ 897.405526][T16377] usb 4-1: New USB device found, idVendor=0471, idProduct=2093, bcdDevice=e6.1a [ 897.410108][T16389] usb 10-1: setting power ON [ 897.420710][T16377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.427171][T16389] dvb-usb: bulk message failed: -22 (2/0) [ 897.438983][T16377] usb 4-1: Product: syz [ 897.443273][T16377] usb 4-1: Manufacturer: syz [ 897.450476][T16377] usb 4-1: SerialNumber: syz [ 897.454805][T16389] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 897.473572][T16389] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 897.485205][T16389] usb 10-1: media controller created [ 897.522058][T16389] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 897.552709][T16389] usb 10-1: selecting invalid altsetting 6 [ 897.562836][T16389] usb 10-1: digital interface selection failed (-22) [ 897.572898][T16389] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 897.585436][T16389] usb 10-1: setting power OFF [ 897.605104][T18796] dvb-usb: bulk message failed: -22 (3/0) [ 897.620003][T16389] dvb-usb: bulk message failed: -22 (2/0) [ 897.631787][T16389] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 897.641545][T18796] dvb-usb: bulk message failed: -22 (37/0) [ 897.663325][T18796] dvb-usb: bulk message failed: -22 (3/0) [ 897.671088][T16389] (NULL device *): no alternate interface [ 897.736877][T16377] usb 4-1: USB disconnect, device number 6 [ 897.740123][T16389] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 897.752631][T18606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.804157][T16389] usb 10-1: USB disconnect, device number 7 [ 897.827375][T16374] usb 6-1: Service connection timeout for: 256 [ 897.837038][T16374] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 897.846187][T16374] ath9k_htc: Failed to initialize the device [ 897.863136][T16385] usb 6-1: ath9k_htc: USB layer deinitialized [ 898.019541][T18815] kvm: emulating exchange as write [ 898.155497][T18606] veth0_vlan: entered promiscuous mode [ 898.184807][T18606] veth1_vlan: entered promiscuous mode [ 898.280183][T18606] veth0_macvtap: entered promiscuous mode [ 898.309427][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4030'. [ 898.498413][T18606] veth1_macvtap: entered promiscuous mode [ 898.508096][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4030'. [ 898.605652][T18833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4034'. [ 898.647435][T18606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.655416][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4034'. [ 898.699279][T18606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.767459][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.797573][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.828818][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.840377][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.855428][T18839] loop9: detected capacity change from 0 to 164 [ 898.898113][T18839] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 898.986237][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.986262][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.070635][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.084116][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.274714][T16377] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 899.331625][T18849] loop7: detected capacity change from 0 to 1024 [ 899.340746][T18849] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (61418!=35945) [ 899.351241][T18849] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 899.364112][T18849] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 899.373325][T18849] EXT4-fs (loop7): orphan cleanup on readonly fs [ 899.380005][T18849] EXT4-fs error (device loop7): ext4_quota_enable:7124: inode #3: comm syz.7.4041: iget: bad i_size value: 1407374883559424 [ 899.395234][T18849] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.4041: Bad quota inode: 3, type: 0 [ 899.410924][T18849] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 899.440041][T18849] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 899.450493][T18849] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 899.655823][T16377] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 899.666021][T16377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.687472][T16377] usb 6-1: config 0 descriptor?? [ 899.702787][T16377] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 900.544304][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.666425][T16388] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 900.826534][T16388] usb 10-1: Using ep0 maxpacket: 32 [ 900.844626][T16388] usb 10-1: config 9 has an invalid interface number: 236 but max is 1 [ 900.884990][T16388] usb 10-1: config 9 has no interface number 1 [ 900.900671][T16388] usb 10-1: config 9 interface 236 has no altsetting 0 [ 900.909570][T16388] usb 10-1: config 9 interface 0 has no altsetting 0 [ 900.928706][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4046'. [ 900.938631][T16388] usb 10-1: New USB device found, idVendor=0471, idProduct=2093, bcdDevice=e6.1a [ 900.996085][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4046'. [ 901.501819][T16388] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.516381][T16388] usb 10-1: Product: syz [ 901.521020][T16388] usb 10-1: Manufacturer: syz [ 901.525741][T16388] usb 10-1: SerialNumber: syz [ 901.773813][T17448] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 901.793893][T16388] usb 10-1: USB disconnect, device number 8 [ 901.936700][T16385] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 901.946430][T16389] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 902.087007][T16385] usb 8-1: Using ep0 maxpacket: 8 [ 902.099944][T16385] usb 8-1: unable to get BOS descriptor or descriptor too short [ 902.108914][T16389] usb 4-1: Using ep0 maxpacket: 8 [ 902.120208][T18886] pim6reg: entered allmulticast mode [ 902.122459][T16389] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 902.132784][T18886] pim6reg: left allmulticast mode [ 902.134222][T16389] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 902.149591][T16385] usb 8-1: config 5 has an invalid interface number: 69 but max is 0 [ 902.161684][T16385] usb 8-1: config 5 has no interface number 0 [ 902.166864][T16377] gspca_stv06xx: HDCS-1020 sensor detected [ 902.168048][T16389] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 902.183637][T16385] usb 8-1: config 5 interface 69 altsetting 4 endpoint 0xA has an invalid bInterval 251, changing to 11 [ 902.194930][T16385] usb 8-1: config 5 interface 69 has no altsetting 0 [ 902.201727][T16389] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 902.211945][T16389] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.225371][T16389] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 902.241404][T16389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.249856][T16385] usb 8-1: string descriptor 0 read error: -22 [ 902.256550][T16385] usb 8-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=b6.f1 [ 902.266228][T16385] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.285597][T16385] appletouch 8-1:5.69: Could not find int-in endpoint [ 902.293712][T16385] appletouch 8-1:5.69: probe with driver appletouch failed with error -5 [ 902.305135][T16385] usbhid 8-1:5.69: couldn't find an input interrupt endpoint [ 902.342204][T18888] loop4: detected capacity change from 0 to 1024 [ 902.351528][T18888] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (61418!=35945) [ 902.366228][T18888] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 902.381023][T18888] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 902.392115][T18888] EXT4-fs (loop4): orphan cleanup on readonly fs [ 902.401830][T18888] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #3: comm syz.4.4054: iget: bad i_size value: 1407374883559424 [ 902.418357][T18888] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.4054: Bad quota inode: 3, type: 0 [ 902.431962][T18888] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 902.448575][T18888] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 902.458398][T18888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 902.493652][T16385] usb 8-1: USB disconnect, device number 10 [ 902.605359][T16389] usb 4-1: usb_control_msg returned -32 [ 902.616761][T16389] usbtmc 4-1:16.0: can't read capabilities [ 902.973687][T16377] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 903.154533][T16377] usb 6-1: USB disconnect, device number 6 [ 903.472782][T18606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.723054][T18905] syzkaller1: entered promiscuous mode [ 903.741525][T18905] syzkaller1: entered allmulticast mode [ 904.745427][T18911] loop7: detected capacity change from 0 to 512 [ 904.752811][T18911] EXT4-fs: Ignoring removed oldalloc option [ 904.763987][T18911] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 904.783856][T16398] usb 4-1: USB disconnect, device number 7 [ 904.821090][T18911] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.4057: invalid indirect mapped block 4294967295 (level 0) [ 904.859608][T18911] EXT4-fs (loop7): Remounting filesystem read-only [ 904.867786][T18911] EXT4-fs (loop7): 1 orphan inode deleted [ 904.873566][T18911] EXT4-fs (loop7): 1 truncate cleaned up [ 904.882101][T18911] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.915759][T18918] loop4: detected capacity change from 0 to 256 [ 905.030886][T18925] loop5: detected capacity change from 0 to 164 [ 905.121505][T18925] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 905.308321][T18928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.456446][T18931] loop3: detected capacity change from 0 to 512 [ 905.467636][T18931] EXT4-fs: Ignoring removed mblk_io_submit option [ 905.474210][T18931] EXT4-fs: Ignoring removed bh option [ 905.559190][T18932] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 905.774948][T18928] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 905.827239][T18931] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 905.863114][T18931] EXT4-fs (loop3): 1 truncate cleaned up [ 905.870262][T18931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.185029][T15211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.190562][T18938] loop5: detected capacity change from 0 to 1024 [ 906.203306][T18938] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (61418!=35945) [ 906.240031][T18938] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 906.316425][T18938] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 906.324744][T18938] EXT4-fs (loop5): orphan cleanup on readonly fs [ 906.352626][T18938] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #3: comm syz.5.4068: iget: bad i_size value: 1407374883559424 [ 906.457800][T18938] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.4068: Bad quota inode: 3, type: 0 [ 906.474204][T18938] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 906.494998][T18938] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 906.510336][T18938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 907.248856][T18945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 907.444218][T15775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.576405][T16389] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 907.693096][T18967] loop5: detected capacity change from 0 to 1024 [ 907.701455][T18967] EXT4-fs: Ignoring removed nobh option [ 907.707239][T18967] EXT4-fs: Ignoring removed bh option [ 907.725901][T18967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.738487][T16389] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.738517][T16389] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 907.739885][T16389] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 907.758264][T16398] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 907.775769][T16389] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 907.783987][T16389] usb 10-1: SerialNumber: syz [ 908.023403][T16389] usb 10-1: 0:2 : does not exist [ 908.029376][T16389] usb 10-1: unit 255 not found! [ 908.063670][T16389] usb 10-1: 5:0: cannot get min/max values for control 1 (id 5) [ 908.176105][T18971] overlayfs: conflicting lowerdir path [ 908.451151][T16398] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 908.667475][T16398] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.707137][T16398] usb 4-1: Product: syz [ 908.711369][T16398] usb 4-1: Manufacturer: syz [ 908.732562][T18973] loop4: detected capacity change from 0 to 164 [ 908.752823][T16398] usb 4-1: SerialNumber: syz [ 908.773991][T18973] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 908.795174][T16398] usb 4-1: config 0 descriptor?? [ 908.830308][T16389] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5) [ 908.850143][T15775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.887631][T16389] usb 10-1: USB disconnect, device number 9 [ 908.980430][T18975] loop9: detected capacity change from 0 to 1024 [ 909.009368][T18975] EXT4-fs: Ignoring removed nobh option [ 909.015008][T18975] EXT4-fs: Ignoring removed bh option [ 909.065477][T16398] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 909.095608][T18975] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 909.599969][T18982] overlayfs: conflicting lowerdir path [ 910.190413][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.571716][T18990] loop7: detected capacity change from 0 to 1024 [ 910.583619][T18990] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (61418!=35945) [ 910.593772][T18990] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 910.631785][T18990] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 910.643348][T18990] EXT4-fs (loop7): orphan cleanup on readonly fs [ 910.652621][T18990] EXT4-fs error (device loop7): ext4_quota_enable:7124: inode #3: comm syz.7.4085: iget: bad i_size value: 1407374883559424 [ 910.669512][T18990] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.4085: Bad quota inode: 3, type: 0 [ 910.683025][T18990] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 910.731152][T18990] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 910.754129][T18990] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 910.803797][T15378] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.874004][T18999] loop4: detected capacity change from 0 to 256 [ 910.916702][T16387] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 911.066918][T16387] usb 6-1: Using ep0 maxpacket: 16 [ 911.082131][T16387] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.120411][T19003] pim6reg: entered allmulticast mode [ 911.564438][T16398] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 911.615832][T16398] usb 4-1: USB disconnect, device number 8 [ 911.712695][T19007] loop9: detected capacity change from 0 to 2048 [ 911.744801][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.755820][T16387] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.769761][T16387] usb 6-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 911.779176][T16387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.786470][T19007] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 911.815689][T16387] usb 6-1: config 0 descriptor?? [ 911.822332][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 911.822352][ T30] audit: type=1800 audit(14852623.301:2909): pid=19007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4089" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 911.983849][T19013] block device autoloading is deprecated and will be removed. [ 912.074007][T15378] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.324528][T16387] topre 0003:0853:0148.000A: unknown main item tag 0x0 [ 912.332430][T16387] topre 0003:0853:0148.000A: unknown main item tag 0x0 [ 912.339820][T16387] topre 0003:0853:0148.000A: unknown main item tag 0x0 [ 912.349594][T16387] topre 0003:0853:0148.000A: unknown main item tag 0x0 [ 912.356877][T16387] topre 0003:0853:0148.000A: unknown main item tag 0x0 [ 912.364093][T16387] topre 0003:0853:0148.000A: unknown main item tag 0x0 [ 912.463689][T19023] loop7: detected capacity change from 0 to 512 [ 912.488119][T19023] EXT4-fs: Ignoring removed oldalloc option [ 912.544418][T19023] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 912.611516][T19023] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.4091: invalid indirect mapped block 4294967295 (level 0) [ 912.638604][T19023] EXT4-fs (loop7): Remounting filesystem read-only [ 912.647166][T19023] EXT4-fs (loop7): 1 orphan inode deleted [ 912.652975][T19023] EXT4-fs (loop7): 1 truncate cleaned up [ 912.671175][T19023] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.318332][T16387] topre 0003:0853:0148.000A: unknown main item tag 0x0 [ 913.326891][T16387] topre 0003:0853:0148.000A: unknown main item tag 0x0 [ 913.334686][T16387] topre 0003:0853:0148.000A: unknown main item tag 0x0 [ 913.341777][T16387] topre 0003:0853:0148.000A: unknown main item tag 0x0 [ 913.353339][T16387] topre 0003:0853:0148.000A: hidraw0: USB HID v0.49 Device [HID 0853:0148] on usb-dummy_hcd.5-1/input0 [ 913.548199][T19035] loop5: detected capacity change from 0 to 1024 [ 913.561699][T19035] EXT4-fs: Ignoring removed nobh option [ 913.580848][T19035] EXT4-fs: Ignoring removed bh option [ 913.614907][T19035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 914.235564][T19041] overlayfs: conflicting lowerdir path [ 914.924226][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.930479][T16387] usb 6-1: USB disconnect, device number 7 [ 915.442304][T15775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.818073][T19080] loop7: detected capacity change from 0 to 256 [ 916.816759][T16387] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 916.997182][T16387] usb 8-1: Using ep0 maxpacket: 32 [ 917.034939][T16387] usb 8-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 917.066438][T16387] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.074599][T16387] usb 8-1: Product: syz [ 917.079015][T16387] usb 8-1: Manufacturer: syz [ 917.083650][T16387] usb 8-1: SerialNumber: syz [ 917.099312][T16387] usb 8-1: config 0 descriptor?? [ 917.323042][T16387] ums-onetouch 8-1:0.0: USB Mass Storage device detected [ 917.393764][T16387] usb 8-1: USB disconnect, device number 11 [ 918.737589][T19141] loop3: detected capacity change from 0 to 164 [ 918.749836][T19141] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 918.966732][ T5911] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 919.215548][ T5911] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 919.263365][ T5911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.311316][ T5911] usb 8-1: Product: syz [ 919.340007][ T5911] usb 8-1: Manufacturer: syz [ 919.368328][ T5911] usb 8-1: SerialNumber: syz [ 919.495225][ T5911] usb 8-1: config 0 descriptor?? [ 919.726987][ T5911] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 920.022150][T19167] loop5: detected capacity change from 0 to 256 [ 920.356726][T16387] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 921.036442][T16387] usb 6-1: Using ep0 maxpacket: 32 [ 921.050312][T16387] usb 6-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 921.060897][T16387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.071938][T16387] usb 6-1: Product: syz [ 921.077456][T16387] usb 6-1: Manufacturer: syz [ 921.083433][T16387] usb 6-1: SerialNumber: syz [ 921.095064][T16387] usb 6-1: config 0 descriptor?? [ 921.918202][T16387] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 922.106632][T16387] usb 6-1: USB disconnect, device number 8 [ 922.147866][T19191] loop3: detected capacity change from 0 to 164 [ 922.165104][T19191] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 922.227079][ T5856] Bluetooth: hci3: command 0xfc11 tx timeout [ 922.236254][T17448] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 923.564965][ T5911] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 923.588316][ T5911] usb 8-1: USB disconnect, device number 12 [ 923.736688][T19223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4156'. [ 923.777549][T19226] loop9: detected capacity change from 0 to 256 [ 923.797844][T19229] loop7: detected capacity change from 0 to 164 [ 923.813973][T19229] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 924.123700][T16387] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 924.196525][ T5911] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 924.301643][T16387] usb 10-1: Using ep0 maxpacket: 32 [ 924.356969][T16387] usb 10-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 924.367349][T16387] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.367833][ T5911] usb 6-1: too many configurations: 228, using maximum allowed: 8 [ 924.375570][T16387] usb 10-1: Product: syz [ 924.413933][ T5911] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 924.416429][T16387] usb 10-1: Manufacturer: syz [ 924.436787][T16387] usb 10-1: SerialNumber: syz [ 924.441915][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.457327][T16387] usb 10-1: config 0 descriptor?? [ 924.459825][ T5911] usb 6-1: Product: syz [ 924.468760][ T5911] usb 6-1: Manufacturer: syz [ 924.473426][ T5911] usb 6-1: SerialNumber: syz [ 924.547704][ T5911] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 924.587749][T16374] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 924.767206][T16387] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 924.874863][T16387] usb 10-1: USB disconnect, device number 10 [ 925.050210][T19248] fuse: Bad value for 'fd' [ 925.208170][T19248] loop3: detected capacity change from 0 to 1024 [ 925.228956][T19248] EXT4-fs: Ignoring removed bh option [ 925.347437][ T5911] usb 6-1: USB disconnect, device number 9 [ 925.432460][T19248] EXT4-fs: Mount option(s) incompatible with ext2 [ 925.827345][T19259] loop4: detected capacity change from 0 to 1024 [ 925.858538][T19259] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 925.909078][T16374] usb 6-1: Service connection timeout for: 256 [ 925.915465][T16374] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 926.020878][T19260] loop9: detected capacity change from 0 to 128 [ 926.035261][T19260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 926.042422][T19260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 926.709200][T19260] EXT4-fs (loop9): Test dummy encryption mode enabled [ 926.741687][T19260] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 926.897847][T16374] ath9k_htc: Failed to initialize the device [ 926.904794][ T5911] usb 6-1: ath9k_htc: USB layer deinitialized [ 929.422339][T19259] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4166: Invalid block bitmap block 0 in block_group 0 [ 929.437282][T19259] Quota error (device loop4): write_blk: dquota write failed [ 929.444777][T19259] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 929.454838][T19259] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4166: Failed to acquire dquot type 0 [ 929.470885][T19259] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.4166: Freeing blocks not in datazone - block = 0, count = 4096 [ 929.485731][T19259] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4166: Invalid inode bitmap blk 0 in block_group 0 [ 929.499227][ T13] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 929.508534][T19259] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 929.518422][T19259] EXT4-fs (loop4): 1 orphan inode deleted [ 929.526184][T19259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 929.581265][ T13] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 929.722938][T19281] loop3: detected capacity change from 0 to 164 [ 929.734277][T19281] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 929.779959][T19282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4171'. [ 929.793039][T19282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4171'. [ 929.838250][T15378] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 930.622917][T18606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.815379][T19291] netlink: 892 bytes leftover after parsing attributes in process `syz.4.4174'. [ 930.929256][T19297] loop5: detected capacity change from 0 to 2048 [ 930.969245][T19297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 931.022814][ T30] audit: type=1800 audit(15639842.494:2910): pid=19297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4177" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 931.888917][T19307] loop3: detected capacity change from 0 to 128 [ 931.896916][T19307] EXT4-fs: Ignoring removed nomblk_io_submit option [ 931.903638][T19307] EXT4-fs: Ignoring removed nomblk_io_submit option [ 931.925528][T19307] EXT4-fs (loop3): Test dummy encryption mode enabled [ 932.398871][T15775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.711038][T19319] loop7: detected capacity change from 0 to 1024 [ 932.725684][T19319] EXT4-fs: Ignoring removed bh option [ 933.105521][T19319] EXT4-fs: Mount option(s) incompatible with ext2 [ 933.121443][T19307] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 933.537513][T15211] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 933.625334][T19321] syzkaller0: entered promiscuous mode [ 933.632281][T19321] syzkaller0: entered allmulticast mode [ 933.991533][T19328] loop3: detected capacity change from 0 to 164 [ 934.057364][T19328] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 934.428274][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4190'. [ 934.487894][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4190'. [ 935.415991][T19353] loop5: detected capacity change from 0 to 512 [ 935.428202][T19353] EXT4-fs: Ignoring removed mblk_io_submit option [ 935.434774][T19353] EXT4-fs: Ignoring removed bh option [ 935.454790][T19353] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 935.605758][T19353] EXT4-fs (loop5): 1 truncate cleaned up [ 935.625130][T19353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.040432][T15775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.275987][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.141780][T19360] loop3: detected capacity change from 0 to 2048 [ 938.203638][T19360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 938.240117][T19366] loop5: detected capacity change from 0 to 256 [ 938.285716][ T30] audit: type=1800 audit(15639849.764:2911): pid=19360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4194" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 938.321321][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4197'. [ 938.648427][T15211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.676742][T16387] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 938.828915][T19391] tipc: Enabled bearer , priority 0 [ 938.836350][T16387] usb 6-1: Using ep0 maxpacket: 32 [ 938.848920][T16387] usb 6-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 938.862578][T19391] syzkaller0: entered promiscuous mode [ 938.868457][T16387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.879321][T19391] syzkaller0: entered allmulticast mode [ 938.891333][T19390] tipc: Resetting bearer [ 938.906456][T16387] usb 6-1: Product: syz [ 938.910704][T16387] usb 6-1: Manufacturer: syz [ 938.915368][T16387] usb 6-1: SerialNumber: syz [ 938.989287][T16387] usb 6-1: config 0 descriptor?? [ 938.998088][T19390] tipc: Disabling bearer [ 939.155477][T19394] syzkaller0: entered promiscuous mode [ 939.174121][T19394] syzkaller0: entered allmulticast mode [ 939.199976][T16387] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 939.285865][T19400] loop9: detected capacity change from 0 to 512 [ 939.296100][T16387] usb 6-1: USB disconnect, device number 10 [ 939.305534][T19400] EXT4-fs: Ignoring removed mblk_io_submit option [ 939.316227][T19400] EXT4-fs: Ignoring removed bh option [ 939.326736][T19400] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 939.377132][T19400] EXT4-fs (loop9): 1 truncate cleaned up [ 939.385833][T19400] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.870029][T19419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4213'. [ 940.001137][T15378] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.051466][T19421] loop3: detected capacity change from 0 to 512 [ 940.076939][T19421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 942.648309][T19421] bridge0: port 3(syz_tun) entered blocking state [ 942.656804][T19421] bridge0: port 3(syz_tun) entered disabled state [ 942.663456][T19421] syz_tun: entered allmulticast mode [ 942.695764][T19421] syz_tun: entered promiscuous mode [ 942.705601][T19425] syz_tun: left allmulticast mode [ 942.724174][T19425] syz_tun: left promiscuous mode [ 942.737063][T19425] bridge0: port 3(syz_tun) entered disabled state [ 942.752242][T19425] bridge_slave_0: left allmulticast mode [ 942.765543][T19425] bridge_slave_0: left promiscuous mode [ 942.775008][T19425] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.820741][T19425] bridge_slave_1: left allmulticast mode [ 942.831597][T19425] bridge_slave_1: left promiscuous mode [ 942.839408][T19425] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.858615][T19425] bond0: (slave bond_slave_0): Releasing backup interface [ 942.868910][T19425] bond0: (slave bond_slave_1): Releasing backup interface [ 942.878345][T19425] team_slave_0: left promiscuous mode [ 942.884131][T19425] team_slave_0: left allmulticast mode [ 942.894260][T19425] team0: Port device team_slave_0 removed [ 942.902442][T19425] team_slave_1: left promiscuous mode [ 942.912173][T19425] team_slave_1: left allmulticast mode [ 942.922306][T19425] team0: Port device team_slave_1 removed [ 942.943558][T19425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.965083][T19430] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4216'. [ 943.021753][T19441] tipc: Enabled bearer , priority 0 [ 943.067507][T19441] tipc: Resetting bearer [ 943.103593][T15211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.125682][T19438] tipc: Disabling bearer [ 943.731426][T19466] loop4: detected capacity change from 0 to 512 [ 943.742834][T19466] EXT4-fs: Ignoring removed mblk_io_submit option [ 943.749858][T19466] EXT4-fs: Ignoring removed bh option [ 943.831389][T19466] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 943.891932][T19466] EXT4-fs (loop4): 1 truncate cleaned up [ 943.907731][T19466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.206741][ T30] audit: type=1326 audit(15902255.671:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19451 comm="syz.5.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7fc00000 [ 944.241523][ T30] audit: type=1326 audit(15902255.671:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19451 comm="syz.5.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f579358e929 code=0x7fc00000 [ 944.272977][ T30] audit: type=1326 audit(15902255.671:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19451 comm="syz.5.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7fc00000 [ 944.415698][ T30] audit: type=1326 audit(15902255.671:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19451 comm="syz.5.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7fc00000 [ 944.438024][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.445868][ T30] audit: type=1326 audit(15902255.671:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19451 comm="syz.5.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7fc00000 [ 944.489018][ T30] audit: type=1326 audit(15902255.671:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19451 comm="syz.5.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7fc00000 [ 944.540570][ T30] audit: type=1326 audit(15902255.671:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19451 comm="syz.5.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7fc00000 [ 944.554774][T18606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.574667][T19473] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4229'. [ 944.594727][T19473] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4229'. [ 944.616451][ T30] audit: type=1326 audit(15902255.671:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19451 comm="syz.5.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7fc00000 [ 944.639201][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.650044][T19477] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4229'. [ 944.736416][ T30] audit: type=1326 audit(15902255.671:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19451 comm="syz.5.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7fc00000 [ 944.758727][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.784917][T19476] loop9: detected capacity change from 0 to 512 [ 944.795149][T19480] netlink: 'syz.7.4230': attribute type 1 has an invalid length. [ 944.798670][T19476] EXT4-fs: Ignoring removed mblk_io_submit option [ 944.826649][T19476] EXT4-fs: Ignoring removed bh option [ 944.843032][ T30] audit: type=1326 audit(15902255.671:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19451 comm="syz.5.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579358e929 code=0x7fc00000 [ 944.846528][T19481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 944.894530][T19476] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 944.956860][T19476] EXT4-fs (loop9): 1 truncate cleaned up [ 944.967339][T19480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.987905][T19476] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 945.255715][T19504] loop7: detected capacity change from 0 to 2048 [ 945.334577][T19504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.467296][T15378] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.754112][T19509] loop3: detected capacity change from 0 to 512 [ 945.766731][T19509] EXT4-fs: Ignoring removed mblk_io_submit option [ 945.773346][T19509] EXT4-fs: Ignoring removed bh option [ 945.806944][T19509] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 945.916485][T19509] EXT4-fs (loop3): 1 truncate cleaned up [ 945.933038][T19509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.310665][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.388612][T15211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.505863][T19518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 946.656625][T19525] tipc: Enabled bearer , priority 0 [ 946.668599][T19529] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4247'. [ 946.681362][T19525] tipc: Resetting bearer [ 946.691959][T19524] tipc: Disabling bearer [ 947.074093][T19548] loop5: detected capacity change from 0 to 164 [ 947.091045][T19546] loop9: detected capacity change from 0 to 2048 [ 947.108116][T19548] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 947.151156][T19546] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.395137][T19553] random: crng reseeded on system resumption [ 947.646212][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4255'. [ 947.935635][T19569] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4256'. [ 948.078706][T15378] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.197904][T19574] netlink: 'syz.3.4261': attribute type 29 has an invalid length. [ 948.219989][T19574] netlink: 'syz.3.4261': attribute type 29 has an invalid length. [ 948.989115][T19595] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4266'. [ 949.223404][T19594] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4266'. [ 949.828386][T17450] Bluetooth: hci3: Frame reassembly failed (-84) [ 949.914012][T19617] warning: `syz.4.4275' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 950.820323][T19638] random: crng reseeded on system resumption [ 951.151900][T19644] veth0_vlan: entered allmulticast mode [ 951.545695][T19644] veth0_vlan: left promiscuous mode [ 951.661413][T19644] veth0_vlan: entered promiscuous mode [ 951.856717][T17448] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 953.202313][T19672] syzkaller0: entered promiscuous mode [ 953.221366][T19672] syzkaller0: entered allmulticast mode [ 953.249654][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4297'. [ 954.780515][ T5911] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 954.972794][ T5911] usb 8-1: Using ep0 maxpacket: 16 [ 954.983715][ T5911] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.995107][ T5911] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 955.004764][ T5911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.016528][ T5911] usb 8-1: config 0 descriptor?? [ 955.667264][ T5911] usbhid 8-1:0.0: can't add hid device: -71 [ 955.673370][ T5911] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 955.701598][ T5911] usb 8-1: USB disconnect, device number 13 [ 956.426510][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4305'. [ 956.563035][T17448] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 957.045621][T19712] fuse: Bad value for 'fd' [ 958.284318][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 960.307494][T17448] Bluetooth: hci3: command 0x1003 tx timeout [ 960.315466][ T5856] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 960.527891][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4337'. [ 960.537517][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4337'. [ 962.702521][T19829] loop9: detected capacity change from 0 to 1024 [ 962.710273][T19829] EXT4-fs: Ignoring removed bh option [ 962.716914][T19829] EXT4-fs: Mount option(s) incompatible with ext2 [ 964.680791][T19857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4363'. [ 965.298325][T19862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4370'. [ 965.350097][T19863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4370'. [ 965.810228][T12672] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.981986][T12672] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.011266][T19887] loop4: detected capacity change from 0 to 512 [ 966.043932][T17448] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 966.063791][T17448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 966.078898][T17448] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 966.106593][T17448] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 966.122183][T12672] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.137744][T17448] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 966.152829][T19887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.215466][T19887] bridge0: port 3(syz_tun) entered blocking state [ 966.223583][T19887] bridge0: port 3(syz_tun) entered disabled state [ 966.230534][T19887] syz_tun: entered allmulticast mode [ 966.238467][T19887] syz_tun: entered promiscuous mode [ 966.245034][T19887] bridge0: port 3(syz_tun) entered blocking state [ 966.251659][T19887] bridge0: port 3(syz_tun) entered forwarding state [ 966.300362][T12672] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.379768][T19887] syz_tun: left allmulticast mode [ 966.384973][T19887] syz_tun: left promiscuous mode [ 966.407237][T19887] bridge0: port 3(syz_tun) entered disabled state [ 966.431996][T19887] bridge_slave_0: left allmulticast mode [ 966.486648][T19887] bridge_slave_0: left promiscuous mode [ 966.496643][T19887] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.537885][T19887] bridge_slave_1: left allmulticast mode [ 966.543628][T19887] bridge_slave_1: left promiscuous mode [ 966.564602][T19887] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.578361][T19887] bond0: (slave bond_slave_0): Releasing backup interface [ 966.590700][T19887] bond0: (slave bond_slave_1): Releasing backup interface [ 966.610839][T19887] team0: Port device team_slave_0 removed [ 966.642133][T19887] team0: Port device team_slave_1 removed [ 966.660618][T19887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.668402][T19887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.679477][T19887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.687581][T19887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.000510][T18606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.226209][T19925] loop3: detected capacity change from 0 to 512 [ 967.237949][T19925] EXT4-fs: Ignoring removed mblk_io_submit option [ 967.244573][T19925] EXT4-fs: Ignoring removed bh option [ 967.315234][T19925] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 967.359449][T19925] EXT4-fs (loop3): 1 truncate cleaned up [ 967.377556][T19925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.863915][T15211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.226794][ T5856] Bluetooth: hci3: command tx timeout [ 968.366493][T19951] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4403'. [ 968.572669][ T5911] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 968.746673][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 968.760434][ T5911] usb 4-1: unable to get BOS descriptor or descriptor too short [ 968.769119][ T5911] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 968.776963][ T5911] usb 4-1: can't read configurations, error -71 [ 969.042067][T12672] bond0 (unregistering): Released all slaves [ 969.089689][T19889] chnl_net:caif_netlink_parms(): no params data found [ 969.257103][T12672] tipc: Left network mode [ 969.491703][T19967] loop9: detected capacity change from 0 to 1024 [ 969.518660][T19967] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (61418!=35945) [ 969.550691][T19971] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 969.558307][T19967] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 969.618633][T19967] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 969.630446][T19967] EXT4-fs (loop9): orphan cleanup on readonly fs [ 969.637472][T19967] EXT4-fs error (device loop9): ext4_quota_enable:7124: inode #3: comm syz.9.4410: iget: bad i_size value: 1407374883559424 [ 969.643702][T19889] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.666902][T19967] EXT4-fs error (device loop9): ext4_quota_enable:7127: comm syz.9.4410: Bad quota inode: 3, type: 0 [ 969.698776][T19889] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.714371][T19967] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 969.768184][T19889] bridge_slave_0: entered allmulticast mode [ 969.790875][T19889] bridge_slave_0: entered promiscuous mode [ 969.806609][T19967] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 969.822101][T19967] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 969.848217][T19889] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.874576][T19889] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.895753][T19889] bridge_slave_1: entered allmulticast mode [ 969.903565][T19986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4418'. [ 969.904642][T19889] bridge_slave_1: entered promiscuous mode [ 970.070537][T12672] hsr_slave_1: left promiscuous mode [ 970.125660][T12672] dummy0: left allmulticast mode [ 970.140486][T12672] veth1_macvtap: left promiscuous mode [ 970.146116][T12672] veth0_macvtap: left promiscuous mode [ 970.152940][T12672] veth1_vlan: left promiscuous mode [ 970.158551][T12672] veth0_vlan: left promiscuous mode [ 970.295454][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4421'. [ 970.307515][ T5856] Bluetooth: hci3: command tx timeout [ 970.393571][T19997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4421'. [ 970.432119][T15378] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.943027][T20001] loop9: detected capacity change from 0 to 512 [ 970.956913][T20001] EXT4-fs: Ignoring removed oldalloc option [ 971.008940][T20001] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 971.075818][T20001] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.4422: invalid indirect mapped block 4294967295 (level 0) [ 971.104944][T20001] EXT4-fs (loop9): Remounting filesystem read-only [ 971.114313][T20001] EXT4-fs (loop9): 1 orphan inode deleted [ 971.120262][T20001] EXT4-fs (loop9): 1 truncate cleaned up [ 971.161124][T20001] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.387246][ T5856] Bluetooth: hci3: command tx timeout [ 972.617313][T15378] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.866109][T19889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.901085][T19889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.326679][T19889] team0: Port device team_slave_0 added [ 973.351761][T19889] team0: Port device team_slave_1 added [ 973.373932][T20024] loop4: detected capacity change from 0 to 22 [ 973.393700][T20024] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 973.418242][T20024] romfs: bad initial checksum on dev loop4. [ 973.481125][T19889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.496881][T19889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.530953][T19889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.560329][T19889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.573403][T19889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.624497][T19889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.812140][T19889] hsr_slave_0: entered promiscuous mode [ 973.833442][T19889] hsr_slave_1: entered promiscuous mode [ 973.841325][T19889] debugfs: 'hsr0' already exists in 'hsr' [ 973.847365][T19889] Cannot create hsr debugfs directory [ 973.976461][T20032] syzkaller0: entered promiscuous mode [ 973.982190][T20032] syzkaller0: entered allmulticast mode [ 974.066376][T20024] loop4: detected capacity change from 0 to 32768 [ 974.122520][ T5911] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 974.204593][T20024] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 974.306360][ T5911] usb 6-1: Using ep0 maxpacket: 32 [ 974.319220][ T5911] usb 6-1: unable to get BOS descriptor or descriptor too short [ 974.348387][ T5911] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 974.356041][ T5911] usb 6-1: can't read configurations, error -71 [ 974.472397][ T5856] Bluetooth: hci3: command tx timeout [ 975.355068][T20024] [ 975.357459][T20024] ====================================================== [ 975.364499][T20024] WARNING: possible circular locking dependency detected [ 975.371558][T20024] 6.16.0-rc6-next-20250716-syzkaller #0 Not tainted [ 975.378180][T20024] ------------------------------------------------------ [ 975.385227][T20024] syz.4.4432/20024 is trying to acquire lock: [ 975.391318][T20024] ffff888033e0c618 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_setattr+0x969/0x1b40 [ 975.400348][T20024] [ 975.400348][T20024] but task is already holding lock: [ 975.407734][T20024] ffff88804ba522e0 (&oi->ip_alloc_sem){+.+.}-{4:4}, at: ocfs2_setattr+0x95a/0x1b40 [ 975.417106][T20024] [ 975.417106][T20024] which lock already depends on the new lock. [ 975.417106][T20024] [ 975.427536][T20024] [ 975.427536][T20024] the existing dependency chain (in reverse order) is: [ 975.436764][T20024] [ 975.436764][T20024] -> #4 (&oi->ip_alloc_sem){+.+.}-{4:4}: [ 975.444634][T20024] lock_acquire+0x120/0x360 [ 975.449709][T20024] down_write+0x96/0x1f0 [ 975.454525][T20024] ocfs2_try_remove_refcount_tree+0xb6/0x320 [ 975.461064][T20024] ocfs2_xattr_set+0x595/0x11f0 [ 975.466476][T20024] ocfs2_set_acl+0x701/0x7b0 [ 975.471618][T20024] ocfs2_iop_set_acl+0x1aa/0x2a0 [ 975.477105][T20024] vfs_remove_acl+0x48c/0x700 [ 975.482348][T20024] ovl_workdir_create+0x4f3/0x7f0 [ 975.487936][T20024] ovl_get_workdir+0x32c/0x1740 [ 975.493352][T20024] ovl_fill_super+0x1365/0x35b0 [ 975.498847][T20024] get_tree_nodev+0xbb/0x150 [ 975.503995][T20024] vfs_get_tree+0x8f/0x2b0 [ 975.509065][T20024] do_new_mount+0x2a2/0x9e0 [ 975.514127][T20024] __se_sys_mount+0x317/0x410 [ 975.519377][T20024] do_syscall_64+0xfa/0x3b0 [ 975.524439][T20024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.530890][T20024] [ 975.530890][T20024] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}: [ 975.538791][T20024] lock_acquire+0x120/0x360 [ 975.543874][T20024] down_read+0x46/0x2e0 [ 975.548596][T20024] ocfs2_init_acl+0x2f9/0x720 [ 975.553836][T20024] ocfs2_mknod+0x1321/0x2050 [ 975.558977][T20024] ocfs2_mkdir+0x191/0x440 [ 975.559903][T20044] loop5: detected capacity change from 0 to 32768 [ 975.563943][T20024] vfs_mkdir+0x306/0x510 [ 975.563976][T20024] do_mkdirat+0x247/0x590 [ 975.564000][T20024] __x64_sys_mkdirat+0x87/0xa0 [ 975.564023][T20024] do_syscall_64+0xfa/0x3b0 [ 975.590411][T20024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.596863][T20024] [ 975.596863][T20024] -> #2 (jbd2_handle){++++}-{0:0}: [ 975.604202][T20024] lock_acquire+0x120/0x360 [ 975.609244][T20024] start_this_handle+0x1fa7/0x21c0 [ 975.614884][T20024] jbd2__journal_start+0x2c1/0x5b0 [ 975.620537][T20024] jbd2_journal_start+0x2a/0x40 [ 975.626012][T20024] ocfs2_start_trans+0x376/0x6d0 [ 975.631500][T20024] ocfs2_mknod+0xe93/0x2050 [ 975.636539][T20024] ocfs2_mkdir+0x191/0x440 [ 975.641481][T20024] vfs_mkdir+0x306/0x510 [ 975.646446][T20024] do_mkdirat+0x247/0x590 [ 975.651327][T20024] __x64_sys_mkdirat+0x87/0xa0 [ 975.656622][T20024] do_syscall_64+0xfa/0x3b0 [ 975.661668][T20024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.668107][T20024] [ 975.668107][T20024] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 975.676632][T20024] lock_acquire+0x120/0x360 [ 975.681675][T20024] down_read+0x46/0x2e0 [ 975.686360][T20024] ocfs2_start_trans+0x36a/0x6d0 [ 975.691829][T20024] ocfs2_mknod+0xe93/0x2050 [ 975.696864][T20024] ocfs2_mkdir+0x191/0x440 [ 975.701833][T20024] vfs_mkdir+0x306/0x510 [ 975.706608][T20024] do_mkdirat+0x247/0x590 [ 975.711460][T20024] __x64_sys_mkdirat+0x87/0xa0 [ 975.716835][T20024] do_syscall_64+0xfa/0x3b0 [ 975.721877][T20024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.728288][T20024] [ 975.728288][T20024] -> #0 (sb_internal#3){.+.+}-{0:0}: [ 975.735771][T20024] validate_chain+0xb9b/0x2140 [ 975.741070][T20024] __lock_acquire+0xab9/0xd20 [ 975.746298][T20024] lock_acquire+0x120/0x360 [ 975.751380][T20024] ocfs2_start_trans+0x26b/0x6d0 [ 975.756852][T20024] ocfs2_setattr+0x969/0x1b40 [ 975.762069][T20024] notify_change+0xb36/0xe40 [ 975.767197][T20024] ovl_workdir_create+0x658/0x7f0 [ 975.772750][T20024] ovl_get_workdir+0x32c/0x1740 [ 975.778144][T20024] ovl_fill_super+0x1365/0x35b0 [ 975.783540][T20024] get_tree_nodev+0xbb/0x150 [ 975.788659][T20024] vfs_get_tree+0x8f/0x2b0 [ 975.793610][T20024] do_new_mount+0x2a2/0x9e0 [ 975.798651][T20024] __se_sys_mount+0x317/0x410 [ 975.803867][T20024] do_syscall_64+0xfa/0x3b0 [ 975.808897][T20024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.815319][T20024] [ 975.815319][T20024] other info that might help us debug this: [ 975.815319][T20024] [ 975.825568][T20024] Chain exists of: [ 975.825568][T20024] sb_internal#3 --> &oi->ip_xattr_sem --> &oi->ip_alloc_sem [ 975.825568][T20024] [ 975.838810][T20024] Possible unsafe locking scenario: [ 975.838810][T20024] [ 975.846268][T20024] CPU0 CPU1 [ 975.851649][T20024] ---- ---- [ 975.857013][T20024] lock(&oi->ip_alloc_sem); [ 975.861600][T20024] lock(&oi->ip_xattr_sem); [ 975.868710][T20024] lock(&oi->ip_alloc_sem); [ 975.875824][T20024] rlock(sb_internal#3); [ 975.880159][T20024] [ 975.880159][T20024] *** DEADLOCK *** [ 975.880159][T20024] [ 975.888304][T20024] 5 locks held by syz.4.4432/20024: [ 975.893492][T20024] #0: ffff88803818a0e0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970 [ 975.903709][T20024] #1: ffff888033e0c428 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 975.912984][T20024] #2: ffff88804ba51800 (&sb->s_type->i_mutex_key#33/1){+.+.}-{4:4}, at: ovl_workdir_create+0x133/0x7f0 [ 975.924207][T20024] #3: ffff88804ba52640 (&sb->s_type->i_mutex_key#35){+.+.}-{4:4}, at: ovl_workdir_create+0x5f7/0x7f0 [ 975.935201][T20024] #4: ffff88804ba522e0 (&oi->ip_alloc_sem){+.+.}-{4:4}, at: ocfs2_setattr+0x95a/0x1b40 [ 975.944971][T20024] [ 975.944971][T20024] stack backtrace: [ 975.950873][T20024] CPU: 0 UID: 0 PID: 20024 Comm: syz.4.4432 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 975.950898][T20024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 975.950909][T20024] Call Trace: [ 975.950916][T20024] [ 975.950923][T20024] dump_stack_lvl+0x189/0x250 [ 975.950947][T20024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 975.950965][T20024] ? __pfx__printk+0x10/0x10 [ 975.950987][T20024] ? print_lock_name+0xde/0x100 [ 975.951009][T20024] print_circular_bug+0x2ee/0x310 [ 975.951028][T20024] check_noncircular+0x134/0x160 [ 975.951047][T20024] validate_chain+0xb9b/0x2140 [ 975.951069][T20024] ? lock_is_held_type+0x137/0x190 [ 975.951089][T20024] __lock_acquire+0xab9/0xd20 [ 975.951115][T20024] ? ocfs2_setattr+0x969/0x1b40 [ 975.951136][T20024] lock_acquire+0x120/0x360 [ 975.951158][T20024] ? ocfs2_setattr+0x969/0x1b40 [ 975.951185][T20024] ocfs2_start_trans+0x26b/0x6d0 [ 975.951201][T20024] ? ocfs2_setattr+0x969/0x1b40 [ 975.951224][T20024] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 975.951246][T20024] ocfs2_setattr+0x969/0x1b40 [ 975.951272][T20024] ? __pfx_ocfs2_setattr+0x10/0x10 [ 975.951295][T20024] ? preempt_schedule_irq+0xde/0x150 [ 975.951312][T20024] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 975.951329][T20024] ? preempt_schedule_irq+0xde/0x150 [ 975.951348][T20024] ? irqentry_exit+0x74/0x90 [ 975.951366][T20024] ? lockdep_hardirqs_on+0x9c/0x150 [ 975.951386][T20024] ? __pfx_ocfs2_setattr+0x10/0x10 [ 975.951406][T20024] ? __pfx_ocfs2_setattr+0x10/0x10 [ 975.951427][T20024] ? notify_change+0xb24/0xe40 [ 975.951447][T20024] ? ocfs2_setattr+0x10/0x1b40 [ 975.951468][T20024] ? __pfx_ocfs2_setattr+0x10/0x10 [ 975.951490][T20024] notify_change+0xb36/0xe40 [ 975.951512][T20024] ovl_workdir_create+0x658/0x7f0 [ 975.951536][T20024] ? __pfx_ovl_workdir_create+0x10/0x10 [ 975.951561][T20024] ? mnt_get_write_access+0x244/0x2a0 [ 975.951581][T20024] ovl_get_workdir+0x32c/0x1740 [ 975.951603][T20024] ? __pfx_ovl_get_workdir+0x10/0x10 [ 975.951623][T20024] ? __lock_acquire+0xab9/0xd20 [ 975.951653][T20024] ? do_raw_spin_lock+0x121/0x290 [ 975.951676][T20024] ? do_raw_spin_unlock+0x122/0x240 [ 975.951695][T20024] ? _raw_spin_unlock+0x28/0x50 [ 975.951711][T20024] ? ovl_inuse_trylock+0xae/0xf0 [ 975.951730][T20024] ovl_fill_super+0x1365/0x35b0 [ 975.951761][T20024] ? __pfx_ovl_fill_super+0x10/0x10 [ 975.951778][T20024] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 975.951798][T20024] ? preempt_schedule+0xae/0xc0 [ 975.951815][T20024] ? __pfx___mutex_lock+0x10/0x10 [ 975.951834][T20024] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 975.951853][T20024] ? preempt_schedule+0xae/0xc0 [ 975.951870][T20024] ? __raw_spin_lock_init+0x45/0x100 [ 975.951894][T20024] ? sget_fc+0x962/0xa40 [ 975.951912][T20024] ? __pfx_set_anon_super_fc+0x10/0x10 [ 975.951930][T20024] ? __pfx_ovl_fill_super+0x10/0x10 [ 975.951949][T20024] get_tree_nodev+0xbb/0x150 [ 975.951969][T20024] vfs_get_tree+0x8f/0x2b0 [ 975.951990][T20024] do_new_mount+0x2a2/0x9e0 [ 975.952014][T20024] ? ns_capable+0x8a/0xf0 [ 975.952027][T20024] ? __pfx_do_new_mount+0x10/0x10 [ 975.952049][T20024] ? path_mount+0x61c/0xfe0 [ 975.952069][T20024] ? user_path_at+0x44/0x60 [ 975.952089][T20024] __se_sys_mount+0x317/0x410 [ 975.952114][T20024] ? __pfx___se_sys_mount+0x10/0x10 [ 975.952135][T20024] ? rcu_is_watching+0x15/0xb0 [ 975.952152][T20024] ? do_syscall_64+0xbe/0x3b0 [ 975.952171][T20024] ? __x64_sys_mount+0x20/0xc0 [ 975.952194][T20024] do_syscall_64+0xfa/0x3b0 [ 975.952215][T20024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.952229][T20024] ? asm_sysvec_call_function_single+0x1a/0x20 [ 975.952245][T20024] ? clear_bhb_loop+0x60/0xb0 [ 975.952262][T20024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.952277][T20024] RIP: 0033:0x7f8c79b8e929 [ 975.952292][T20024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.952305][T20024] RSP: 002b:00007f8c7aa81038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 975.952322][T20024] RAX: ffffffffffffffda RBX: 00007f8c79db5fa0 RCX: 00007f8c79b8e929 [ 975.952333][T20024] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 975.952344][T20024] RBP: 00007f8c79c10ca1 R08: 0000200000000380 R09: 0000000000000000 [ 975.952355][T20024] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.952364][T20024] R13: 0000000000000000 R14: 00007f8c79db5fa0 R15: 00007fff09441338 [ 975.952381][T20024] [ 976.455536][T20024] overlayfs: upper fs does not support tmpfile. [ 976.479722][T20024] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 976.496917][T20024] overlayfs: upper fs missing required features. [ 976.841935][T18606] ocfs2: Unmounting device (7,4) on (node local) [ 977.224496][T20048] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4440'. [ 979.534205][T19889] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 979.543372][T19889] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 979.565198][T19889] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 979.575100][T19889] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 979.631683][T19889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.649579][T19889] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.660061][T12704] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.667216][T12704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.682723][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.689891][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.823156][T19889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.985808][T19889] veth0_vlan: entered promiscuous mode [ 979.995975][T19889] veth1_vlan: entered promiscuous mode [ 980.020205][T19889] veth0_macvtap: entered promiscuous mode [ 980.028821][T19889] veth1_macvtap: entered promiscuous mode [ 980.043607][T19889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.057179][T19889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.071960][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.081178][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.090573][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.099588][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.125993][T19889] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 980.146111][T12672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.148007][T19889] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 980.158497][T12672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.182325][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.190486][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50