last executing test programs: 1m4.35982463s ago: executing program 1 (id=107): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x440}, 0x1, 0x0, 0x0, 0x4008000}, 0x50) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x840) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r5, 0x40384708, 0x20000000) close_range(r4, 0xffffffffffffffff, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 1m3.377034798s ago: executing program 1 (id=110): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prlimit64(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000140)={{0x6, @rose, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r4, 0x1ad72f7) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) 58.737761918s ago: executing program 1 (id=125): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2814, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) 58.483635458s ago: executing program 1 (id=126): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc3}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000440)=0x40084040) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001140)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) sched_setscheduler(0x0, 0x1, 0x0) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)="c8", &(0x7f0000000380), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) 54.375957427s ago: executing program 1 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200050008004b00000008000100", @ANYRES32=0x0, @ANYBLOB="0800040030000200"], 0x8c}}, 0x0) 50.545439904s ago: executing program 1 (id=152): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@buf) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400003f000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180061010004500", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x3f}, 0x0) 50.100541006s ago: executing program 32 (id=152): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@buf) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400003f000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180061010004500", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x3f}, 0x0) 25.015884311s ago: executing program 3 (id=224): pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x10, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xa}]}, 0x1c}}, 0x0) r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xa0, 0x5, [{{0x9, 0x4, 0x0, 0x3c, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x393}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0xd, 0x5a}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x81, 0x1, 0x4}}]}}}]}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f00000004c0)={0x2c, &(0x7f0000000a00)={0x20, 0x7, 0x25, {0x25, 0xc, "5f7a0a4c2b46275266504926ce2542d098dbe4a3b0ceae73398b62c9b1e7f6db6b879f"}}, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x18, 0x0, 0x7, "4bde676d", "6ed8fe51"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xee, 0x8, 0x8, 0x48, 0x6, 0xf7, 0x6}}}, 0x0) 21.676456677s ago: executing program 3 (id=229): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 18.895764772s ago: executing program 3 (id=238): r0 = timerfd_create(0x2, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000140), 0x4) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{&(0x7f0000001180)="050e3d1979cb44af3fad82bca6385b794bc4dff2d19f0f9488c1c6419cf7555857953f03aa2007560588b2bf57e1cfae3a492006dce01d0c51f6ca7f8bf5208af2ac302aa2ea7a674907cf23def83ea9eefaef32ca992ddaa12060504d10078ca46422f98e0503e8f9aeaaa8471e7f1d372a11ec8d0519018916d91a50798ea3cee49437a6ba04a097cbe2733d991a977d7a8ed83769f6ec59d2ad4ddd54bbf7aa19cfb8af34018a7592644157dd1242d7db2a7f5074d6ee605107ccb71a963138d5ef97a283c2b6554c386d02", 0xcd}], 0x1, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x51, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(r4, 0x9) munlockall() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2804049, &(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRESDEC=r4, @ANYBLOB="54edbabdc2530564f1bd70a4abdd67de64b9572f153ecd1584d192cb0cff816ddc846b5148d14bfa07a610c12ee0bf52cc2fb2ba2280120290cba58a78f4009d4617160f88ec036c4af488a55dee9250", @ANYRESHEX, @ANYRES64=r1, @ANYRESOCT], 0x41, 0x312, &(0x7f0000000940)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[], 0x50) openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xa00200, &(0x7f0000000440)="383131bb83a76fd55646703008f6c5dd71d236739ea014e7d6baa30af163367d4a34860907db4d822cf57d4da13ccf6a1aa2d8cf9ed850b1a18ca98211a525aec46fe8d5b09133c24876b66a091c951118cab968db090d078c5cdacd756b9ec5d400fe39bb41bbaa2499a3fed515e4bf8758f935f1feb65d02f28f4941c236401f282a443e9320f590616a78f07535ec1a", 0x91, 0x0, 0x0, 0x0) 14.866952895s ago: executing program 4 (id=245): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prlimit64(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000140)={{0x6, @rose, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r4, 0x1ad72f7) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) 12.512422533s ago: executing program 0 (id=254): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0xbbe, 0x9a, 0x7, 0x8001, 0x1, 0xff9, 0xfffffff9, 0xc42c, 0x484e, 0xe, 0x0, 0x6, 0xe0, 0x1, 0x9, 0x3, 0x6, 0x7fffffff, 0x48ee6736, 0x930, 0x4, 0x7, 0x4, 0x9, 0x7, 0x9, 0x8, 0xc3ae, 0x2, 0x10, 0x4d, 0x1, 0x6, 0x5, 0x6, 0x6, 0x6, 0x800, 0xdeb3, 0x6, 0x1, 0x4b, 0x8, 0x8, 0xde, 0x8, 0x2, 0x0, 0x9, 0x7fff, 0x8001, 0x80000000, 0x8, 0x5, 0x27, 0x7900000, 0x5, 0x0, 0x80, 0x2, 0x6, 0x7fffffff, 0xb937, 0x4, 0x3, 0x4d1, 0x10000, 0x9, 0x8, 0x9, 0x1, 0xffffffff, 0x200, 0x800, 0x10, 0xf, 0xc00000, 0x6, 0x7, 0x5, 0x1, 0x7, 0x1, 0x3e, 0x1, 0x8000, 0x8, 0x2, 0x80, 0x7, 0x1, 0x837, 0x9, 0x0, 0x1, 0x0, 0x0, 0x9, 0x84d, 0x1, 0xc, 0x9d, 0x9, 0x7, 0x4, 0xb714, 0x2, 0x40, 0x200, 0x81, 0x1a, 0x3, 0x469e, 0x5, 0xfffffc01, 0x18d, 0x9, 0x7, 0x9, 0x5, 0xee8f, 0x1, 0x2, 0xa9f, 0x3, 0x8, 0x7, 0x18, 0x2, 0x7, 0x3, 0x5, 0x3, 0xfffffff7, 0x7, 0x9, 0x20e256df, 0x6, 0x3, 0x1, 0x7ff, 0x4, 0x80000000, 0x7, 0x10, 0x6, 0xe18, 0x99, 0x0, 0x4, 0x80, 0xbc, 0xf, 0x7, 0x1d6, 0x8000, 0x2, 0x5, 0x9, 0x8, 0x4, 0xa51b, 0x10001, 0x10000, 0xffffffff, 0xf69, 0x7, 0x9, 0xb, 0xa, 0x9, 0x9, 0x7fffffff, 0x7f, 0x1, 0x984, 0x5, 0x3, 0x7, 0x400, 0xb, 0x5, 0x7, 0x8, 0x9, 0xd859, 0x85, 0x5, 0x2, 0x81, 0x4000004, 0x8, 0xfffffff2, 0x9, 0x3ff, 0x9, 0x1, 0x963e, 0x8, 0x2, 0x7, 0x9, 0x9, 0x40000000, 0x7, 0x3bf, 0x0, 0x4, 0x3, 0x81, 0xb47f, 0x8de3, 0x2, 0x40, 0x7ff, 0xe, 0x10001, 0x2, 0x9, 0x4, 0x0, 0x200, 0x5, 0x4, 0x5, 0x1000, 0xb, 0x10001, 0x10000, 0x70a, 0x5, 0x2, 0x200, 0x8, 0x0, 0x11, 0x1000, 0xea, 0x7ff, 0x6, 0x2, 0x621, 0xbe0, 0x0, 0x80000001, 0x1, 0xdaeb, 0x21d9, 0x9, 0x74, 0xffffffff, 0x4b2f, 0x5, 0x990, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x8001, 0x7, 0x2, 0xf50d}, {0xff, 0x0, 0x8, 0x8c0f, 0x6, 0x7}, 0x4, 0x40, 0x788}}]}}]}, 0x45c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 10.994501687s ago: executing program 4 (id=255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x3}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x89745301ffea7a81}, 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet(0x2, 0x802, 0x1) 10.797555268s ago: executing program 5 (id=256): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) 10.794506538s ago: executing program 3 (id=257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000340)={[{@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@fat=@usefree}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@utf8}, {@shortname_lower}, {@numtail}, {@utf8no}]}, 0xfe, 0x353, &(0x7f00000005c0)="$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") syz_clone(0x30c8800, &(0x7f0000000280)="60a7362801b75e736f3c51699428b3650bc216379ea95a870b07a61361b6d609d2ccb37929353c0f7f49d17a1ef7ef889063c7", 0x33, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "fee8a294f8a0e9ffff0d9683dda1af1ea89de2b7fb0a01040000000008000003000200000000003f00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.450523421s ago: executing program 5 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0xa8, 0x150, 0xffffffff, 0x490, 0x398, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'rose0\x00', 'virt_wifi0\x00', {}, {}, 0xf1bca4f3d3c1eb74}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id=0x65, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'tunl0\x00', 'ipvlan0\x00'}, 0x0, 0x210, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth0_to_batadv\x00', {0x1, 0x3, 0x46, 0x71e, 0x6f, 0xfffffffc, 0x4, 0x20, 0x8}, {0x9}}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x22}, 0xff000000, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "febc"}}, @common=@inet=@socket2={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @port=0x4e21, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], 0x0, 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x2c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000800}, 0x4000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23b) socket$inet6_sctp(0xa, 0x5, 0x84) 8.381014094s ago: executing program 4 (id=260): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000580)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlateno}, {@fat=@quiet}, {@utf8no}, {@shortname_mixed}, {@rodir}, {@utf8}, {@fat=@sys_immutable}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_win95}, {@shortname_win95}, {@shortname_winnt}, {@shortname_mixed}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp862'}}]}, 0x1, 0x369, &(0x7f0000000700)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 8.268808493s ago: executing program 0 (id=261): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af", 0xa9, 0x4008041, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, &(0x7f00000000c0)) 7.135029316s ago: executing program 0 (id=262): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ppoll(&(0x7f0000000700)=[{}, {r5}], 0x2, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 7.103232821s ago: executing program 2 (id=263): sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=0x0, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=0x0, @ANYBLOB="050035000000000005003300fbff"], 0x34}}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10410, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x42082, 0x0) 6.881172856s ago: executing program 5 (id=264): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6.846832608s ago: executing program 2 (id=265): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prlimit64(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000140)={{0x6, @rose, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r4, 0x1ad72f7) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) 6.773970126s ago: executing program 0 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) userfaultfd(0x80801) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.651801336s ago: executing program 5 (id=267): lstat(&(0x7f00000002c0)='./file2\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0xa, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.397124646s ago: executing program 5 (id=268): r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r5, 0x0, 0x4004000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000380)=[{0x0, 0x4010}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x13}, [@ldst={0x4, 0x0, 0x4, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.074961132s ago: executing program 5 (id=269): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xffffffffffffff85, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x58}}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) r1 = semget$private(0x0, 0x4000000009, 0x0) semtimedop(r1, &(0x7f00000000c0)=[{0x1, 0x3, 0x800}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 3.027892229s ago: executing program 2 (id=270): syz_mount_image$fuse(0x0, &(0x7f0000001080)='./file0\x00', 0x1105011, 0x0, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8f41c288d409ef0e169a340295f36d4b4", &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000002980)='./file0\x00', &(0x7f00000029c0), 0x1000001, &(0x7f0000002ac0)=ANY=[@ANYBLOB='cn']) 2.982176899s ago: executing program 3 (id=271): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000440), 0xfe, 0x24d, &(0x7f0000000840)="$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") r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) accept(r0, 0x0, &(0x7f0000000080)) symlinkat(&(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r1, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r1, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lchown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.784101875s ago: executing program 0 (id=272): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd0}}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000540)={0x1, 0x1000, 0x2, 0x81, 0x18, "019b2d4bb9a7a48505d347a59f3f05ab147c29"}) fgetxattr(r2, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000680)=""/4096, 0x1000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x4a}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSTI(r3, 0x5412, 0x0) chdir(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x7fff, 0x0, 0x1ffffffe, 0x0, 0x0, 0x0, 0xfeef}) socket$nl_netfilter(0x10, 0x3, 0xc) 2.718226139s ago: executing program 4 (id=273): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af", 0xa9, 0x4008041, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, &(0x7f00000000c0)) 2.717349591s ago: executing program 2 (id=274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000191c0)='net/dev_mcast\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.291311686s ago: executing program 2 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0xa8, 0x150, 0xffffffff, 0x490, 0x398, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'rose0\x00', 'virt_wifi0\x00', {}, {}, 0xf1bca4f3d3c1eb74}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id=0x65, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'tunl0\x00', 'ipvlan0\x00'}, 0x0, 0x210, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth0_to_batadv\x00', {0x1, 0x3, 0x46, 0x71e, 0x6f, 0xfffffffc, 0x4, 0x20, 0x8}, {0x9}}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x22}, 0xff000000, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "febc"}}, @common=@inet=@socket2={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @port=0x4e21, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], 0x0, 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x2c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000800}, 0x4000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23b) socket$inet6_sctp(0xa, 0x5, 0x84) 1.278881323s ago: executing program 3 (id=276): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x20010, 0x284a0}}}}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 1.260625518s ago: executing program 4 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.01959294s ago: executing program 4 (id=278): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000540)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000400)={0x28, 0x3, r5, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000380)={0x28, 0x3, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000006740), 0x280, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev, @in=@dev}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) geteuid() r8 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r8, &(0x7f00000004c0)="2f0ba066d802fec59c77a742caa1411b0ad586df3d57", 0x16, 0x4000, &(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x2, @empty, 'syz_tun\x00'}}, 0x80) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000000)) mknod$loop(0x0, 0x8000, 0x1) socket$packet(0x11, 0x1, 0x300) 128.415525ms ago: executing program 2 (id=279): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000feff17110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000005000000092000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) 0s ago: executing program 0 (id=280): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prlimit64(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000140)={{0x6, @rose, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r4, 0x1ad72f7) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 57.982271][ T5834] cgroup: Unknown subsys name 'net' [ 58.087776][ T5834] cgroup: Unknown subsys name 'cpuset' [ 58.095561][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.377988][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.586993][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.596198][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.615183][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.628445][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.634545][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.644193][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.652727][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.655654][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.666933][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.676630][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.681373][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.683875][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.691312][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.698786][ T5864] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.706190][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.712441][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.720228][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.726051][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.733800][ T5865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.746959][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.754428][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.760540][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.766251][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.769481][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.776830][ T5160] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.783001][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.790349][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.796700][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.811744][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.819262][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.178499][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 62.239881][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 62.337115][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.344839][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.352102][ T5849] bridge_slave_0: entered allmulticast mode [ 62.359421][ T5849] bridge_slave_0: entered promiscuous mode [ 62.377510][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 62.386299][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 62.404484][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.411574][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.418999][ T5849] bridge_slave_1: entered allmulticast mode [ 62.426357][ T5849] bridge_slave_1: entered promiscuous mode [ 62.481989][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.489550][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.496961][ T5852] bridge_slave_0: entered allmulticast mode [ 62.503435][ T5852] bridge_slave_0: entered promiscuous mode [ 62.510749][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.517923][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.525279][ T5852] bridge_slave_1: entered allmulticast mode [ 62.531847][ T5852] bridge_slave_1: entered promiscuous mode [ 62.547947][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.593665][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.657191][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.669802][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 62.681426][ T5849] team0: Port device team_slave_0 added [ 62.708059][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.715318][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.722425][ T5853] bridge_slave_0: entered allmulticast mode [ 62.730148][ T5853] bridge_slave_0: entered promiscuous mode [ 62.738384][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.753004][ T5849] team0: Port device team_slave_1 added [ 62.764486][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.771611][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.778974][ T5845] bridge_slave_0: entered allmulticast mode [ 62.785899][ T5845] bridge_slave_0: entered promiscuous mode [ 62.792759][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.800975][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.808469][ T5853] bridge_slave_1: entered allmulticast mode [ 62.815587][ T5853] bridge_slave_1: entered promiscuous mode [ 62.846766][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.853872][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.864201][ T5845] bridge_slave_1: entered allmulticast mode [ 62.870773][ T5845] bridge_slave_1: entered promiscuous mode [ 62.896001][ T5852] team0: Port device team_slave_0 added [ 62.918399][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.928307][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.954780][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.967691][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.974977][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.001129][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.021526][ T5852] team0: Port device team_slave_1 added [ 63.036983][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.065552][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.077038][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.093785][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.123897][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.133930][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.160344][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.208483][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.215630][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.241959][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.259549][ T5853] team0: Port device team_slave_0 added [ 63.269109][ T5853] team0: Port device team_slave_1 added [ 63.291026][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.298371][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.305742][ T5844] bridge_slave_0: entered allmulticast mode [ 63.312930][ T5844] bridge_slave_0: entered promiscuous mode [ 63.323681][ T5845] team0: Port device team_slave_0 added [ 63.332023][ T5845] team0: Port device team_slave_1 added [ 63.363838][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.373168][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.386493][ T5844] bridge_slave_1: entered allmulticast mode [ 63.393015][ T5844] bridge_slave_1: entered promiscuous mode [ 63.439046][ T5849] hsr_slave_0: entered promiscuous mode [ 63.447596][ T5849] hsr_slave_1: entered promiscuous mode [ 63.492188][ T5852] hsr_slave_0: entered promiscuous mode [ 63.498390][ T5852] hsr_slave_1: entered promiscuous mode [ 63.507194][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.515586][ T5852] Cannot create hsr debugfs directory [ 63.521388][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.528715][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.554940][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.570986][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.578089][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.604305][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.617565][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.629177][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.639205][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.646393][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.672461][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.692179][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.699241][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.725335][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.769124][ T5850] Bluetooth: hci1: command tx timeout [ 63.786809][ T5844] team0: Port device team_slave_0 added [ 63.823580][ T5844] team0: Port device team_slave_1 added [ 63.844572][ T5850] Bluetooth: hci2: command tx timeout [ 63.853311][ T5853] hsr_slave_0: entered promiscuous mode [ 63.859540][ T5850] Bluetooth: hci3: command tx timeout [ 63.866984][ T5853] hsr_slave_1: entered promiscuous mode [ 63.873214][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.881517][ T5853] Cannot create hsr debugfs directory [ 63.890540][ T5845] hsr_slave_0: entered promiscuous mode [ 63.897316][ T5845] hsr_slave_1: entered promiscuous mode [ 63.903255][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.910899][ T5845] Cannot create hsr debugfs directory [ 63.924440][ T5860] Bluetooth: hci0: command tx timeout [ 63.930396][ T5850] Bluetooth: hci4: command tx timeout [ 63.941542][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.948654][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.977928][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.998936][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.007182][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.033243][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.163414][ T5844] hsr_slave_0: entered promiscuous mode [ 64.169720][ T5844] hsr_slave_1: entered promiscuous mode [ 64.176620][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.184181][ T5844] Cannot create hsr debugfs directory [ 64.342998][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.373087][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.401519][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.419157][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.441958][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.451591][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.480938][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.501863][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.552168][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.586213][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.608393][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.637499][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.660021][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.669835][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.680338][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.691676][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.761020][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.779098][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.795677][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.811029][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.821408][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.894053][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.924808][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.932297][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.947952][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.990510][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.997661][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.037257][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.081861][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.089006][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.103531][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.134065][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.141156][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.188832][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.200160][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.250679][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.267037][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.296304][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.315994][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.323091][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.341558][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.348713][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.405204][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.412954][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.420081][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.429021][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.436154][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.446576][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.453667][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.487392][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.494543][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.598315][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.611968][ T5852] veth0_vlan: entered promiscuous mode [ 65.641551][ T5852] veth1_vlan: entered promiscuous mode [ 65.671894][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.693246][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.803883][ T5852] veth0_macvtap: entered promiscuous mode [ 65.837030][ T5852] veth1_macvtap: entered promiscuous mode [ 65.845110][ T5850] Bluetooth: hci1: command tx timeout [ 65.911298][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.925307][ T5850] Bluetooth: hci3: command tx timeout [ 65.930926][ T5850] Bluetooth: hci2: command tx timeout [ 65.970836][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.986768][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.995831][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.005808][ T5850] Bluetooth: hci4: command tx timeout [ 66.005928][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.011240][ T5850] Bluetooth: hci0: command tx timeout [ 66.026652][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.065245][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.137734][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.237739][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.255981][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.259341][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.289881][ T5849] veth0_vlan: entered promiscuous mode [ 66.302868][ T5845] veth0_vlan: entered promiscuous mode [ 66.319223][ T5849] veth1_vlan: entered promiscuous mode [ 66.358020][ T5844] veth0_vlan: entered promiscuous mode [ 66.365212][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.373221][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.387387][ T5845] veth1_vlan: entered promiscuous mode [ 66.420516][ T5849] veth0_macvtap: entered promiscuous mode [ 66.431241][ T5844] veth1_vlan: entered promiscuous mode [ 66.452665][ T5849] veth1_macvtap: entered promiscuous mode [ 66.468327][ T5853] veth0_vlan: entered promiscuous mode [ 66.511200][ T5853] veth1_vlan: entered promiscuous mode [ 66.512719][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.533742][ T5845] veth0_macvtap: entered promiscuous mode [ 66.551893][ T5844] veth0_macvtap: entered promiscuous mode [ 66.563614][ T5845] veth1_macvtap: entered promiscuous mode [ 66.586488][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.598065][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.610409][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.620466][ T5844] veth1_macvtap: entered promiscuous mode [ 66.647022][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.675026][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.690365][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.705693][ T5853] veth0_macvtap: entered promiscuous mode [ 66.714089][ T5931] loop1: detected capacity change from 0 to 128 [ 66.727095][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.744385][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.771597][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.782361][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.795334][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.809126][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.823218][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.834169][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.849250][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.852423][ T5931] syz.1.2: attempt to access beyond end of device [ 66.852423][ T5931] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 66.878092][ T5853] veth1_macvtap: entered promiscuous mode [ 66.890426][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.909852][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.922513][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.923491][ T5930] syz.1.2: attempt to access beyond end of device [ 66.923491][ T5930] loop1: rw=524288, sector=145, nr_sectors = 208 limit=128 [ 66.936341][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.961768][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.973763][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.986549][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.011212][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.049056][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.068007][ T29] audit: type=1326 audit(1730817210.316:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf17e719 code=0x7ffc0000 [ 67.106643][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.121831][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.135397][ T29] audit: type=1326 audit(1730817210.316:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf17e719 code=0x7ffc0000 [ 67.149579][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.171843][ T29] audit: type=1326 audit(1730817210.316:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fabdf17e719 code=0x7ffc0000 [ 67.186717][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.199448][ T29] audit: type=1326 audit(1730817210.316:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf17e719 code=0x7ffc0000 [ 67.234649][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.236381][ T29] audit: type=1326 audit(1730817210.336:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf17e719 code=0x7ffc0000 [ 67.254946][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.277128][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.287959][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.299278][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.310925][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.337261][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.352323][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.362025][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.381944][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.423405][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.432934][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.442085][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.464769][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.565155][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.580252][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.590852][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.601716][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.612421][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.623824][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.634064][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.650187][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.662276][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.741758][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.752307][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.755852][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.762374][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.770458][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.780961][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.798641][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.806396][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.817090][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.827094][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.837759][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.843047][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.849222][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.868607][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.877369][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.886154][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.895024][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.910780][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.915070][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.926702][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.934789][ T5850] Bluetooth: hci1: command tx timeout [ 67.966300][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.004441][ T5850] Bluetooth: hci2: command tx timeout [ 68.004478][ T5860] Bluetooth: hci3: command tx timeout [ 68.053022][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.064341][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.085697][ T5860] Bluetooth: hci0: command tx timeout [ 68.085708][ T5850] Bluetooth: hci4: command tx timeout [ 68.149096][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.194599][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.242578][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.274409][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.367584][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.411080][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.645250][ T5938] loop1: detected capacity change from 0 to 40427 [ 68.662238][ T5938] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 68.670453][ T5938] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 68.759662][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.800827][ T5951] syzkaller0: entered allmulticast mode [ 68.821979][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.846648][ T5938] F2FS-fs (loop1): Found nat_bits in checkpoint [ 68.926611][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.967448][ T5938] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 68.976536][ T5938] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 69.014681][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 69.030019][ T58] usb 5-1: config 1 interface 0 has no altsetting 0 [ 69.048774][ T58] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 69.060169][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.074721][ T58] usb 5-1: Product: syz [ 69.078963][ T58] usb 5-1: Manufacturer: syz [ 69.083653][ T58] usb 5-1: SerialNumber: syz [ 69.093282][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.100953][ T5962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.240212][ T29] audit: type=1326 audit(1730817212.476:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68e77e719 code=0x7ffc0000 [ 69.324341][ T29] audit: type=1326 audit(1730817212.476:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68e77e719 code=0x7ffc0000 [ 69.346425][ T29] audit: type=1326 audit(1730817212.516:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa68e77e719 code=0x7ffc0000 [ 69.369016][ T29] audit: type=1326 audit(1730817212.526:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68e77e719 code=0x7ffc0000 [ 69.391677][ T29] audit: type=1326 audit(1730817212.526:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68e77e719 code=0x7ffc0000 [ 69.469543][ T5852] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 69.470432][ T58] usbhid 5-1:1.0: can't add hid device: -71 [ 69.487930][ T5852] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 69.493469][ T58] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 69.506370][ T5852] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 69.536698][ T5969] loop0: detected capacity change from 0 to 512 [ 69.543947][ T5969] ======================================================= [ 69.543947][ T5969] WARNING: The mand mount option has been deprecated and [ 69.543947][ T5969] and is ignored by this kernel. Remove the mand [ 69.543947][ T5969] option from the mount to silence this warning. [ 69.543947][ T5969] ======================================================= [ 69.555780][ T58] usb 5-1: USB disconnect, device number 2 [ 69.579909][ T5852] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 69.630586][ T5852] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 69.667118][ T5852] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 69.675925][ T5969] EXT4-fs: Ignoring removed i_version option [ 69.701535][ T5852] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 69.718242][ T5969] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 70.004459][ T5850] Bluetooth: hci1: command tx timeout [ 70.088461][ T5850] Bluetooth: hci2: command tx timeout [ 70.094473][ T5850] Bluetooth: hci3: command tx timeout [ 70.164916][ T5850] Bluetooth: hci4: command tx timeout [ 70.165220][ T5860] Bluetooth: hci0: command tx timeout [ 70.214199][ T5965] loop2: detected capacity change from 0 to 40427 [ 70.231561][ T5965] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 70.240372][ T5965] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 70.272172][ T5965] F2FS-fs (loop2): invalid crc value [ 70.361558][ T5965] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.555977][ T5965] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 70.563146][ T5965] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 72.216622][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.224054][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.414433][ T5900] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.860526][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 72.870470][ T5900] usb 5-1: config 0 has no interfaces? [ 72.890582][ T5900] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.901540][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.919684][ T5900] usb 5-1: config 0 descriptor?? [ 73.644995][ T6000] loop2: detected capacity change from 0 to 1024 [ 73.723775][ T6000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.868228][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.273760][ T25] usb 5-1: USB disconnect, device number 3 [ 74.482570][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.644581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.644719][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 74.678964][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.691634][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.724089][ T46] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 74.726674][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.773869][ T46] usb 3-1: config 0 descriptor?? [ 75.421503][ T6028] loop3: detected capacity change from 0 to 1024 [ 75.611227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.633367][ T46] steelseries 0003:1038:1410.0001: unknown main item tag 0xd [ 75.650983][ T46] steelseries 0003:1038:1410.0001: item fetching failed at offset 6/7 [ 75.661725][ T46] steelseries 0003:1038:1410.0001: parse failed [ 75.683207][ T46] steelseries 0003:1038:1410.0001: probe with driver steelseries failed with error -22 [ 75.734323][ T25] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 75.906565][ T46] usb 3-1: USB disconnect, device number 2 [ 75.995894][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 76.127156][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.137153][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 76.150075][ T25] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 76.159232][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.209765][ T25] usb 4-1: config 0 descriptor?? [ 76.664107][ T25] a4tech 0003:09DA:022B.0002: item fetching failed at offset 5/7 [ 76.664782][ T25] a4tech 0003:09DA:022B.0002: parse failed [ 76.664844][ T25] a4tech 0003:09DA:022B.0002: probe with driver a4tech failed with error -22 [ 77.477971][ T5901] usb 4-1: USB disconnect, device number 2 [ 77.574388][ T5903] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.724378][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 77.742704][ T5903] usb 2-1: config 0 has no interfaces? [ 77.752131][ T5903] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.781297][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.822213][ T5903] usb 2-1: config 0 descriptor?? [ 79.404391][ T5903] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 80.208525][ T58] usb 2-1: USB disconnect, device number 2 [ 80.286789][ T5903] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 80.314447][ T5903] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.359157][ T5903] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 80.411059][ T6084] loop1: detected capacity change from 0 to 512 [ 80.420889][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.461915][ T6084] EXT4-fs: Ignoring removed i_version option [ 80.505694][ T6084] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.527124][ T6084] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.984432][ T6091] sch_tbf: peakrate 7 is lower than or equals to rate 62733 ! [ 81.016238][ T6084] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 81.146181][ T6084] EXT4-fs (loop1): 1 truncate cleaned up [ 81.159807][ T6084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.354558][ T5903] usb 5-1: string descriptor 0 read error: -71 [ 81.363464][ T5903] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 81.416872][ T5903] usb 5-1: USB disconnect, device number 4 [ 81.665566][ T6099] loop3: detected capacity change from 0 to 512 [ 81.790988][ T6099] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 81.849202][ T8] cfg80211: failed to load regulatory.db [ 82.151582][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.188119][ T6099] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.52: invalid indirect mapped block 1 (level 1) [ 82.213911][ T6099] EXT4-fs (loop3): 1 truncate cleaned up [ 82.220561][ T6099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.244901][ T6099] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 13: comm syz.3.52: path /8/file2: bad entry in directory: inode out of bounds - offset=0, inode=1224736770, rec_len=12, size=1024 fake=1 [ 82.340256][ T5845] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.074470][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.234503][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 83.282258][ T8] usb 4-1: config 0 has no interfaces? [ 83.399853][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 83.424609][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.474347][ T8] usb 4-1: config 0 descriptor?? [ 83.729738][ T6129] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 86.493395][ T5903] usb 4-1: USB disconnect, device number 3 [ 89.689189][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 89.689207][ T29] audit: type=1326 audit(1730817232.936:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404bb7e719 code=0x7ffc0000 [ 89.819043][ T29] audit: type=1326 audit(1730817233.066:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404bb7e719 code=0x7ffc0000 [ 89.951282][ T29] audit: type=1326 audit(1730817233.166:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f404bb7e719 code=0x7ffc0000 [ 89.973733][ T29] audit: type=1326 audit(1730817233.166:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404bb7e719 code=0x7ffc0000 [ 91.030072][ T6213] x_tables: ip_tables: osf match: only valid for protocol 6 [ 91.714320][ T5900] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.731622][ T6217] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 91.748221][ T6217] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.865279][ T6217] serio: Serial port ptm0 [ 92.044377][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 92.064316][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.116634][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.316310][ T5900] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.451661][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.621312][ T5900] usb 3-1: config 0 descriptor?? [ 93.868631][ T5939] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.941188][ T5900] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input6 [ 93.993159][ T6251] loop1: detected capacity change from 0 to 512 [ 94.045115][ T5900] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 94.141484][ T6251] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 94.247854][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.259038][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.481726][ T6257] x_tables: ip_tables: osf match: only valid for protocol 6 [ 94.513168][ T5939] usb 5-1: New USB device found, idVendor=056a, idProduct=037e, bcdDevice=6c.75 [ 95.253540][ T25] usb 3-1: USB disconnect, device number 3 [ 95.263758][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.278069][ T5939] usb 5-1: config 0 descriptor?? [ 95.615682][ T5900] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.790913][ T5939] wacom 0003:056A:037E.0004: Unknown device_type for 'HID 056a:037e'. Ignoring. [ 95.919995][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.934861][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.205381][ T5900] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 96.514452][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.527720][ T8] usb 5-1: USB disconnect, device number 5 [ 96.611331][ T5900] usb 4-1: config 0 descriptor?? [ 97.320332][ T5900] usbhid 4-1:0.0: can't add hid device: -71 [ 97.327607][ T5900] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 97.339886][ T5900] usb 4-1: USB disconnect, device number 4 [ 97.423272][ T29] audit: type=1326 audit(1730817240.666:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146097e719 code=0x7ffc0000 [ 97.449241][ T29] audit: type=1326 audit(1730817240.666:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146097e719 code=0x7ffc0000 [ 97.489634][ T29] audit: type=1326 audit(1730817240.666:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f146097e719 code=0x7ffc0000 [ 98.274038][ T6032] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.307817][ T29] audit: type=1326 audit(1730817240.666:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146097e719 code=0x7ffc0000 [ 98.330118][ T29] audit: type=1326 audit(1730817240.666:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146097e719 code=0x7ffc0000 [ 98.703993][ T6304] x_tables: ip_tables: osf match: only valid for protocol 6 [ 98.778920][ T6032] usb 2-1: Using ep0 maxpacket: 8 [ 98.964672][ T6032] usb 2-1: config 0 has no interfaces? [ 99.049631][ T6032] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.307710][ T6032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.324134][ T6032] usb 2-1: config 0 descriptor?? [ 99.344804][ T5903] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.596350][ T5903] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.614809][ T5903] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.826456][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.861214][ T5903] usb 1-1: New USB device found, idVendor=1477, idProduct=1006, bcdDevice= 0.00 [ 99.954084][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.214843][ T5903] usb 1-1: config 0 descriptor?? [ 100.488938][ T5903] usbhid 1-1:0.0: can't add hid device: -71 [ 101.179410][ T5903] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 101.190190][ T5903] usb 1-1: USB disconnect, device number 2 [ 101.481080][ T6316] loop3: detected capacity change from 0 to 40427 [ 101.526790][ T6329] loop1: detected capacity change from 0 to 512 [ 101.534032][ T6329] EXT4-fs: Ignoring removed i_version option [ 101.541366][ T46] usb 2-1: USB disconnect, device number 3 [ 101.549281][ T6329] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.559716][ T6316] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 101.569297][ T6316] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 101.611183][ T6316] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 101.919938][ T6340] batadv_slave_1: entered promiscuous mode [ 101.993742][ T6340] loop4: detected capacity change from 0 to 1024 [ 102.371233][ T6340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.383842][ T6340] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.463556][ T6329] EXT4-fs (loop1): 1 truncate cleaned up [ 102.542021][ T6331] batadv_slave_1: left promiscuous mode [ 102.685356][ T6329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.069774][ T6316] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 103.840411][ T6316] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.564326][ T6357] x_tables: ip_tables: osf match: only valid for protocol 6 [ 104.740676][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.101135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 106.103047][ T5852] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /31/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 106.149443][ T29] audit: type=1326 audit(1730817249.396:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 106.171904][ T29] audit: type=1326 audit(1730817249.396:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 106.194397][ T29] audit: type=1326 audit(1730817249.396:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 106.217560][ T29] audit: type=1326 audit(1730817249.396:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 106.240548][ T29] audit: type=1326 audit(1730817249.396:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 106.263289][ T29] audit: type=1326 audit(1730817249.396:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 106.278359][ T5852] EXT4-fs error (device loop1): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 106.285841][ T29] audit: type=1326 audit(1730817249.396:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 106.327649][ T29] audit: type=1326 audit(1730817249.396:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 106.350105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.415037][ T5852] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /31/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 106.445931][ T6374] loop2: detected capacity change from 0 to 128 [ 106.480086][ T5852] EXT4-fs error (device loop1): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 106.511737][ T5852] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /31/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 106.544678][ T5852] EXT4-fs error (device loop1): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 106.581208][ T5852] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /31/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 106.613700][ T5852] EXT4-fs error (device loop1): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 106.700448][ T5852] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /31/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 106.726550][ T6374] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.736509][ T5852] EXT4-fs error (device loop1): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 106.749769][ T6374] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.017976][ T6385] Bluetooth: (null): Invalid header checksum [ 107.222399][ T1095] Bluetooth: (null): Invalid header checksum [ 107.237037][ T1095] Bluetooth: (null): Invalid header checksum [ 107.243228][ T1095] Bluetooth: (null): Invalid header checksum [ 107.859519][ T5853] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.129333][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'. [ 109.295445][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.553047][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.621742][ T6422] netlink: 'syz.3.151': attribute type 4 has an invalid length. [ 109.693373][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.988996][ T6426] loop3: detected capacity change from 0 to 256 [ 110.064551][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.301682][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.313792][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.344018][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.352602][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.354867][ T6426] FAT-fs (loop3): Directory bread(block 1285) failed [ 110.360550][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 110.374736][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.130189][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.427203][ T5850] Bluetooth: hci3: command tx timeout [ 112.884678][ T29] audit: type=1326 audit(1730817256.126:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 112.892935][ T12] bridge_slave_1: left allmulticast mode [ 112.919237][ T29] audit: type=1326 audit(1730817256.126:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 112.963082][ T12] bridge_slave_1: left promiscuous mode [ 112.992179][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.996616][ T29] audit: type=1326 audit(1730817256.156:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 113.023075][ T29] audit: type=1326 audit(1730817256.156:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 113.046713][ T29] audit: type=1326 audit(1730817256.156:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 113.137782][ T29] audit: type=1326 audit(1730817256.156:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 113.169573][ T12] bridge_slave_0: left allmulticast mode [ 113.196346][ T12] bridge_slave_0: left promiscuous mode [ 113.234872][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.285415][ T29] audit: type=1326 audit(1730817256.166:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 113.504290][ T6482] x_tables: ip_tables: osf match: only valid for protocol 6 [ 113.640676][ T29] audit: type=1326 audit(1730817256.166:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 114.039961][ T29] audit: type=1326 audit(1730817256.196:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b497e719 code=0x7ffc0000 [ 114.610472][ T5850] Bluetooth: hci3: command tx timeout [ 114.665169][ T6502] loop4: detected capacity change from 0 to 512 [ 114.773012][ T6506] loop2: detected capacity change from 0 to 512 [ 114.803283][ T6502] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 114.956794][ T6506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 114.984520][ T6506] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.100996][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.113680][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.152282][ T12] bond0 (unregistering): Released all slaves [ 115.302969][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 116.178025][ T6527] sch_tbf: peakrate 7 is lower than or equals to rate 62733 ! [ 116.203870][ T6520] overlayfs: missing 'lowerdir' [ 116.307220][ T6427] chnl_net:caif_netlink_parms(): no params data found [ 116.545251][ T12] hsr_slave_0: left promiscuous mode [ 116.572828][ T12] hsr_slave_1: left promiscuous mode [ 116.600129][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.628027][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.645611][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.653043][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.656500][ T5850] Bluetooth: hci3: command tx timeout [ 116.707202][ T12] veth1_macvtap: left promiscuous mode [ 116.754383][ T12] veth0_macvtap: left promiscuous mode [ 116.772048][ T12] veth1_vlan: left promiscuous mode [ 116.804631][ T12] veth0_vlan: left promiscuous mode [ 117.333782][ T6552] x_tables: ip_tables: osf match: only valid for protocol 6 [ 118.129583][ T5900] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 118.208267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.254477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.263953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.405255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.413995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 118.515043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 118.554283][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.612302][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 118.663562][ T6560] 9pnet_fd: Insufficient options for proto=fd [ 118.734283][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 166, setting to 64 [ 118.786792][ T5850] Bluetooth: hci3: command tx timeout [ 118.841180][ T5900] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 118.934381][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.943477][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 118.981481][ T5900] usb 4-1: SerialNumber: syz [ 118.999132][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 119.015831][ T6555] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.037026][ T5900] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 119.059480][ T5900] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 119.454390][ T29] audit: type=1326 audit(1730817262.696:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6554 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404bb7e719 code=0x7ffc0000 [ 119.661119][ T29] audit: type=1326 audit(1730817262.696:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6554 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404bb7e719 code=0x7ffc0000 [ 119.685539][ T12] team0 (unregistering): Port device team_slave_1 removed [ 119.794327][ T29] audit: type=1326 audit(1730817262.846:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6554 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f404bb7e719 code=0x7ffc0000 [ 119.827236][ T5939] usb 4-1: USB disconnect, device number 5 [ 119.934695][ T29] audit: type=1326 audit(1730817262.846:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6554 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404bb7e719 code=0x7ffc0000 [ 119.969181][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.992113][ T29] audit: type=1326 audit(1730817262.866:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6554 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404bb7e719 code=0x7ffc0000 [ 120.036626][ T12] team0 (unregistering): Port device team_slave_0 removed [ 120.137065][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 120.151606][ T8] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 120.167788][ T8] usb 5-1: config 0 has no interface number 0 [ 120.179286][ T8] usb 5-1: config 0 interface 250 has no altsetting 0 [ 120.210343][ T8] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=39.1a [ 120.219532][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.234508][ T8] usb 5-1: Product: syz [ 120.246202][ T8] usb 5-1: Manufacturer: syz [ 120.251204][ T8] usb 5-1: SerialNumber: syz [ 120.308710][ T8] usb 5-1: config 0 descriptor?? [ 120.543136][ T8] usb 5-1: USB disconnect, device number 6 [ 121.654380][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.662739][ T6578] loop2: detected capacity change from 0 to 40427 [ 121.865868][ T6578] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff [ 121.967660][ T6578] F2FS-fs (loop2): heap/no_heap options were deprecated [ 122.068965][ T6578] F2FS-fs (loop2): Image doesn't support compression [ 122.279005][ T6578] F2FS-fs (loop2): invalid crc value [ 122.336952][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.349016][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.368697][ T6578] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.400397][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 122.446193][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.463335][ T6578] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.481018][ T6591] sch_tbf: peakrate 7 is lower than or equals to rate 62733 ! [ 122.499214][ T6578] F2FS-fs (loop2): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6a5/0x1d60 [ 122.513371][ T8] usb 1-1: config 0 descriptor?? [ 122.558095][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.565453][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.572780][ T6427] bridge_slave_0: entered allmulticast mode [ 122.580293][ T6427] bridge_slave_0: entered promiscuous mode [ 122.588843][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.596591][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.603880][ T6427] bridge_slave_1: entered allmulticast mode [ 122.612479][ T6427] bridge_slave_1: entered promiscuous mode [ 122.712949][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.761668][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.047315][ T6614] loop4: detected capacity change from 0 to 256 [ 123.188135][ T6427] team0: Port device team_slave_0 added [ 123.294987][ T8] lg-g15 0003:046D:C222.0005: item fetching failed at offset 0/11 [ 123.310553][ T8] lg-g15 0003:046D:C222.0005: probe with driver lg-g15 failed with error -22 [ 123.322879][ T5853] syz-executor: attempt to access beyond end of device [ 123.322879][ T5853] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 123.325796][ T6427] team0: Port device team_slave_1 added [ 123.390944][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.410346][ T5853] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 123.411612][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.456169][ T5853] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 123.494342][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.556630][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.563627][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.692613][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.721949][ T8] usb 1-1: USB disconnect, device number 3 [ 123.895419][ T6427] hsr_slave_0: entered promiscuous mode [ 123.903502][ T6427] hsr_slave_1: entered promiscuous mode [ 123.911007][ T6427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.918783][ T6427] Cannot create hsr debugfs directory [ 124.369027][ T6644] binder: 6638:6644 ioctl c0306201 20000680 returned -14 [ 125.094960][ T58] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.154311][ T6651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.244316][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 125.251057][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 125.261302][ T58] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 125.284127][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.309777][ T58] usb 1-1: config 0 descriptor?? [ 125.314971][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 125.339097][ T58] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 125.477325][ T8] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 125.487466][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.500056][ T8] usb 5-1: config 0 descriptor?? [ 125.954749][ T8] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 126.111804][ T6642] loop0: detected capacity change from 0 to 40427 [ 126.121338][ T6642] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1) [ 126.131381][ T6642] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 126.139900][ T6642] F2FS-fs (loop0): Unrecognized mount option "whint_mode=fs-based" or missing value [ 126.291646][ T6642] process 'syz.0.203' launched './file1' with NULL argv: empty string added [ 126.332188][ T8] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 32: -71 [ 126.341745][ T8] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense firmware info: -71 [ 126.352226][ T8] playstation 0003:054C:0DF2.0006: Failed to get firmware info from DualSense [ 126.365476][ T8] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 126.384501][ T8] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -71 [ 126.397217][ T8] usb 5-1: USB disconnect, device number 7 [ 126.692810][ T6629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.719992][ T6427] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.753819][ T6427] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.789467][ T6427] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.792596][ T6652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.820176][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 126.921855][ T6427] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.958248][ T6652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.891602][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.317065][ T6678] loop3: detected capacity change from 0 to 512 [ 130.266399][ T6427] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.329518][ T6678] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.338957][ T6678] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 131.190516][ T5939] usb 1-1: USB disconnect, device number 4 [ 131.255393][ T6678] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 131.268441][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.275609][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.327834][ T6678] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 131.336134][ T6678] System zones: 0-2, 18-18, 34-34 [ 131.343250][ T6678] EXT4-fs: error -4 creating inode table initialization thread [ 131.351732][ T6678] EXT4-fs (loop3): mount failed [ 131.419345][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.426531][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.511140][ T6427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.542947][ T6690] loop0: detected capacity change from 0 to 2048 [ 131.587777][ T6688] GPT:first_usable_lbas don't match. [ 131.593283][ T6688] GPT:34 != 290 [ 131.610823][ T6688] GPT: Use GNU Parted to correct GPT errors. [ 131.659959][ T6688] loop0: p1 p2 p3 [ 131.981073][ T6707] x_tables: ip_tables: osf match: only valid for protocol 6 [ 132.898882][ T6722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.919396][ T6427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.995447][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 133.049788][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.056955][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.482643][ T6427] veth0_vlan: entered promiscuous mode [ 133.509988][ T6427] veth1_vlan: entered promiscuous mode [ 133.573704][ T6427] veth0_macvtap: entered promiscuous mode [ 133.582979][ T6427] veth1_macvtap: entered promiscuous mode [ 133.598847][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.609568][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.619446][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.629945][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.639833][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.650461][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.660518][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.671501][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.684031][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.696207][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.706745][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.716668][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.727170][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.737063][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.747633][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.757521][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.768089][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.780148][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.806006][ T6427] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.815034][ T6427] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.823755][ T6427] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.832819][ T6427] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.284411][ T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 135.447286][ T8] usb 4-1: config 1 interface 0 altsetting 60 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.460440][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 135.469173][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 135.478534][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.487980][ T8] usb 4-1: Product: syz [ 135.492369][ T8] usb 4-1: Manufacturer: syz [ 135.497035][ T8] usb 4-1: SerialNumber: syz [ 135.503962][ T6749] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.698872][ T6714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.887691][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 135.928813][ T6683] udevd[6683]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 135.941412][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 136.092027][ T6553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.230691][ T6553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.424383][ T6032] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.565598][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.573507][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.670948][ T8] usbhid 4-1:1.0: can't add hid device: -71 [ 136.677097][ T8] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 136.693627][ T8] usb 4-1: USB disconnect, device number 6 [ 136.904303][ T5900] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.937998][ T6032] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 136.948909][ T6032] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 136.959878][ T6032] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 136.972276][ T6032] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 137.337264][ T6767] x_tables: ip_tables: osf match: only valid for protocol 6 [ 137.955052][ T6032] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 137.971963][ T6032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.980633][ T6032] usb 1-1: Product: syz [ 137.985052][ T6032] usb 1-1: Manufacturer: syz [ 137.989677][ T6032] usb 1-1: SerialNumber: syz [ 138.246260][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 138.263185][ T5900] usb 3-1: config 0 has no interfaces? [ 138.269082][ T5900] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.304611][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.335818][ T6032] usb 1-1: config 0 descriptor?? [ 138.347191][ T6032] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 138.397221][ T5900] usb 3-1: config 0 descriptor?? [ 138.428309][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.228'. [ 138.507967][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 138.554604][ T6032] scsi host1: usb-storage 1-1:0.0 [ 138.565045][ T6032] usb 1-1: USB disconnect, device number 5 [ 138.676094][ T5899] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 138.854361][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 138.867649][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.887223][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.906028][ T5899] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.923763][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.958538][ T5899] usb 4-1: config 0 descriptor?? [ 138.999858][ T5899] hub 4-1:0.0: USB hub found [ 139.084336][ T5901] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 139.355331][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.534750][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.702266][ T5899] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 139.772806][ T5901] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 139.782041][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.831274][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 139.839301][ T5899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 139.910090][ T5899] usb 4-1: USB disconnect, device number 7 [ 139.999441][ T5901] usb 5-1: config 0 descriptor?? [ 140.015288][ T5939] usb 3-1: USB disconnect, device number 4 [ 140.195094][ T6805] loop5: detected capacity change from 0 to 512 [ 140.238095][ T29] audit: type=1326 audit(1730817283.426:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b077e719 code=0x7ffc0000 [ 140.275982][ T6805] EXT4-fs (loop5): Encoding requested by superblock is unknown [ 140.331888][ T6809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.956504][ T29] audit: type=1326 audit(1730817283.426:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc2b077e719 code=0x7ffc0000 [ 140.982951][ T5901] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 141.040716][ T5901] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input10 [ 141.106363][ T29] audit: type=1326 audit(1730817283.436:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b077e719 code=0x7ffc0000 [ 141.198898][ T29] audit: type=1326 audit(1730817283.436:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b077e719 code=0x7ffc0000 [ 141.274594][ T6825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.301175][ T29] audit: type=1326 audit(1730817283.436:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2b077e719 code=0x7ffc0000 [ 141.350121][ T6826] binder: 6814:6826 ioctl 4018620d 0 returned -22 [ 141.687407][ T6828] Bluetooth: (null): Invalid header checksum [ 141.787103][ T29] audit: type=1326 audit(1730817283.436:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b077e719 code=0x7ffc0000 [ 141.827494][ T6811] Bluetooth: (null): Invalid header checksum [ 141.859826][ T6811] Bluetooth: (null): Invalid header checksum [ 142.087670][ T6811] Bluetooth: (null): Invalid header checksum [ 142.228804][ T29] audit: type=1326 audit(1730817283.436:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b077e719 code=0x7ffc0000 [ 142.234570][ T5901] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 142.260915][ T6811] Bluetooth: (null): Invalid header checksum [ 142.272999][ T6819] loop3: detected capacity change from 0 to 128 [ 142.314788][ T6819] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 142.325841][ T29] audit: type=1326 audit(1730817283.436:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc2b077e719 code=0x7ffc0000 [ 142.394323][ T5901] usb 5-1: USB disconnect, device number 8 [ 142.428252][ T29] audit: type=1326 audit(1730817283.436:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc2b077e753 code=0x7ffc0000 [ 142.479853][ T29] audit: type=1326 audit(1730817283.436:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc2b077d1ff code=0x7ffc0000 [ 142.570245][ T6836] loop2: detected capacity change from 0 to 512 [ 142.625122][ T6836] ext4: Unknown parameter 'uid' [ 142.688356][ T6819] syz.3.238: attempt to access beyond end of device [ 142.688356][ T6819] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 142.701967][ T6819] syz.3.238: attempt to access beyond end of device [ 142.701967][ T6819] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 142.787657][ T6840] x_tables: ip_tables: osf match: only valid for protocol 6 [ 143.367396][ T6836] loop2: detected capacity change from 0 to 1024 [ 143.452083][ T6836] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 143.601170][ T6836] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e119, mo2=0002] [ 143.615211][ T6836] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 143.667555][ T6836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.107152][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.224263][ T5901] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 146.404305][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 146.422822][ T5901] usb 5-1: config 0 has no interfaces? [ 146.481468][ T5901] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 146.994284][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.062277][ T5901] usb 5-1: config 0 descriptor?? [ 147.890767][ T6896] Bluetooth: (null): Invalid header checksum [ 148.430447][ T6898] sch_tbf: peakrate 7 is lower than or equals to rate 62733 ! [ 148.793100][ T5901] usb 5-1: USB disconnect, device number 9 [ 151.250507][ T6910] loop3: detected capacity change from 0 to 256 [ 151.610489][ T6910] FAT-fs (loop3): Directory bread(block 64) failed [ 151.630925][ T6910] FAT-fs (loop3): Directory bread(block 65) failed [ 151.874372][ T6910] FAT-fs (loop3): Directory bread(block 66) failed [ 151.940203][ T6923] x_tables: ip_tables: osf match: only valid for protocol 6 [ 152.663422][ T6910] FAT-fs (loop3): Directory bread(block 67) failed [ 152.670834][ T6910] FAT-fs (loop3): Directory bread(block 68) failed [ 152.677679][ T6910] FAT-fs (loop3): Directory bread(block 69) failed [ 152.684487][ T6910] FAT-fs (loop3): Directory bread(block 70) failed [ 152.854287][ T6910] FAT-fs (loop3): Directory bread(block 71) failed [ 152.861006][ T6910] FAT-fs (loop3): Directory bread(block 72) failed [ 152.974462][ T6910] FAT-fs (loop3): Directory bread(block 73) failed [ 153.884725][ T6943] loop0: detected capacity change from 0 to 512 [ 153.891738][ T6943] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.090278][ T6943] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 155.312463][ T6943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 155.320630][ T6943] System zones: 1-12 [ 155.333308][ T6943] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.266: corrupted in-inode xattr: e_value size too large [ 155.491458][ T6943] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.266: couldn't read orphan inode 15 (err -117) [ 155.776765][ T6943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.544347][ T58] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.167288][ T6957] tmpfs: Unknown parameter 'cn' [ 157.247504][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.300443][ T6966] loop3: detected capacity change from 0 to 128 [ 157.339035][ T6966] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.423049][ T6966] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.839736][ T5845] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.136323][ T6993] x_tables: ip_tables: osf match: only valid for protocol 6 [ 159.750849][ T6993] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 159.982570][ T6999] [ 159.984938][ T6999] ============================================ [ 159.991092][ T6999] WARNING: possible recursive locking detected [ 159.997246][ T6999] 6.12.0-rc6-next-20241105-syzkaller #0 Not tainted [ 160.003809][ T6999] -------------------------------------------- [ 160.009938][ T6999] syz.2.279/6999 is trying to acquire lock: [ 160.015815][ T6999] ffff888060d95200 (&trie->lock){..-.}-{3:3}, at: trie_delete_elem+0x96/0x6a0 [ 160.024675][ T6999] [ 160.024675][ T6999] but task is already holding lock: [ 160.032023][ T6999] ffff888060d94a00 (&trie->lock){..-.}-{3:3}, at: trie_update_elem+0xc8/0xc00 [ 160.040890][ T6999] [ 160.040890][ T6999] other info that might help us debug this: [ 160.048976][ T6999] Possible unsafe locking scenario: [ 160.048976][ T6999] [ 160.056420][ T6999] CPU0 [ 160.059695][ T6999] ---- [ 160.062955][ T6999] lock(&trie->lock); [ 160.067018][ T6999] lock(&trie->lock); [ 160.071090][ T6999] [ 160.071090][ T6999] *** DEADLOCK *** [ 160.071090][ T6999] [ 160.079222][ T6999] May be due to missing lock nesting notation [ 160.079222][ T6999] [ 160.087525][ T6999] 3 locks held by syz.2.279/6999: [ 160.092541][ T6999] #0: ffffffff8e93c160 (rcu_read_lock){....}-{1:3}, at: bpf_map_update_value+0x433/0x5c0 [ 160.102470][ T6999] #1: ffff888060d94a00 (&trie->lock){..-.}-{3:3}, at: trie_update_elem+0xc8/0xc00 [ 160.111784][ T6999] #2: ffffffff8e93c160 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590 [ 160.121181][ T6999] [ 160.121181][ T6999] stack backtrace: [ 160.127068][ T6999] CPU: 1 UID: 0 PID: 6999 Comm: syz.2.279 Not tainted 6.12.0-rc6-next-20241105-syzkaller #0 [ 160.137131][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.147184][ T6999] Call Trace: [ 160.150458][ T6999] [ 160.153380][ T6999] dump_stack_lvl+0x241/0x360 [ 160.158060][ T6999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.163249][ T6999] ? __pfx__printk+0x10/0x10 [ 160.167828][ T6999] ? lockdep_unlock+0x16a/0x300 [ 160.172679][ T6999] print_deadlock_bug+0x483/0x620 [ 160.177696][ T6999] validate_chain+0x15e2/0x5920 [ 160.182537][ T6999] ? is_bpf_text_address+0x26/0x2a0 [ 160.187731][ T6999] ? __pfx_validate_chain+0x10/0x10 [ 160.192919][ T6999] ? __lock_acquire+0x1397/0x2100 [ 160.197942][ T6999] ? __pfx_validate_chain+0x10/0x10 [ 160.203133][ T6999] ? __pfx_validate_chain+0x10/0x10 [ 160.208324][ T6999] ? mark_lock+0x9a/0x360 [ 160.212646][ T6999] __lock_acquire+0x1397/0x2100 [ 160.217488][ T6999] lock_acquire+0x1ed/0x550 [ 160.221977][ T6999] ? trie_delete_elem+0x96/0x6a0 [ 160.226907][ T6999] ? __pfx_lock_acquire+0x10/0x10 [ 160.231917][ T6999] ? __lock_acquire+0x1397/0x2100 [ 160.236937][ T6999] _raw_spin_lock_irqsave+0xd5/0x120 [ 160.242217][ T6999] ? trie_delete_elem+0x96/0x6a0 [ 160.247145][ T6999] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 160.253035][ T6999] ? __pfx_lock_acquire+0x10/0x10 [ 160.258048][ T6999] trie_delete_elem+0x96/0x6a0 [ 160.262800][ T6999] ? __pfx___cant_migrate+0x10/0x10 [ 160.267996][ T6999] ? bpf_trace_run4+0x244/0x590 [ 160.272841][ T6999] bpf_prog_1db1603a7cfa36fb+0x46/0x4a [ 160.278296][ T6999] bpf_trace_run4+0x334/0x590 [ 160.282966][ T6999] ? __pfx_bpf_trace_run4+0x10/0x10 [ 160.288161][ T6999] ? percpu_ref_get_many+0x19/0x140 [ 160.293350][ T6999] ? __memcg_kmem_charge_page+0xdb/0x1d0 [ 160.298977][ T6999] __alloc_pages_noprof+0x6dc/0x710 [ 160.304186][ T6999] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 160.309908][ T6999] ? __pfx_lock_acquire+0x10/0x10 [ 160.314922][ T6999] ? bpf_map_get_memcg+0x4e/0x5c0 [ 160.319938][ T6999] ? do_raw_spin_lock+0x14f/0x370 [ 160.324957][ T6999] ? __pfx_lock_release+0x10/0x10 [ 160.329970][ T6999] ___kmalloc_large_node+0x8b/0x1d0 [ 160.335163][ T6999] __kmalloc_large_node_noprof+0x1a/0x80 [ 160.340787][ T6999] __kmalloc_node_noprof+0x33a/0x4d0 [ 160.346065][ T6999] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 160.351344][ T6999] bpf_map_kmalloc_node+0xd3/0x1c0 [ 160.356447][ T6999] trie_update_elem+0x1cd/0xc00 [ 160.361290][ T6999] ? __pfx_bpf_obj_pin_uptrs+0x10/0x10 [ 160.366743][ T6999] bpf_map_update_value+0x533/0x5c0 [ 160.371933][ T6999] map_update_elem+0x51a/0x6f0 [ 160.376693][ T6999] __sys_bpf+0x76f/0x810 [ 160.380928][ T6999] ? __pfx___sys_bpf+0x10/0x10 [ 160.385687][ T6999] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 160.391661][ T6999] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.397985][ T6999] ? do_syscall_64+0x100/0x230 [ 160.402750][ T6999] __x64_sys_bpf+0x7c/0x90 [ 160.407160][ T6999] do_syscall_64+0xf3/0x230 [ 160.411653][ T6999] ? clear_bhb_loop+0x35/0x90 [ 160.416322][ T6999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.422205][ T6999] RIP: 0033:0x7f146097e719 [ 160.426615][ T6999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.446211][ T6999] RSP: 002b:00007f1461844038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.454625][ T6999] RAX: ffffffffffffffda RBX: 00007f1460b35f80 RCX: 00007f146097e719 [ 160.462591][ T6999] RDX: 0000000000000020 RSI: 0000000020000340 RDI: 0000000000000002 [ 160.470553][ T6999] RBP: 00007f14609f139e R08: 0000000000000000 R09: 0000000000000000 [ 160.478513][ T6999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.486472][ T6999] R13: 0000000000000000 R14: 00007f1460b35f80 R15: 00007ffd80700a58 [ 160.494440][ T6999] [ 160.539034][ T7006] loop5: detected capacity change from 0 to 512 [ 160.799428][ T7007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.827336][ T7006] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.281: bg 0: block 393: padding at end of block bitmap is not set [ 160.843656][ T7006] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 160.857496][ T7006] EXT4-fs (loop5): 2 truncates cleaned up [ 160.864046][ T7006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.923348][ T6427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.084385][ T5903] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.234261][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 161.240605][ T5903] usb 1-1: config 0 has no interfaces? [ 161.246214][ T5903] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.255301][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.264779][ T5903] usb 1-1: config 0 descriptor?? [ 163.524776][ T58] usb 1-1: USB disconnect, device number 6