last executing test programs: 3m21.346434393s ago: executing program 1 (id=24): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x2000404, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000010280)="$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") ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0]}, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@multicast2]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m16.876571258s ago: executing program 1 (id=30): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)) pipe(0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x120) readv(r1, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000b00)=""/49, 0x31}], 0x2d) 3m13.705713888s ago: executing program 1 (id=32): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000001050000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff4cff80850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x11, 0xe, 0x0, &(0x7f00000009c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m13.180361045s ago: executing program 1 (id=35): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0x0, 0xee00) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x0, &(0x7f0000000340)) 3m10.182160796s ago: executing program 1 (id=40): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x2000404, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000010280)="$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") ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0]}, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@multicast2]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m6.219764152s ago: executing program 1 (id=47): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3400c0, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @broadcast}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e2000000400000002003eb5041a000002000000", @ANYRES32, @ANYRESHEX=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa20000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x4c6}]}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") 2m50.966909062s ago: executing program 32 (id=47): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3400c0, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @broadcast}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e2000000400000002003eb5041a000002000000", @ANYRES32, @ANYRESHEX=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa20000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x4c6}]}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") 2m10.603965827s ago: executing program 4 (id=159): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m8.476043419s ago: executing program 4 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) lseek(0xffffffffffffffff, 0xc6c3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0xc}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2, 0x4}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000240)=ANY=[@ANYBLOB='debug,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,check=relaxed,dots,nodots,errors=continue,showexec,dots,dots,codepage=860,dots,nocase,codepage=936,check=relaxed,nodots,fmask=00000000000000000000002,umask=00000000000000000000005,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,fsmagic=0x00000000000000fb,pcr=00000000000000000021,uid>', @ANYRES16, @ANYBLOB="2c636f6e746578743d73797374656d5f752c726f2c61756469742c7375626a5f726f6c651ca8ba91a3a08f88b8a003653455fed0f0b52cf1452b003f8e172d0d2cd5ed8d9ba16fba394f2bf8decb8c5a4913698ed516a64bde"], 0x5, 0x1c7, &(0x7f0000000500)="$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") 2m7.345354226s ago: executing program 4 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x282241, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC, @ANYRES64=0x0, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 2m5.052140218s ago: executing program 4 (id=172): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 2m2.66008968s ago: executing program 4 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}]}, 0x3, 0x500, &(0x7f0000000500)="$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") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) socket$vsock_stream(0x28, 0x1, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m59.196048598s ago: executing program 4 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fd, &(0x7f0000000600)="$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") socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040)=[{r5, 0x8101}], 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d63703835302c6e616d65aa7d04743d312c6572726f72733d72656d6f756e742d726f2c6572726f72733d72656d6f756e742d726f2c666d61736b3f30303030303430303030303030303030323030383030332c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1520, &(0x7f0000002280)="$eJzs3Au4TtXWOPAx5pxr23bS204umznnWLzJZdpJkkuSXJIkSZLcEpJ2ciQhscktaZOE5LJJLpuQ3GKn7X6/XxKSpJ0kIbkl8//s8Hc6db5zznf6ju/59vg9z3rM8a415hrrHet937XWg+86D6nRqGbVBkQE/xa8+EcyAMQCwAAAuA4AAgAoG182Pmt9TonJ/95O2J/rkbSrXQG7mrj/2Rv3P3vj/mdv3P/sjfufvXH/szfuf/bG/WcsO9s8rcD1vGTfhZ//Z2f8+/9/SGapMV+tLXVjF4CYfzaF+5+9cf//zwr+mY24/9kb9z+7ir3aBbD/Bfjznx3k+LtruP/ZG/efsezsaj9/vtoLRLL3e3C1zz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY9nDGX+FAoDL46tdF2OMMcYYY4wxxv48PsfVroAxxhhjjDHGGGP/8xAESFAQQAzkgFjICXEgAOBayA3XQQSuh3i4AfLAjZAX8kF+KAAJUBAKgQYDFghCKAxFIAo3QVG4GYpBcSgBJcFBKUiEW6A03Apl4DYoC7dDObgDykMFqAiV4E6oDHdBFbgbqsI9UA2qQw2oCfdCLbgPasP9UAcegLrwINSDh6A+PAwN4BFoCI9CI3gMGsPj0ASaQjNoDi3+W/kvQXd4GXpAT0iGXtAbXoE+0Bf6QX8YAK/CQHgNBsHrkAKDYQi8AUPhTRgGb8FwGAEj4W0YBe/AaBgDY2EcpMJ4mADvwkR4DybBZJgCUyENpsF0eB9mwEyYBR/AbPgQ5sBcmAfzYQF8BAthEaTDx7AYPoEMWAJLYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHHbATPoVd8Bnshj2wFz6HffDFv5h/+m/yuyAgoECBChXGYAzGYizGYRzmwlyYG3NjBCMYj/GYB/NgXsyL+TE/JmACFsJCaNAgIWFhLIxRjGJRLIrFsBiWwBLo0GEiJmJpvBXLYBksi2WxHJbD8lgBK2AlrISVsTJWwSpYFatiNayGNbAG3ov3Yi+sjbWxDtbBulj38uMpbIANsCE2xEbYCBtjY2yCTbAZNsMW2AJbYktsha2wDbbBttgW22E7TMIkbI/tsQN2wI7YETthJ+yMnbELdsWumS/lAHwZX8aeWE30wt7YG/tgSo5+2B/746s4EF/D1/B1TMHBOATfwDfwTRyGp3A4jsCROBIri3dwNI5BEuMwFVNxAk7AiTgRJ+FknIxTMQ2n4XScjjNwJs7ED3A2fogf4lyci/NxAS7AhbgI0zEdF+NpzMAluBSX4XJcgctxFa7GVbgW1+Fa3IAbcBNuwi24BbfhNtyBO/BTVAD4Ge7BPZiC+3Af7sf9eAAP4EE8iJmYiYfwEB7Gw3gEj+BRPIrH8DiewON4Ek/iKTyNZ/AMnsNzeB5fSPim4afF16SAyKKEEjEiRsSKWBEn4kQukUvkFrlFREREvIgXeUQekVfkFflFfpEgEkQhUUgYYQSJMAYARFRERVFRVBQTxQBECeGEE4kiUZQWpUUZUUaUFbeLcuIOUV5UEK1dJVFJVBZtXBVxt6gqqopqorqoIWqKmqKWqCVqi9qijqgj6oq6op54SNQXvbAfPiKyOtNIDMbGYgg2EU2FvPQN1lIMw1aitWgjnhIjcDi2Ey1dknhWtBejsYP4ixiDz4tOYhx2Fi+KLqKr6CZeEt1FK9dD9BSTsJfoLaZiH9FX9BP9xQysLj7A2TlriNdFihgshog3xHx8UwwTb4nhYoQYKd4Wo8Q7YrQYI8aKcSJVjBcTxLtionhPTBKTxRQxVaSJaWK6eF/MEDPFLPGBmC0+FHPEXDFPzBcLxEdioVgk0sXHYrH4RGSIJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmtosdYqf4VOwSn4ndYo/YKz4X+8QXYr/4UhwQX4mD4muRKb4Rh8S34rD4ThwR34uj4gdxTBwXJ8SP4qT4SZwSp8UZcVacEz+L8+IXcUF4ARKlkFIqGcgYmUPGypwyTl4jc8ng0rt7vYyXN8g88kaZV+aT+WUBmSALykJSSyOtJBnKwrKIjMqbZFF5sywmi8sSsqR0spRMlLfI0vJWWUbeJsvK22U5eYcsLyvIirKSvFNWlndJiFzcRzVZXdaQNeW9Mhnuk7Xl/bKOfEDWlQ/KevIhWV8+LBvIR2RD+ahsJB+TjeXjsolsKpvJ5rKFfEK2lE/KVrK1bCOfkm3l07KdfEYmyWdle+kvnSLPy07yBdlZvii7yK6ym/xFXpBe9pA9JfQC2Vu+IvvIvrKf7C8HyFflQPmaHCRflylysBwi35BD5ZtymHxLDpcj5Ej5thwl35Gj5Rg5Vo6TqXK8nCDflRPle3KSnCynyKkyTU6T/S7NNEvKf5j/7h/kD/p175vkZrlFbpXb5Ha5Q+6Un8pdcpfcLXfLvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7Pyh/lSfmTPCVPy9PyrDwnz8nzl94DUKiEkkqpQMWoHCpW5VRx6hqVS12rcqvrVERdr+LVDSqPulHlVflUflVAJaiCqpDSyiirSIWqsCqiouomvHTCqBKqpHKqlEpUt/wr+aqoulkVU8V/k3+5vuS/U18L1UK1VC1VK9VKtVFtVFvVVrVT7VSSSlLtVXvVQXVQHVVH1Ul1Up1VZ9VFdVHdVDfVXXVXPVQPlaySVW/1iuqj+qp+qr8aoF5VA9VANUgNUikqRQ1RQ9RQNVQNU8PUcDVcjVQj1Sg1So1Wo9VYNValqlQ1QU1QE9VENUlNUlPUFJWm0tR0NV3NUDPULDVLzVaz1Rw1R81T89QCtUAtVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7VK71G61W+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUCfVSXVKnVJn1Bl1Tp1T59V5dUFdyLrsC0QgAhWoICaICWKD2CAuiAtyBbmC3EHuIBJEgvggPsgT3BjkDfIF+YMCQUJQMCgU6MAENhCXmh4NbgqKBjcHxYLiQYmgZOCCUkFicEtQOrg1KBPcFpQNbg/KBXcE5YMKQcWgUnBnUDm4K6gS3B1UDe4JqgXVgxpBzeDeoFZwX1A7uD+oEzwQ1A0eDOoFDwX1g4eDBsEjQcPg0aBR8FjQOHg8aBI0DZoFzYMWf+r83p/K96TroXvqZN1L99av6D66r+6n++sB+lU9UL+mB+nXdYoerIfoN/RQ/aYept/Sw/UIPVK/rUfpd/RoPUaP1eN0qh6vJ+h39UT9np6kJ+speqpO09P0dP2+nqFn6ln6Az1bf6jn6Ll6np6vF+iP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/RO/anepT/Tu/UevVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/oH/VJ/ZM+pU/rM/qsPqd/1uf1L/qC9lkX91k/70YZZWJMjIk1sSbOxJlcJpfJbXKbiImYeBNv8pg8Jq/Ja/Kb/CbBJJhCppDJQoZMYVPYRE3UFDVFTTFTzJQwJYwzziSaRFPalDZlTBlT1pQ15Uw5U96UNxVNRXOnudPcZe4yd5u7zT3mHlPdVDc1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDHNTDPTwrQwLU1L08q0Mm1MG9PWtDXtTDuTZJJMe9PedDAdTEfT0XQynUxn09l0MV1MN9PNdDfdTQ/TwySbZNPb9DZ9TB/Tz/QzA8wAM9AMNIPMIJNiUswQM8QMNUPNMDPMDDcjzMisC1XzjhltxpixZpxJNalmgplgJpqJZpKZZKaYKSbNpJnpZrqZYWaYWWaWmW1mmzlmjpln5pkFZoFZaBaadJNuFpvFJsNkmKVmqVlulpuVZqVZbVabtWatWQ/rzUaz0Ww2m81Ws9VsN9vNTrPT7DK7zG6z2+w1e80+s8/sN/vNAXPAHDQHTabJNIfMIXPYHDZHzBFz1Bw1x8wxc8KcMCfNSXPKnDJnzBlzzuS79HvpTazNaePsNTaXvdbmttfZv43z2wI2wRa0hay2eW2+38TGWlvMFrclbEnrbCmbaG/5XVzeVrAVbSV7p61s77JVfhfXsvfZ2vZ+W8c+YGvae38T17UP2nr2MVsfEcA2tQ1tc9vIPmYb28dtE9vUNrPNbVv7tG1nn7FJ9lnb3j73u3ihXWRX2zV2rV1nd9s99ow9aw/b7+w5+7PtYXvaAfZVO9C+ZgfZ122KHfy7eKR9246y79jRdowda8f9Lp5ip9o0O81Ot+/bGXbm7+IF9iM726bbOXaunWfn/xpn1ZRuP7aL7Sc2wwaw1C6zy+0Ku9Ku+v+1LrMb7Ea7ye6yn9mtdpvdbnfYnZcvhO0eu9d+bvfZL+wh+609YL+yB+0Rm2m/+TXOOr4j9nt71P5gj9nj9oT90Z60P6nL2VnH/qP9xV6w3gIhAUlSFFAM5aBYyklxdA3lomspN11HEbqe4ukGykM3Ul7KR/mpACVQQSpEmgxZIgqpMBWhKN1El8srQSXJUSlKpFuoNN1KZeg2Kku3Uzm6g8pTBapIlehOqkx3URW6m6rSPVSNqlMNqkn3Ui26j2rT/VSHHqC69CDVo4eoPj1MDegRakiPUiN6jBrT49SEmlIzak4t6AlqSU9SK2pNbegpaktPUzt6hpLoWWpPz1EH+gt1pOepE71AnelF6kJdqRu9RN3pZepBPSmZelFveoX6UF/qR/1pAL1KA+k1GkSvUwoNpiH0Bg2lN2kYvUXDaQSNpLdpFL1Do2kMjaVxlErjaQK9SxPpPZpEk2kKTaU0mkbT6X2aQTNpFn1As+lDmkNzaR7NpwX0ES2kRZROH9Ni+oQyaAktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO+pR20We0m/bQXvqc9tEXtJ++pAP0FR2krymTvqFD9C0dpu/oCH3ve9IPdIyO0wn6kU7ST3SKTtMZOkvn6Gc6T7/QBfIEIYYilKEKgzAmzBHGhjnDuPCaMFd4bZh1wkTC68P48IYwT3hjmDfMF+YPC4QJYcGwUKhDE9qQwjAsHBYJo+FNYdHw5rBYWDwsEZYMXVgqTAxvCUuHt4ZlwtvCsuHtYbnwjrB8WCF87IFK4Z1h5fCusEp4d1g1vCesFlYPa4Q1w3vDWuF9Ye3w/rBO+EBYJnwwrBc+FNYPHw4bhI+EDcNHw0bhY2Hj8PGwSdg0bBY2D1uET4QtwyfDVmHrsE34VNg2fDpsFz4TJoXPhu3D535d/+Civ78+OewV9g5fCV8Jvb9fzovOjy6IfhRdGF0UTY9+HF0c/SSaEV0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3RjdFPW+Zg5w6ISTTrnAxbgcLtbldHHuGpfLXetyu+tcxF3v4t0NLo+70eV1+Vx+V8AluIKukNPOOOvIha6wK+Ki7iZX1N3sirniroQr6Zwr5RJdc9fCtXAt3ZOulWvt2rin3FPuafe0e8Y945517d1zroP7i+vonned3AvuBfei6+K6um7uJdfdjc998TOZ7Hq73q6P6+P6uX5ugBvgBrqBbpAb5FJcihvihrihbqgb5oa54W64G+lGulFulBvtRruxbqxLdalugpvgJrqJbpKb5Ka4KS7Npbnpbrqb4Wa4yjMv7mWOm+PmuXlugVvgFrqsa8Z0t9gtdhkuwy11S91yt9ytdCvdarfarXVr3Xq33m10G91mt9ltdVvddrfd7XQ73S63y+32112c1O1z+91+d8AdcAfd1y7TfeMOuW/dYfedO+K+d0fdD+6YO+5OuB/dSfeTO+VOuzPurDvnfnbn3S/ugvMuNTI+MiHybmRi5L3IpMjkyJTI1EhaZFpkeuT9yIzIzMisyAeR2ZEPI3MicyPzIvMjCB9FFkYWRdIjH0cWRz6JZESWRJZGlkWWR1ZEvC+4NfSFfREf9Tf5ov5mX8wX9yV8Se98KZ/ob/Gl/a2+jL/Nl/W3+3L+Dl/eV/AV/eO+iW/qm/nmvoV/wrf0T/pWvrVv45/ybf3Tvp1/xif5Z317/5zv4P/iO/rnfSf/gu/sX/RdfFffzb/ku/uXfQ/f0yf7Xr63f8X38X19P9/fD/Cv+oH+NT/Iv+5T/GA/xL/hh/o3/TD/lh/uR/iRMW/7UZdvkWGcT/Xj/QT/rp/o3/OT/GQ/xU/1aX6an+7f9zP8TD/Lf+Bn+w/9HD/Xz/Pz/QL/kV/oF/l0/7Ff7D/xGX7J5YfKfqVf5Vf7NX6tX+fX+w1+o9/kN/stfqvf5rf7HX6n/9Tv8p/53X6P3+s/9/v8F36//9If8F/5g/5rn+m/8Yd+ffr3nT/iv/dH/Q/+mD/uT/gf/Un/kz/lT/sz/qw/53/25/0v/gL/mzXGGGOMsX/K+CtD8ds1Fx/n9/qDHPFXG/cGgGu3Fcj86/VZV5Tr814c9xUJbSMA8GzPzo9cXqpVS05OvrRthoSgyNysG8or+TFwJV4CbeBpSILWUPoP6+8rup6jfzB/9HaAuL/KiYUr8ZX5vwTA5D+Y/4mnRi4sF56J/y/mnwtQrMiVnJxwJV4CbX59vtIayvyd+vO1/Af15/wqFaDVX+XkgivxlfoT4Ul4DpJ+syVjjDHGGGOMMXZRX1Gx4+X7z8t/4/OP7s8T1JWcHHAl/kf354wxxhhjjDHGGLv6nu/a7ZknkpJad/zXB1X+W1n/9KAx/E/NzIM/HHgPcPkVBQD/5oQAWQP5nzyKLf+RfaVc+uj87arlZ30A/zta+WcMrvIXE2OMMcYYY+xPd+Wi/7evq6tVEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlg39J/47sat9jIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtjV9v8CAAD//3K3/hI=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 1m42.794820034s ago: executing program 33 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fd, &(0x7f0000000600)="$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") socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040)=[{r5, 0x8101}], 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d63703835302c6e616d65aa7d04743d312c6572726f72733d72656d6f756e742d726f2c6572726f72733d72656d6f756e742d726f2c666d61736b3f30303030303430303030303030303030323030383030332c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1520, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 23.68960357s ago: executing program 2 (id=409): ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/5) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/86) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/195) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000200)=""/4096) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000001200)={0x2, 0x7, 0x1ff, 0xa, 0x3, 0x84}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000002240)={0x12, 0x800, &(0x7f0000001240)="d0f16d86091dbecce4aa7e0054d46ae6396fdd5a4f9f4604a2b5e3de4b7f1ffdb856b8e27e67f029874b8b20fd88d543ab4af1998d8bab5910dec7433fb49bab69ad231ade1c5ff95deb5aa19b701fd08910c9010bdf3b8ec758f3a09cce0c0304d564ce0906979e44a67b650516f9d3246354fc60d227386198a93d9534a5a657ea05453e97f8f5cbfe9748eb03521e7d7c51ebd86b536b34e8b5b4c0333f383a510f60d799a1afd0e3646ac2a7a51bd11f2f0cbdd874ee53a72a17b8e56f650be07eb6a46ec0d273817ca7c820ad76b9164410143d9afb603dd9c9d7c361d5f610c5e32c361f4a4e0f9838c4b0dcee178b8b39e16a07ad6207a604e56fbd825465c0f3d2c69b74cfc672f4197bbb6e9b3c83bf3b3bb77ea3e33c43cc9359afadb3eea6cc9db3773531b693ccaa9859eccddf5f94810a07d786d5ac3183cc9f659dc2777cffbf8048cde1e02d2d98f9fd1ce01bf3483058b96b3a5e018ccef5e1a031395b9271b28735d5a01e8926a281a3daa59713f789f7d604c4ccbceb4b138d8b7c20a50f2c6f23747412bd1aa0aa2c94a9d814024a28bdaf25fa98e56d67b1f346a335c881be53e38adf21f223bb6c5b5cec0d601ed90229cdf3991fe9800d080a284c11f109b695acd9bbaeaa0a627265e0de69756ec7ce82e6888828c6b140a92ca363f857f5940ec5492f3e9dafc56bedc7d217146e6a2e4651afdc4730a51766e7a7c251cca6728a99d00d757cc77de783415d69651ce4c6fb1081e05a0020e4b182e8d04042a92492072a02f1c08e5c12129bf020cedfa82aabe013eac1c6ccd4dbf954718d1b40e03013cd0031bdcba2061e6a1c34b31e743368eb6ba3e938b1141502386c8f336c720764befb80d8a29714676a14211f3e86def93a86580d873c7fd582f7014da1ff969505271907cbfe200b3766b429ae69834dce4673c5370e5f35835e4a961a686e7e31b3fe25dec38fdab1f47f59eb24f6f9203a656383aca5c555672ee3ec6c434cd40a69dc50857389b3f32ae17f6205950fa8b0fcd8d335730610ba8538a606a4189c1815800f97e00caa554205816a90ad109c048e77a3fa78d82dd5ec6d81fc763d62efdad5fb6a7ce35f58faffdceef4336ceba756b5dee50de5057372ca98246b145e7fade225a9091a6d8667fd3ac8d5edc47c5c60aa8959928f8419c26c9f23a331d4823e00fb75728bfe6385798df403846717d5e4dc104e2edae2cfa56e2bdf25f02fb7f93f7c38228d1c20bb5364c71e8c19cc461efde0cbb89873abd99a1ad9178e1406ab2f288519416534587da319c64c46edec1893e2c1a767a02ee93abbf690c7cb70e25fd7650f4a0faf6a0f9197914bc5af5113097f8ea699d3c5d2785b0da37cc91a33eace3880d0d8512a0eec7df496fe2706e8fb1f0d322ab980c4ff23fcf2232b0a536ba60eb8985e404edd01ceebc497897634293dd6eb0afcaa65ad51a52445cbc6f4d5ed8f048165ae01ccdfb1ff29bc1b07a5093e605a134a551dc57cad67f46e8d9b387bd8ce97b8c17704d8bab8cf639cc405ac0033c2b4979370ce15b89fe43e6060f311b68a8ad897d40aa76e000c5b0cd902410bdc87c5c4803b01c0d7493f5bc22aa58f1090a7d800f83be9a0cb2ab71e127be2c0da30270aed14fda50b7699ac5d6d9f67efb511e38593c66f09b62d0e66661648461fe5b66322a03707152a92d2431822ebcf0b930037ff15cc4a6d74080b3043b129abf8b5d9d071518f5e88e01f2cd259b4dbe32673cb67d5ea65cd86f7f158f60c0c882bfcb251b4517f6ddb789d7fb8d25f597f506ec225bcda253f6b97831e116ddb7fdf44f0759b2b235d11506d80560b73a70d5229b8333821c2996d5db634755593a52a0a3c7d0c3b19e61157ec1e8b91cb8c68ed2d1593405018f1e317c8595811820ffad5e50654b3bc9d38502c3b8ee9a7428d8b51c05cd73073a56560d30150ee07c7fa0c38facd35adf784de7aa36649e7c54bbb09f3e795baed8f3d8afeaa015556263327f2e7e768a63d3790d29346a78c292439064b8010d03b72f312dffb06526e6c3ca69c5a6a9ab05df5c9927470ce11eae5d001fe233d131b8604d27c7022a3e86a28c86cd34ecfcaf6f117b2ba9c2aea020a617a3a05eae8c9e18e559c5181164f9a26039b0a1f4253f975439095125cb8209bc5b25875489a2aca62b045273506ead4aa7a291ab05c328bd1f24d700341c5f722e3c8c98df9873cc2403df8f0b309f913c47c4a33280b53bbac12065c8b3e65d367d5560f1a7db4f797bb59d3234bd9af583fc11996441ca80c862fff22dd40bdb9479efe7ee0b22f720882613f4f61599522a73140850079ab22cea015775b2849f84ca1a3f750ce3d5553e7f485ccb52d73af074262b962d1b9f3eb38d4f21aa91d3ed1a85fe74be68bcb8a852c17010b9ba9d246feba4efb12ae7b463fe8a736f15f74de30cb534bba0e6dac0f75900eb4e4eb1c7e40bb1d3b4c5a077ca3aa2dae7ff7d4e3051458c512c396607700e229bafbcc4e7455c5a507af24b5003c4ce12a05f8b71c157b98ab3cee8b64b3e79e2781db9b62c9777d8f94a90ef505ed2c52c6a9120b5b4344ddce8b22e523f53d7da47120fa082a16275dbe3a01eb6cba8956bb5408060c616385c966b703521fa8b6699ace22b9bc7733f962b7703277512ef41624609881215a227fef902b399ea97126ee05582b3bbb8202e9cfb74c561c86d32b2a84e7a0dbdb2f5d6c7f3616d8336e83b8bb6a6ae727459dbe99443b095f53e5c95ca79efa40ec919053fa4a795f910629d972dd8be75d5c8ba670fc7dd396ecc115f61ee6751475959ebacfda18457ab2199676186094a4307e9ef26feac6809612446f744dee"}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000002280)={0x0, 0x4, 0x2, 0x0, 0x7f, 0x43}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000022c0)={0x1, 0x9, 0x0, 0x400000, 0x6, 0x4}) syz_usb_connect$cdc_ncm(0x4, 0xae, &(0x7f0000002300)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x28, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x2, 0x1, 0x0, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "cd1e5a7b4520"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x7, 0x21}, {0x6, 0x24, 0x1a, 0x414, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x20, 0x3e, 0x5}, @mdlm_detail={0x29, 0x24, 0x13, 0x0, "33e2a4fc2f96cc33fa078875230e6bec8d393b3b82041e01f0617823e062c4c681e2ce0a8e"}, @country_functional={0xa, 0x24, 0x7, 0x81, 0x7, [0xd2, 0x0]}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x73, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x0, 0x4}}}}}}}]}}, &(0x7f0000002840)={0xa, &(0x7f00000023c0)={0xa, 0x6, 0x310, 0x9, 0x7, 0x5, 0x8, 0x8}, 0x8f, &(0x7f0000002400)={0x5, 0xf, 0x8f, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0xa, 0x1, 0xaba02b, 0xf0f, 0x4, [0xc00f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x7, 0x0, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4c, 0x4c, 0x6, 0x3, 0x3}, @generic={0x62, 0x10, 0xa, "fc072af52e7cefe4da6bf1fa97f377606183a3d3526bb0780d74ed9380b94f4cedd2590068c07b154eeb387fb69e1eaebd39e99098c70fae004325e122e8b4ce473467f21521cf684218b7268889716a27ea7262723f3914107158b3ab6e26"}]}, 0x5, [{0x0, 0x0}, {0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x447}}, {0x2, &(0x7f0000002640)=@string={0x2}}, {0x63, &(0x7f0000002700)=@string={0x63, 0x3, "2855d6494316c506610dcc3ed07588e3a5a522543c19eca5784c275edb69b1002ae291aea857b8ee054c2210ce3baa462b17672207717365f97977b35c625550dd415f7100d937e85a5bdb7008deb46942713573e934ff0addc63b805adf07a84f"}}, {0xa2, &(0x7f0000002780)=@string={0xa2, 0x3, "5f5bb09bfe610ed56fbf035ff5b9573c8489312689eefbbb9e903b9c56cb12d68ba05149445cdba86d44fcaaffb20dcfa0b9aa56a5a7dfbf3a8de40efb06a56922380ddc4caabdf02170121a535174cf65af1a8f34697ef974801a46f50e2820fd6bfed6f4b31685dd0ccd6257a402c7a1aaf76024e9bd10be4bec87f9a11cc179899df53e4c5ec90191ec72cc19253cefbf5f7e2ff6887189cf06c8233f4a96"}}]}) syz_open_dev$evdev(&(0x7f00000028c0), 0x8, 0x123200) r1 = syz_open_dev$evdev(&(0x7f0000002900), 0x0, 0x200640) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000002940)=""/11) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000002a40), 0x4, 0x8100) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000002b80)=""/141) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000002d40)={0x11, 0xf8, &(0x7f0000002c40)="47cd20a1f99fa1f00abac8638c3e952dd087c8781ecac6e38ab8396e3df8db46bfa355b47d8492e030b9356b4e740683cac00e8a9d77a8a114b553651be86a80d2e9bb9d1dad0ecb505bd00ae1624abaa791acf46337cae9bffcd26fe31fda4f0f9bd1f8afbc58dfab788aeb4a0c2f46cd64dd8b44fb6c68dcab29d62a2521ab10ceaef1d9bde23b7947cacd1b8e4d56e08821c497b649d4a132904d76f4022bcd533af86bdf5164b18f6fe335aa903084111976c812a82e23da6643fa4b443ddff2678e1c6cbe49dcd2d67712fde63ff00e7c948ee6b1eb6b2d915c28ca75bb232a9cf43d868943ae0d710fbc20a9f8b0b105ddd23afbab"}) r3 = syz_usb_connect(0x5, 0x1d1, &(0x7f0000003800)={{0x12, 0x1, 0x250, 0x9, 0x90, 0xd9, 0x8, 0x1164, 0x602, 0x4cdd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1bf, 0x1, 0xfd, 0xf5, 0x50, 0x5, [{{0x9, 0x4, 0xc7, 0x81, 0x3, 0xcc, 0xf8, 0x57, 0x4, [@uac_as], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0xe, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1000}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x9, 0xc, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x7bd}]}}, {{0x9, 0x5, 0x1744f2748aae0bc3, 0x10, 0x20, 0x8, 0x7, 0x5, [@generic={0xb7, 0x5, "f87339831d73705a16c80643c6c83a4cc8dce72e194cc46360874c6f797ddda531e949fdf573ab30744184f90b7cb7e39c39ba3fb605da14ba74f64e06780f571f011846edd84d370ce6364b32ecf25fc980abc1ad4d03194617ddc82510200e2c335d93f4a4270f558693a95a3f1c2be367d9fa6284327352b3b5a1a6a7599a94c2dd95b5007b87b57209518993874aa1e83ad78c3d153aeed84c0e21957e1508898ea399b8103771deb413d453ed0951b34c7f19"}, @generic={0xcd, 0x9, "98e294dbee89de696a682e532d3d355b212b65ac060c49a33920f55c112d564cf9285e4f8c45627a6d526ae08101f19cf686c4d281583a18a45c0b20a8f1cac31af1983ab4d4bfd95d87a446902c63df84c44018af6aa98771a93245cd3b1d69d14a2c54391029b24d6c48143d4c59dfb824e29ad2e535fec6e5b47e2e7e546226de799c6efced2d7e6b2a06c418012cc792614f73a49e726d1add9316b7d6d2fb98a5af37684f8cf315b16a2f5341f4431a1aa98548c10b09308aca7175f101d6a6eb57a5ac5ad3279392"}]}}]}}]}}]}}, &(0x7f0000003b00)={0xa, &(0x7f0000003a40)={0xa, 0x6, 0x110, 0xb, 0xe, 0xfa, 0x20, 0x6}, 0x14, &(0x7f0000003a80)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x81, 0x0, 0x5, 0xff00, 0xa}]}, 0x1, [{0x4, &(0x7f0000003ac0)=@lang_id={0x4, 0x3, 0x180c}}]}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000004c40)={0x14, &(0x7f0000004b40)={0x20, 0x21, 0x82, {0x82, 0x3, "93b07fd6e6e1deee0fa5530145c5d0a1734386d6c30f701b72321c33079c92a9a48d038f28a3171ff127f449722aa3d1cbf7249d396608cf1137956018bd4210402380b01827af341543e7757d515cd7226e968bd588f6c211e2c831a59a5a7d9f0d4760819665819b50577539b79fcdbfd1e94b04f2823d34b739a5cc4f6a81"}}, &(0x7f0000004c00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004d80)={0x1c, &(0x7f0000004c80)={0x40, 0xc}, &(0x7f0000004d00)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000004d40)={0x0, 0x8, 0x1, 0x2}}) syz_usb_control_io$uac1(r3, &(0x7f0000005340)={0x14, &(0x7f0000005200)={0x0, 0x2, 0x2b, {0x2b, 0x22, "994317c0ae37d8ca34519d702d283da595d044443ef6d0981b7fb2961f2e32a1a07f8b482da7fb4f84"}}, &(0x7f0000005280)={0x0, 0x3, 0x79, @string={0x79, 0x3, "07e2ff800cb7a3d5b5f75706988d2b68bb5b41cd7834016a2fe49a21f2732c99e4164de6d4b90a0f291808fc5b924fcdedd4dbc4d05e87628681cc757ebb7bde4004b2f60095f36c726a9c22effd9d716fa102765f8951a6e590206b5d56b8137c44a66452d961e95bc958d7a6ecef7730800da621e03d"}}}, &(0x7f0000005640)={0x44, &(0x7f0000005380)={0x60, 0x15, 0xd9, "f51aac2e545fcf46b304bdb7f83ce6bb81171eba585850ae0c1ec0a32d9b7d1091f00f3ede367f3580d19a6bdcad06571134cf4b6f813f7e1018d1311f4f80a8125c18cc5068e91e4b702a35be7b1c4a060a4435cd83f31a923e50d2851ae28766a996cae999c1be1338b678f921eb91e81e52bb6df7a1ae3ffa3e0fd20489707f2d5cc49ce8e23ce4ee347333cbba7836a51caf08e1a61a712730fd3bb82aacaafb91e3a532e834b73582f3abcf0dbe026827df22f02a93bacb2e17b1e17bdf775812e561bacb67dc79d4826278ac9c89751d338455d43a73"}, &(0x7f0000005480)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000054c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000005500)={0x20, 0x81, 0x3, "ff09bf"}, &(0x7f0000005540)={0x20, 0x82, 0x3, "f8e5d0"}, &(0x7f0000005580)={0x20, 0x83, 0x3, "c720e6"}, &(0x7f00000055c0)={0x20, 0x84, 0x1, '4'}, &(0x7f0000005600)={0x20, 0x85, 0x3, "925fa6"}}) 19.109553844s ago: executing program 2 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x49f) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000001100)={'syz0\x00', {}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) read(r2, &(0x7f0000000080)=""/113, 0x71) 16.814475877s ago: executing program 0 (id=428): openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 16.767151146s ago: executing program 2 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="000032a52087bde616ce59eb5d584d5740365517ad21f058e82ec7478f431382cb488ac5ddd77a67786019a0f629777582fc430000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x6c) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000120009090000000000000000070000030000000000000000000000002e00e800000000000000b77b9d954bc6f5"], 0x50}}, 0x0) 14.80085891s ago: executing program 0 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) lseek(0xffffffffffffffff, 0xc6c3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0xc}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2, 0x4}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000240)=ANY=[@ANYBLOB='debug,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,check=relaxed,dots,nodots,errors=continue,showexec,dots,dots,codepage=860,dots,nocase,codepage=936,check=relaxed,nodots,fmask=00000000000000000000002,umask=00000000000000000000005,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,fsmagic=0x00000000000000fb,pcr=00000000000000000021,uid>', @ANYRES16, @ANYBLOB="2c636f6e746578743d73797374656d5f752c726f2c61756469742c7375626a5f726f6c651ca8ba91a3a08f88b8a003653455fed0f0b52cf1452b003f8e172d0d2cd5ed8d9ba16fba394f2bf8decb8c5a4913698ed516a64bde"], 0x5, 0x1c7, &(0x7f0000000500)="$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") 13.426636316s ago: executing program 0 (id=432): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) 13.294454205s ago: executing program 3 (id=434): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010000c800c0022"], 0x30}}, 0x0) 12.980019564s ago: executing program 5 (id=436): socket$inet6(0xa, 0x400000000001, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_create(0x8, 0x80800) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 12.834924773s ago: executing program 3 (id=437): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000780)={[{@prjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@user_xattr}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mkdir(&(0x7f0000000380)='./bus\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000008020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 10.692009246s ago: executing program 5 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x49f) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000001100)={'syz0\x00', {}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) read(r2, &(0x7f0000000080)=""/113, 0x71) 10.431550345s ago: executing program 6 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) 10.196038424s ago: executing program 2 (id=442): syz_usb_connect$uac1(0x6, 0xb7, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x202001, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) writev(0xffffffffffffffff, &(0x7f0000007340)=[{&(0x7f0000005f40)='1', 0x1}], 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x0, 0x0, 0x0, 0x300}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe9d, 0x10, 0x0, 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 9.692331323s ago: executing program 3 (id=443): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x2, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0xc, 0xcf, 0x3, 0x0, [{}]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) capget(&(0x7f0000000000)={0x19980330}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.508092632s ago: executing program 5 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) lseek(0xffffffffffffffff, 0xc6c3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0xc}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2, 0x4}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000240)=ANY=[@ANYBLOB='debug,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,check=relaxed,dots,nodots,errors=continue,showexec,dots,dots,codepage=860,dots,nocase,codepage=936,check=relaxed,nodots,fmask=00000000000000000000002,umask=00000000000000000000005,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,fsmagic=0x00000000000000fb,pcr=00000000000000000021,uid>', @ANYRES16, @ANYBLOB="2c636f6e746578743d73797374656d5f752c726f2c61756469742c7375626a5f726f6c651ca8ba91a3a08f88b8a003653455fed0f0b52cf1452b003f8e172d0d2cd5ed8d9ba16fba394f2bf8decb8c5a4913698ed516a64bde"], 0x5, 0x1c7, &(0x7f0000000500)="$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") 7.179563474s ago: executing program 6 (id=445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 6.863547513s ago: executing program 5 (id=446): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d00)={0x0, 0xa08}) 6.759336653s ago: executing program 6 (id=447): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = gettid() sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000001100)={'syz0\x00', {}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) read(r3, &(0x7f0000000080)=""/113, 0x71) 6.646851893s ago: executing program 5 (id=448): socket$igmp6(0xa, 0x3, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000100001302008000010000000000000000000000002e2e2e00"], 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = epoll_create1(0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xb4f037ad250eaece}) 6.646576333s ago: executing program 3 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() gettid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000001100)={'syz0\x00', {}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) read(r4, &(0x7f0000000080)=""/113, 0x71) 6.580092462s ago: executing program 6 (id=450): socket$inet6(0xa, 0x400000000001, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_create(0x8, 0x80800) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 4.259134004s ago: executing program 2 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) fsync(0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla") socket$nl_route(0x10, 0x3, 0x0) unshare(0x42000000) 4.036267834s ago: executing program 0 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="000032a52087bde616ce59eb5d584d5740365517ad21f058e82ec7478f431382cb488ac5ddd77a67786019a0f629777582fc430000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x6c) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000120009090000000000000000070000030000000000000000000000002e00e800000000000000b77b9d954bc6f5"], 0x50}}, 0x0) 3.156463361s ago: executing program 3 (id=453): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) read$FUSE(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r8, 0xc6c3, 0x0) 3.074120111s ago: executing program 5 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x49f) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000001100)={'syz0\x00', {}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) read(r3, &(0x7f0000000080)=""/113, 0x71) 1.587737826s ago: executing program 0 (id=455): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x8, &(0x7f0000001580)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES64, @ANYRES64, @ANYBLOB="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"], 0x41, 0x2f5, &(0x7f0000000b40)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) 637.565152ms ago: executing program 3 (id=456): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x18000, &(0x7f0000000100), 0x0, 0x46e, &(0x7f0000000e80)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) 592.100492ms ago: executing program 6 (id=457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 313.441161ms ago: executing program 2 (id=458): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3400c0, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @broadcast}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e2000000400000002003eb5041a000002000000", @ANYRES32, @ANYRESHEX=0x0, @ANYRES32], 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa20000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsB22S0t3e5W9vNJBp5n5+k+z3efeWaemWc3gL41mv2TRGyPiN8iYrieXV5gtP7f9avnq39fPV9NYmnprT+TvNy1q+erZdHy77YVmbE0Iv0kKSpZbv7suZPTtdrsmSI/sXDqvYn5s+eePXFq+vjs8dnTU4cPHzo4+cLzU891JM4srmt7P5zbt+e1dy69Xj166d2fvs3au73Y3xhHp4xmgf+1lGve90SnK+uxHQ3pZKCHDWFNKhGRdddgPv6HoxI3O284Xv24p40DNlR2bdrSfvfiEnAXS6LXLQB6o7zQZ/e/5dalqcemcOWl+g1QFvf1YqvvGYi0KDPYdH/bSaMRcXTxn6+yLTboOQQAQKPPql8eiWdazf/SuL+h3M5iDWUkIu6JiF0RcW9E7I6I+yLysg9ExINrrL95aejW+U96+Y4CW6Vs/vdisba1fP5Xzv5ipFLkduTxDybHTtRmDxSfyVgMbsnykyvU8f0rv37ebl/j/C/bsvrLuWDRjssDTQ/oZqYXpvNJaQdc+Shi70Cr+JMbKwFJROyJiL1re+udZeLEU9/sa1fo9vGvoAPrTEtfRzxZ7//FaIq/lKy8Pjnxv6jNHpgoj4pb/fzLxTfb1b+u+Dsg6/+ty4//5iIjSeN67fza67j4+6dt72nu9PgfSt7Oz0dlR30wvbBwZjJiKDmSvzhUlM1fn7r5t2W+LJ/FP7a/9fjfFTcreCgisoP44Yh4JCIeLdr+WEQ8HhH7V4j/x5fb79sM/T/T8vx34/hv6v+1Jyonf/iuXf2r6/9DeWqseCU//93Gahu4ns8OAAAA/ivS/DvwSTp+I52m4+P17/Dvjq1pbW5+4eljc++fnql/V34kBtPySddww/PQyWSxeMd6fqp4VlzuP1g8N/6i8v88P16dq830OHbod9vajP/MH5Vetw7YcK3W0aaGetAQoOuax3+6PHvhjW42Bugqv9eG/nWb8Z92qx1A97n+Q/9qNf4vNOWtBcDdyfUf+pfxD/3L+If+ZfxDX1rP7/ol+jkR6aZohsQGJXp9ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiMfwMAAP//d5Lu1w==") 199.469351ms ago: executing program 6 (id=459): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002840)=@newsa={0x13c, 0x10, 0x413, 0x70bd26, 0x1, {{@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x20, 0x3b}, {@in6=@mcast2, 0x7000000, 0x32}, @in6=@mcast1, {0x0, 0xb, 0x0, 0x0, 0x506, 0x0, 0x81}, {0x0, 0xc09, 0xcc, 0x6}, {0x0, 0x80000}, 0x0, 0x0, 0xa, 0x1, 0x1, 0x5}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 0 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x20000023893) kernel console output (not intermixed with test programs): pacity change from 0 to 2048 [ 100.748457][ T4464] xt_hashlimit: size too large, truncated to 1048576 [ 101.260195][ T4475] device bridge1 entered promiscuous mode [ 101.298114][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 101.592103][ T4485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.50'. [ 104.333180][ T4498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.54'. [ 104.368476][ T4500] loop0: detected capacity change from 0 to 1024 [ 104.438031][ T4500] EXT4-fs (loop0): Test dummy encryption mode enabled [ 104.458773][ T4500] EXT4-fs (loop0): Test dummy encryption mode enabled [ 104.565111][ T4500] EXT4-fs (loop0): Ignoring removed orlov option [ 104.584527][ T4500] EXT4-fs (loop0): Mount option "data_err=abort" incompatible with ext2 [ 108.308840][ T4508] loop4: detected capacity change from 0 to 128 [ 108.553273][ T4508] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.597665][ T4508] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.750711][ T4519] loop0: detected capacity change from 0 to 2048 [ 110.225361][ T4519] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 110.303140][ T4519] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.110051][ T4539] loop4: detected capacity change from 0 to 1024 [ 111.274902][ T4539] EXT4-fs (loop4): Test dummy encryption mode enabled [ 111.309547][ T4539] EXT4-fs (loop4): Test dummy encryption mode enabled [ 111.332253][ T4539] EXT4-fs (loop4): Ignoring removed orlov option [ 111.338681][ T4539] EXT4-fs (loop4): Mount option "data_err=abort" incompatible with ext2 [ 111.372227][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.461164][ T4542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.66'. [ 112.052777][ T4547] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.722023][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 112.904924][ T4554] loop4: detected capacity change from 0 to 512 [ 113.102416][ T4558] overlayfs: failed to resolve './file0': -2 [ 113.733742][ T21] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 113.751998][ T21] usb 3-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 113.770644][ T21] usb 3-1: Product: syz [ 113.780836][ T21] usb 3-1: Manufacturer: syz [ 113.801059][ T21] usb 3-1: SerialNumber: syz [ 113.879945][ T21] usb 3-1: config 0 descriptor?? [ 113.895366][ T4554] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 113.909592][ T4554] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.035928][ T21] usb 3-1: selecting invalid altsetting 1 [ 114.504848][ T4571] loop0: detected capacity change from 0 to 128 [ 114.547949][ T21] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 114.566136][ T4570] loop2: detected capacity change from 0 to 512 [ 114.657117][ T4576] tipc: Enabling of bearer rejected, failed to enable media [ 114.699687][ T4576] loop3: detected capacity change from 0 to 128 [ 114.766477][ T21] usb 3-1: USB disconnect, device number 2 [ 115.213999][ T4577] loop4: detected capacity change from 0 to 256 [ 115.247492][ T4570] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 115.264748][ T4583] attempt to access beyond end of device [ 115.264748][ T4583] loop0: rw=2049, want=889, limit=128 [ 115.276058][ T4570] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.394174][ T4456] udevd[4456]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.556257][ T4583] attempt to access beyond end of device [ 115.556257][ T4583] loop0: rw=524288, want=369, limit=128 [ 115.609670][ T4583] attempt to access beyond end of device [ 115.609670][ T4583] loop0: rw=0, want=153, limit=128 [ 115.682885][ T4583] attempt to access beyond end of device [ 115.682885][ T4583] loop0: rw=0, want=153, limit=128 [ 115.847472][ T4570] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.74: corrupted inode contents [ 115.876056][ T4570] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #2: comm syz.2.74: mark_inode_dirty error [ 115.891205][ T1154] attempt to access beyond end of device [ 115.891205][ T1154] loop3: rw=1, want=1041, limit=128 [ 115.909138][ T4570] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.74: corrupted inode contents [ 116.262106][ T4570] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.74: mark_inode_dirty error [ 116.518780][ T4593] loop0: detected capacity change from 0 to 1024 [ 116.545609][ T4596] loop3: detected capacity change from 0 to 1024 [ 116.572586][ T4596] EXT4-fs (loop3): Test dummy encryption mode enabled [ 116.600527][ T4579] chnl_net:caif_netlink_parms(): no params data found [ 116.603238][ T4596] EXT4-fs (loop3): Test dummy encryption mode enabled [ 116.640043][ T4596] EXT4-fs (loop3): Ignoring removed orlov option [ 116.649180][ T4596] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2 [ 116.685983][ T4593] EXT4-fs (loop0): Test dummy encryption mode enabled [ 116.742696][ T4593] EXT4-fs (loop0): Test dummy encryption mode enabled [ 116.796283][ T4593] EXT4-fs (loop0): Ignoring removed orlov option [ 116.822273][ T4593] EXT4-fs (loop0): Mount option "data_err=abort" incompatible with ext2 [ 116.850311][ T4603] loop2: detected capacity change from 0 to 512 [ 116.931547][ T4579] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.948995][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.983213][ T4579] device bridge_slave_0 entered promiscuous mode [ 117.048200][ T4603] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 117.139288][ T4579] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.153932][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.352099][ T4603] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 117.364360][ T4295] Bluetooth: hci5: command 0x0409 tx timeout [ 117.413906][ T4579] device bridge_slave_1 entered promiscuous mode [ 117.589727][ T4603] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 117.692491][ T4603] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #11: comm syz.2.82: corrupted inode contents [ 117.740598][ T4603] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #11: comm syz.2.82: mark_inode_dirty error [ 117.775808][ T4579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.795721][ T4603] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.82: invalid indirect mapped block 1 (level 1) [ 117.819205][ T4579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.839171][ T4603] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #11: comm syz.2.82: corrupted inode contents [ 117.882016][ T4603] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 117.900191][ T4605] loop4: detected capacity change from 0 to 40427 [ 117.917060][ T4603] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #11: comm syz.2.82: corrupted inode contents [ 117.942293][ T4603] EXT4-fs error (device loop2): ext4_truncate:4272: inode #11: comm syz.2.82: mark_inode_dirty error [ 117.946125][ T4579] team0: Port device team_slave_0 added [ 117.965926][ T4579] team0: Port device team_slave_1 added [ 117.994187][ T4603] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 118.002305][ T4605] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 118.025592][ T4603] EXT4-fs (loop2): 1 truncate cleaned up [ 118.034886][ T4605] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 118.043257][ T4603] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.092030][ T4605] F2FS-fs (loop4): invalid crc value [ 118.099204][ T4579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.132945][ T4579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.174094][ T4605] F2FS-fs (loop4): Found nat_bits in checkpoint [ 118.221456][ T4579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.281875][ T4374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.317609][ T26] audit: type=1326 audit(1738887584.992:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37447ffde9 code=0x7ffc0000 [ 118.350461][ T4605] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 118.360399][ T4605] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 118.369824][ T26] audit: type=1326 audit(1738887584.992:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37447ffde9 code=0x7ffc0000 [ 118.421536][ T26] audit: type=1326 audit(1738887584.992:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37447ffde9 code=0x7ffc0000 [ 118.467000][ T4579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.475488][ T4579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.485742][ T26] audit: type=1326 audit(1738887584.992:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f37447ffde9 code=0x7ffc0000 [ 118.527312][ T4579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.533571][ T26] audit: type=1326 audit(1738887584.992:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37447ffde9 code=0x7ffc0000 [ 118.541336][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.570353][ T4629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.88'. [ 118.575893][ T26] audit: type=1326 audit(1738887584.992:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37447ffde9 code=0x7ffc0000 [ 118.625942][ T26] audit: type=1326 audit(1738887584.992:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37447ffde9 code=0x7ffc0000 [ 118.650734][ T4630] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 118.659545][ T26] audit: type=1326 audit(1738887584.992:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37447ffde9 code=0x7ffc0000 [ 118.693367][ T26] audit: type=1326 audit(1738887584.992:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37447ffde9 code=0x7ffc0000 [ 118.750134][ T26] audit: type=1326 audit(1738887584.992:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.0.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37447ffde9 code=0x7ffc0000 [ 118.827882][ T4374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.879380][ T4605] overlayfs: failed to resolve './file0': -2 [ 118.979238][ T4579] device hsr_slave_0 entered promiscuous mode [ 119.003824][ T4579] device hsr_slave_1 entered promiscuous mode [ 119.021913][ T4579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.030584][ T4579] Cannot create hsr debugfs directory [ 119.053033][ T4334] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 119.064157][ T4334] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 119.073422][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 119.296609][ T4374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.322458][ T21] usb 4-1: config 253 has an invalid interface number: 199 but max is 0 [ 119.357928][ T21] usb 4-1: config 253 has no interface number 0 [ 119.455436][ T21] usb 4-1: config 253 interface 199 altsetting 129 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 119.802040][ T21] usb 4-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xC3, skipping [ 119.814268][ T21] usb 4-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xF8, skipping [ 119.844690][ T21] usb 4-1: config 253 interface 199 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.860368][ T21] usb 4-1: config 253 interface 199 has no altsetting 0 [ 119.868808][ T4295] Bluetooth: hci5: command 0x041b tx timeout [ 120.097605][ T4644] loop0: detected capacity change from 0 to 1024 [ 120.329730][ T4374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.839527][ T21] usb 4-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=4c.dd [ 120.848964][ T4644] EXT4-fs (loop0): Test dummy encryption mode enabled [ 120.849121][ T4644] EXT4-fs (loop0): Test dummy encryption mode enabled [ 120.849169][ T4644] EXT4-fs (loop0): Ignoring removed orlov option [ 120.849219][ T4644] EXT4-fs (loop0): Mount option "data_err=abort" incompatible with ext2 [ 120.877807][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.886048][ T21] usb 4-1: Product: syz [ 120.890234][ T21] usb 4-1: Manufacturer: syz [ 120.895719][ T21] usb 4-1: SerialNumber: syz [ 121.073910][ T4579] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.117228][ T4648] loop2: detected capacity change from 0 to 1024 [ 121.145023][ T4579] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.183179][ T4579] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.250209][ T4579] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.268518][ T4648] EXT4-fs (loop2): Test dummy encryption mode enabled [ 121.286654][ T4648] EXT4-fs (loop2): Test dummy encryption mode enabled [ 121.333287][ T4648] EXT4-fs (loop2): Ignoring removed orlov option [ 121.359745][ T4648] EXT4-fs (loop2): Mount option "data_err=abort" incompatible with ext2 [ 121.805693][ T21] hub 4-1:253.199: bad descriptor, ignoring hub [ 121.814475][ T21] hub: probe of 4-1:253.199 failed with error -5 [ 121.837014][ T21] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 121.850494][ T21] usb 4-1: selecting invalid altsetting 0 [ 121.854668][ T4658] input: syz0 as /devices/virtual/input/input8 [ 121.859496][ T2420] pvrusb2: Invalid write control endpoint [ 122.059632][ T4217] Bluetooth: hci5: command 0x040f tx timeout [ 122.068615][ T21] usb 4-1: USB disconnect, device number 3 [ 122.804171][ T2420] pvrusb2: Invalid write control endpoint [ 122.810538][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 122.993273][ T4667] loop4: detected capacity change from 0 to 1024 [ 123.059684][ T4666] loop0: detected capacity change from 0 to 2048 [ 123.176594][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 123.186984][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 123.213057][ T2420] pvrusb2: Device being rendered inoperable [ 123.223028][ T4579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.237125][ T4667] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.97: Invalid block bitmap block 0 in block_group 0 [ 123.252944][ T4667] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.97: Failed to acquire dquot type 0 [ 123.266183][ T4667] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.97: Freeing blocks not in datazone - block = 0, count = 4096 [ 123.278820][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 123.288648][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 123.301808][ T2420] pvrusb2: Attached sub-driver cx25840 [ 123.342416][ T4667] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.97: Invalid inode bitmap blk 0 in block_group 0 [ 123.356360][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 123.357545][ T4667] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 123.375806][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 123.389866][ T4667] EXT4-fs (loop4): 1 orphan inode deleted [ 123.396222][ T4667] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 123.429417][ T4579] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.431023][ T3078] __quota_error: 23 callbacks suppressed [ 123.431039][ T3078] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 123.498487][ T4682] loop3: detected capacity change from 0 to 512 [ 123.577410][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 123.582957][ T4666] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 123.585708][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 123.648560][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.724640][ T2420] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 123.761853][ T4667] syz.4.97 (4667) used greatest stack depth: 19392 bytes left [ 123.789675][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.873581][ T4682] EXT4-fs (loop3): orphan cleanup on readonly fs [ 123.900376][ T4682] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.100: bg 0: block 248: padding at end of block bitmap is not set [ 123.930750][ T4682] Quota error (device loop3): write_blk: dquota write failed [ 123.938747][ T4682] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 123.948969][ T4682] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.100: Failed to acquire dquot type 1 [ 123.997196][ T4682] EXT4-fs (loop3): 1 truncate cleaned up [ 124.066315][ T3078] EXT4-fs error (device loop4): ext4_release_dquot:6220: comm kworker/u4:5: Failed to release dquot type 0 [ 124.147567][ T4666] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.359895][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.458983][ T4682] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.717301][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.075183][ T4295] Bluetooth: hci5: command 0x0419 tx timeout [ 125.086249][ T4682] syz.3.100 (4682) used greatest stack depth: 19200 bytes left [ 125.092530][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.100887][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.257977][ T2420] TUNER: Unable to find symbol tda829x_probe() [ 126.332370][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.379878][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.389869][ T2420] DVB: Unable to find symbol tda9887_attach() [ 126.408889][ T2420] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 126.427912][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.436589][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.443713][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.451522][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.460595][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.471318][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.484444][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.493920][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.502838][ T2420] pvrusb2: Attached sub-driver tuner [ 126.508255][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 126.779382][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.323207][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 127.535353][ T4704] loop0: detected capacity change from 0 to 512 [ 127.715414][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.803881][ T4704] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.102: casefold flag without casefold feature [ 127.828090][ T4704] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.102: couldn't read orphan inode 15 (err -117) [ 127.841668][ T4704] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.157100][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.240442][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.328439][ T4179] Bluetooth: hci0: sending frame failed (-49) [ 128.482843][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.742368][ T1107] usb 5-1: Using ep0 maxpacket: 8 [ 128.969461][ T1107] usb 5-1: config 253 has an invalid interface number: 199 but max is 0 [ 128.987926][ T1107] usb 5-1: config 253 has no interface number 0 [ 129.019667][ T1107] usb 5-1: config 253 interface 199 altsetting 129 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 129.072464][ T1107] usb 5-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xC3, skipping [ 129.088959][ T4579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.121826][ T4704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.102'. [ 129.135187][ T1107] usb 5-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xF8, skipping [ 129.175280][ T1107] usb 5-1: config 253 interface 199 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.242035][ T1107] usb 5-1: config 253 interface 199 has no altsetting 0 [ 129.452243][ T1107] usb 5-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=4c.dd [ 129.478847][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.517877][ T1107] usb 5-1: Product: syz [ 129.537864][ T1107] usb 5-1: Manufacturer: syz [ 129.551969][ T1107] usb 5-1: SerialNumber: syz [ 129.813797][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.854136][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.182463][ T1107] hub 5-1:253.199: bad descriptor, ignoring hub [ 130.188796][ T1107] hub: probe of 5-1:253.199 failed with error -5 [ 130.205181][ T1107] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 130.221058][ T1107] usb 5-1: selecting invalid altsetting 0 [ 130.238956][ T2420] pvrusb2: Invalid write control endpoint [ 130.249954][ T1107] usb 5-1: USB disconnect, device number 2 [ 130.256487][ T4746] process 'syz.0.105' launched './file0' with NULL argv: empty string added [ 130.424599][ T4752] loop0: detected capacity change from 0 to 512 [ 130.435308][ T4217] Bluetooth: hci0: command 0x1003 tx timeout [ 130.444634][ T4181] Bluetooth: hci0: sending frame failed (-49) [ 130.762402][ T4752] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 130.776640][ T4752] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.896974][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 131.847986][ T2420] pvrusb2: Invalid write control endpoint [ 131.871031][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 131.911110][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 131.937879][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.958157][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.978776][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 132.208307][ T4579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.228577][ T2420] pvrusb2: Device being rendered inoperable [ 132.246005][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 132.253497][ T4177] Bluetooth: hci6: command 0x1003 tx timeout [ 132.259980][ T4181] Bluetooth: hci6: sending frame failed (-49) [ 132.335088][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 132.388056][ T2420] pvrusb2: Attached sub-driver cx25840 [ 132.492092][ T21] Bluetooth: hci0: command 0x1001 tx timeout [ 132.498513][ T4181] Bluetooth: hci0: sending frame failed (-49) [ 132.543822][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 132.580016][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 132.630501][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 132.672148][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 132.680176][ T2420] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 133.076474][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.080716][ T2420] TUNER: Unable to find symbol tda829x_probe() [ 133.082861][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.202671][ T2420] DVB: Unable to find symbol tda9887_attach() [ 133.208776][ T2420] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 133.229338][ T2420] pvrusb2: Attached sub-driver tuner [ 133.244612][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 133.280621][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 133.383193][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.422587][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.468589][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.485261][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.572247][ T4579] device veth0_vlan entered promiscuous mode [ 133.593774][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.601668][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.657834][ T4795] loop4: detected capacity change from 0 to 1024 [ 133.676326][ T4579] device veth1_vlan entered promiscuous mode [ 133.721148][ T4579] device veth0_macvtap entered promiscuous mode [ 133.739540][ T4579] device veth1_macvtap entered promiscuous mode [ 133.778448][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.796158][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.809224][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.832921][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.860803][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.871765][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.882152][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.892330][ T4795] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.110: Invalid block bitmap block 0 in block_group 0 [ 133.892749][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.916895][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.929894][ T4795] Quota error (device loop4): write_blk: dquota write failed [ 133.932635][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.947825][ T4795] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 133.954032][ T4579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.966095][ T4795] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.110: Failed to acquire dquot type 0 [ 133.969035][ T4798] input: syz0 as /devices/virtual/input/input9 [ 133.994284][ T4795] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.110: Freeing blocks not in datazone - block = 0, count = 4096 [ 134.012576][ T4795] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.110: Invalid inode bitmap blk 0 in block_group 0 [ 134.012845][ T4281] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 134.038388][ T4795] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 134.038453][ T4281] EXT4-fs error (device loop4): ext4_release_dquot:6220: comm kworker/u4:8: Failed to release dquot type 0 [ 134.054148][ T4795] EXT4-fs (loop4): 1 orphan inode deleted [ 134.062244][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.065297][ T4795] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 134.076992][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.100266][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.119906][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.137092][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.149090][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.166765][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.175946][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.207792][ T4374] device hsr_slave_0 left promiscuous mode [ 134.215668][ T4374] device hsr_slave_1 left promiscuous mode [ 134.223704][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.231207][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.240098][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.247975][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.256701][ T4374] device bridge_slave_1 left promiscuous mode [ 134.266154][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.286797][ T4374] device bridge_slave_0 left promiscuous mode [ 134.294249][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.311702][ T4374] device veth1_macvtap left promiscuous mode [ 134.320008][ T4374] device veth0_macvtap left promiscuous mode [ 134.329061][ T4374] device veth1_vlan left promiscuous mode [ 134.332499][ T4214] Bluetooth: hci6: command 0x1001 tx timeout [ 134.335437][ T4374] device veth0_vlan left promiscuous mode [ 134.344263][ T4181] Bluetooth: hci6: sending frame failed (-49) [ 134.562566][ T4246] Bluetooth: hci0: command 0x1009 tx timeout [ 134.849640][ T4802] loop4: detected capacity change from 0 to 40427 [ 134.899792][ T4802] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 134.907792][ T4802] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 134.924172][ T4802] F2FS-fs (loop4): invalid crc value [ 134.937409][ T4802] F2FS-fs (loop4): Found nat_bits in checkpoint [ 135.739783][ T4374] team0 (unregistering): Port device team_slave_1 removed [ 135.776577][ T4374] team0 (unregistering): Port device team_slave_0 removed [ 135.801581][ T4374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.828807][ T4374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.872555][ T4802] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 135.879653][ T4802] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.100661][ T4374] bond0 (unregistering): Released all slaves [ 136.478755][ T4214] Bluetooth: hci6: command 0x1009 tx timeout [ 136.886201][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.900619][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.910633][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.921127][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.931296][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.942018][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.951832][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.988887][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.029298][ T4579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.045719][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.062803][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.078975][ T4579] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.091307][ T4579] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.100816][ T4579] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.110510][ T4579] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.282699][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.290880][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.331504][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.405920][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.440711][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.479881][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.881651][ T4832] loop4: detected capacity change from 0 to 1024 [ 137.979664][ T4832] EXT4-fs (loop4): Test dummy encryption mode enabled [ 138.001260][ T4832] EXT4-fs (loop4): Test dummy encryption mode enabled [ 138.042749][ T4832] EXT4-fs (loop4): Ignoring removed orlov option [ 138.049283][ T4832] EXT4-fs (loop4): Mount option "data_err=abort" incompatible with ext2 [ 138.192127][ T4246] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 138.552256][ T4246] usb 6-1: Using ep0 maxpacket: 8 [ 138.897907][ T4246] usb 6-1: config 253 has an invalid interface number: 199 but max is 0 [ 138.932438][ T4246] usb 6-1: config 253 has no interface number 0 [ 139.191987][ T4246] usb 6-1: config 253 interface 199 altsetting 129 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 139.212919][ T4246] usb 6-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xC3, skipping [ 139.264621][ T4246] usb 6-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xF8, skipping [ 140.207454][ T4246] usb 6-1: config 253 interface 199 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.221111][ T4246] usb 6-1: config 253 interface 199 has no altsetting 0 [ 140.321375][ T4854] loop3: detected capacity change from 0 to 128 [ 140.422471][ T4246] usb 6-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=4c.dd [ 140.455787][ T4246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.464687][ T4855] loop4: detected capacity change from 0 to 512 [ 140.492570][ T4246] usb 6-1: Product: syz [ 140.508093][ T4246] usb 6-1: Manufacturer: syz [ 140.518087][ T26] audit: type=1804 audit(1738887607.192:34): pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.119" name="/newroot/26/file2/bus" dev="loop3" ino=1048596 res=1 errno=0 [ 140.529377][ T4246] usb 6-1: SerialNumber: syz [ 140.600099][ T4865] loop2: detected capacity change from 0 to 512 [ 140.684126][ T4855] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.118: casefold flag without casefold feature [ 140.796323][ T4865] EXT4-fs (loop2): Test dummy encryption mode enabled [ 140.814916][ T4865] EXT4-fs (loop2): Test dummy encryption mode enabled [ 140.869323][ T4855] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.118: couldn't read orphan inode 15 (err -117) [ 140.901061][ T4865] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.121: inline data xattr refers to an external xattr inode [ 140.930172][ T4865] EXT4-fs (loop2): Remounting filesystem read-only [ 140.963246][ T4865] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.121: couldn't read orphan inode 12 (err -117) [ 141.032470][ T4855] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.073517][ T4246] hub 6-1:253.199: bad descriptor, ignoring hub [ 141.079815][ T4246] hub: probe of 6-1:253.199 failed with error -5 [ 141.088990][ T4865] EXT4-fs (loop2): Remounting filesystem read-only [ 141.112209][ T4865] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,nolazytime,sysvgroups,prjquota,norecovery,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,. Quota mode: writeback. [ 141.127149][ T4246] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 141.355327][ T4246] usb 6-1: selecting invalid altsetting 0 [ 141.362038][ T2420] pvrusb2: Invalid write control endpoint [ 141.514292][ T2420] pvrusb2: Invalid write control endpoint [ 141.531139][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 141.564864][ T4246] usb 6-1: USB disconnect, device number 2 [ 141.595224][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 141.609687][ T4855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.118'. [ 141.620409][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 141.917246][ T2420] pvrusb2: Device being rendered inoperable [ 142.690948][ T4882] tipc: Enabling of bearer rejected, failed to enable media [ 142.732523][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 142.739630][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 142.818742][ T4884] loop5: detected capacity change from 0 to 128 [ 142.900079][ T2420] pvrusb2: Attached sub-driver cx25840 [ 143.032121][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 143.072133][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 143.138233][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 143.151635][ T4892] loop2: detected capacity change from 0 to 256 [ 143.172410][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 143.231963][ T2420] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 143.336941][ T4892] exfat: Deprecated parameter 'namecase' [ 143.384877][ T4892] exfat: Deprecated parameter 'utf8' [ 143.390302][ T4892] exfat: Deprecated parameter 'namecase' [ 143.500516][ T4892] exfat: Deprecated parameter 'utf8' [ 143.538286][ T4899] loop0: detected capacity change from 0 to 2048 [ 143.604534][ T2420] TUNER: Unable to find symbol tda829x_probe() [ 143.726261][ T4892] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 143.740865][ T2420] DVB: Unable to find symbol tda9887_attach() [ 143.751974][ T2420] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 143.779361][ T2420] pvrusb2: Attached sub-driver tuner [ 143.811980][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 143.913494][ T4899] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 143.970728][ T4911] loop5: detected capacity change from 0 to 1024 [ 144.002848][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 144.032251][ T4899] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.063440][ T4911] EXT4-fs (loop5): Test dummy encryption mode enabled [ 144.118864][ T4911] EXT4-fs (loop5): Test dummy encryption mode enabled [ 144.184614][ T4911] EXT4-fs (loop5): Ignoring removed orlov option [ 144.191034][ T4911] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2 [ 144.316819][ T4915] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.127: bg 0: block 345: padding at end of block bitmap is not set [ 145.420566][ T4927] loop2: detected capacity change from 0 to 256 [ 145.669362][ T4934] loop0: detected capacity change from 0 to 1024 [ 145.767950][ T4934] EXT4-fs (loop0): Test dummy encryption mode enabled [ 145.790698][ T4934] EXT4-fs (loop0): Test dummy encryption mode enabled [ 145.816347][ T4934] EXT4-fs (loop0): Ignoring removed orlov option [ 145.851761][ T4934] EXT4-fs (loop0): Mount option "data_err=abort" incompatible with ext2 [ 145.902778][ T4195] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 146.152205][ T4195] usb 6-1: Using ep0 maxpacket: 8 [ 146.433160][ T4195] usb 6-1: config 253 has an invalid interface number: 199 but max is 0 [ 146.443385][ T4195] usb 6-1: config 253 has no interface number 0 [ 146.450142][ T4195] usb 6-1: config 253 interface 199 altsetting 129 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 146.538720][ T4951] loop2: detected capacity change from 0 to 128 [ 146.576796][ T4195] usb 6-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xC3, skipping [ 146.656719][ T4195] usb 6-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xF8, skipping [ 146.954378][ T4951] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.193182][ T4951] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.491664][ T4195] usb 6-1: config 253 interface 199 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.505768][ T4195] usb 6-1: config 253 interface 199 has no altsetting 0 [ 147.672219][ T4195] usb 6-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=4c.dd [ 147.689498][ T4195] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.721989][ T4195] usb 6-1: Product: syz [ 147.726202][ T4195] usb 6-1: Manufacturer: syz [ 147.729836][ T4961] kvm: emulating exchange as write [ 147.730900][ T4195] usb 6-1: SerialNumber: syz [ 147.852913][ T4965] tipc: Enabling of bearer rejected, failed to enable media [ 147.895879][ T4965] loop0: detected capacity change from 0 to 128 [ 148.252556][ T4195] hub 6-1:253.199: bad descriptor, ignoring hub [ 148.258883][ T4195] hub: probe of 6-1:253.199 failed with error -5 [ 148.297119][ T4976] loop2: detected capacity change from 0 to 256 [ 148.313823][ T4195] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 148.342297][ T4195] usb 6-1: selecting invalid altsetting 0 [ 148.365801][ T2420] pvrusb2: Invalid write control endpoint [ 148.412100][ T4195] usb 6-1: USB disconnect, device number 3 [ 148.459219][ T4976] exfat: Deprecated parameter 'namecase' [ 148.481233][ T2420] pvrusb2: Invalid write control endpoint [ 148.492055][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 148.495130][ T4980] loop3: detected capacity change from 0 to 2048 [ 148.523789][ T4984] loop0: detected capacity change from 0 to 1024 [ 148.524768][ T4976] exfat: Deprecated parameter 'utf8' [ 148.573023][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 148.574660][ T4984] EXT4-fs (loop0): Test dummy encryption mode enabled [ 148.591332][ T4976] exfat: Deprecated parameter 'namecase' [ 148.612214][ T4984] EXT4-fs (loop0): Test dummy encryption mode enabled [ 148.619290][ T4984] EXT4-fs (loop0): Ignoring removed orlov option [ 148.621299][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 148.632043][ T4976] exfat: Deprecated parameter 'utf8' [ 148.662492][ T2420] pvrusb2: Device being rendered inoperable [ 148.671730][ T4984] EXT4-fs (loop0): Mount option "data_err=abort" incompatible with ext2 [ 148.677024][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 148.709021][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 148.749869][ T4976] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 148.831488][ T4980] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 148.890362][ T2420] pvrusb2: Attached sub-driver cx25840 [ 148.964468][ T4980] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.149965][ T4996] loop5: detected capacity change from 0 to 512 [ 149.258636][ T4997] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.140: bg 0: block 345: padding at end of block bitmap is not set [ 149.661715][ T4996] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 149.673117][ T4996] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.769861][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 149.791995][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 149.800039][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 149.885847][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 149.904270][ T5006] loop0: detected capacity change from 0 to 1024 [ 149.996126][ T5006] EXT4-fs (loop0): Test dummy encryption mode enabled [ 150.010171][ T5009] syz.5.143[5009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.010731][ T5009] syz.5.143[5009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.081848][ T2420] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 150.140096][ T5006] EXT4-fs (loop0): Test dummy encryption mode enabled [ 150.342057][ T5006] EXT4-fs (loop0): Ignoring removed orlov option [ 150.348476][ T5006] EXT4-fs (loop0): Mount option "data_err=abort" incompatible with ext2 [ 150.400162][ T5010] input: syz0 as /devices/virtual/input/input10 [ 150.890943][ T2420] TUNER: Unable to find symbol tda829x_probe() [ 150.971336][ T2420] DVB: Unable to find symbol tda9887_attach() [ 150.988102][ T2420] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 151.009071][ T2420] pvrusb2: Attached sub-driver tuner [ 151.031643][ T5020] loop3: detected capacity change from 0 to 512 [ 151.048422][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 151.099697][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 151.242311][ T5020] EXT4-fs (loop3): Test dummy encryption mode enabled [ 151.334097][ T5020] EXT4-fs (loop3): Test dummy encryption mode enabled [ 151.644361][ T5020] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.144: inline data xattr refers to an external xattr inode [ 151.708774][ T5020] EXT4-fs (loop3): Remounting filesystem read-only [ 151.726947][ T5020] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.144: couldn't read orphan inode 12 (err -117) [ 151.739456][ T5020] EXT4-fs (loop3): Remounting filesystem read-only [ 151.746082][ T5020] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,nolazytime,sysvgroups,prjquota,norecovery,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,. Quota mode: writeback. [ 152.031113][ T5033] input: syz0 as /devices/virtual/input/input11 [ 152.800492][ T5034] tipc: Enabling of bearer rejected, failed to enable media [ 152.860946][ T5040] loop0: detected capacity change from 0 to 128 [ 152.914662][ T5034] loop2: detected capacity change from 0 to 128 [ 153.021515][ T5040] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.093521][ T5040] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.016336][ T5041] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 154.064096][ T5054] loop5: detected capacity change from 0 to 1024 [ 154.096338][ T5060] loop4: detected capacity change from 0 to 256 [ 154.176095][ T5060] exfat: Deprecated parameter 'namecase' [ 154.186478][ T5054] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 154.186478][ T5054] [ 154.212421][ T5060] exfat: Deprecated parameter 'utf8' [ 154.242483][ T5060] exfat: Deprecated parameter 'namecase' [ 154.248457][ T5054] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 154.289361][ T5060] exfat: Deprecated parameter 'utf8' [ 154.418490][ T5060] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 154.527405][ T5062] loop2: detected capacity change from 0 to 1024 [ 154.637699][ T5062] EXT4-fs (loop2): Test dummy encryption mode enabled [ 154.652250][ T5062] EXT4-fs (loop2): Test dummy encryption mode enabled [ 154.683737][ T5062] EXT4-fs (loop2): Ignoring removed orlov option [ 154.739202][ T5062] EXT4-fs (loop2): Mount option "data_err=abort" incompatible with ext2 [ 155.749358][ T5070] input: syz0 as /devices/virtual/input/input12 [ 155.836295][ T5075] loop5: detected capacity change from 0 to 1024 [ 155.983145][ T5075] EXT4-fs (loop5): Test dummy encryption mode enabled [ 155.990223][ T5075] EXT4-fs (loop5): Test dummy encryption mode enabled [ 156.072079][ T5075] EXT4-fs (loop5): Ignoring removed orlov option [ 156.079627][ T5075] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2 [ 157.138615][ T5091] loop4: detected capacity change from 0 to 256 [ 158.167910][ T5100] loop5: detected capacity change from 0 to 1024 [ 158.230793][ T5105] tipc: Enabling of bearer rejected, failed to enable media [ 158.316732][ T5105] loop4: detected capacity change from 0 to 128 [ 158.352244][ T5100] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 158.352244][ T5100] [ 158.563290][ T5100] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 159.214720][ T5116] loop3: detected capacity change from 0 to 128 [ 159.547804][ T5116] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.773945][ T5116] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.852185][ T4215] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.132795][ T4215] usb 3-1: Using ep0 maxpacket: 8 [ 160.462395][ T4215] usb 3-1: config 253 has an invalid interface number: 199 but max is 0 [ 160.472813][ T4215] usb 3-1: config 253 has no interface number 0 [ 160.491442][ T4215] usb 3-1: config 253 interface 199 altsetting 129 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 160.510054][ T4215] usb 3-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xC3, skipping [ 160.528132][ T4215] usb 3-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xF8, skipping [ 160.549751][ T4215] usb 3-1: config 253 interface 199 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.570828][ T4215] usb 3-1: config 253 interface 199 has no altsetting 0 [ 160.677612][ T5139] loop5: detected capacity change from 0 to 1024 [ 160.988219][ T5139] EXT4-fs (loop5): Test dummy encryption mode enabled [ 161.139736][ T5139] EXT4-fs (loop5): Test dummy encryption mode enabled [ 161.432122][ T5139] EXT4-fs (loop5): Ignoring removed orlov option [ 161.463359][ T5139] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2 [ 162.192044][ T4215] usb 3-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=4c.dd [ 162.201122][ T4215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.209260][ T4215] usb 3-1: Product: syz [ 162.213478][ T4215] usb 3-1: Manufacturer: syz [ 162.218330][ T4215] usb 3-1: SerialNumber: syz [ 162.744976][ T5148] loop4: detected capacity change from 0 to 512 [ 162.953206][ T5150] input: syz0 as /devices/virtual/input/input13 [ 163.495306][ T4215] hub 3-1:253.199: bad descriptor, ignoring hub [ 163.501627][ T4215] hub: probe of 3-1:253.199 failed with error -5 [ 163.509999][ T4215] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 163.518124][ T4215] usb 3-1: selecting invalid altsetting 0 [ 163.525225][ T2420] pvrusb2: Invalid write control endpoint [ 163.528233][ T4215] usb 3-1: USB disconnect, device number 3 [ 163.537202][ T5148] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 163.548535][ T5148] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.979500][ T5164] syz.4.177[5164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.979782][ T5164] syz.4.177[5164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.868463][ T2420] pvrusb2: Invalid write control endpoint [ 164.961497][ T5169] loop3: detected capacity change from 0 to 1024 [ 164.995534][ T5170] loop5: detected capacity change from 0 to 1024 [ 165.036795][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 165.077003][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 165.086779][ T5172] tipc: Enabling of bearer rejected, failed to enable media [ 165.121971][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 165.155513][ T5172] loop2: detected capacity change from 0 to 128 [ 165.175564][ T2420] pvrusb2: Device being rendered inoperable [ 165.205633][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 165.212774][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 165.220982][ T2420] pvrusb2: Attached sub-driver cx25840 [ 165.222573][ T5170] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 165.222573][ T5170] [ 165.238951][ T5169] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.278979][ T5169] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.358235][ T5170] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 165.367854][ T5169] EXT4-fs (loop3): Ignoring removed orlov option [ 165.407999][ T5169] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2 [ 165.452292][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 165.480951][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 165.516714][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 165.636152][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 165.972247][ T2420] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 166.243267][ T4506] attempt to access beyond end of device [ 166.243267][ T4506] loop2: rw=1, want=465, limit=128 [ 166.390999][ T5193] loop5: detected capacity change from 0 to 1024 [ 166.489190][ T2420] TUNER: Unable to find symbol tda829x_probe() [ 166.500203][ T5193] EXT4-fs (loop5): Test dummy encryption mode enabled [ 166.556137][ T5193] EXT4-fs (loop5): Test dummy encryption mode enabled [ 166.578353][ T5201] loop4: detected capacity change from 0 to 1024 [ 166.602084][ T5193] EXT4-fs (loop5): Ignoring removed orlov option [ 166.628961][ T2420] DVB: Unable to find symbol tda9887_attach() [ 166.639056][ T2420] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 166.646616][ T5193] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2 [ 166.676950][ T2420] pvrusb2: Attached sub-driver tuner [ 166.708163][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 167.072349][ T5201] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.185: Invalid block bitmap block 0 in block_group 0 [ 167.090213][ T5201] Quota error (device loop4): write_blk: dquota write failed [ 167.097987][ T5201] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 167.108569][ T5201] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.185: Failed to acquire dquot type 0 [ 167.126494][ T5201] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.185: Freeing blocks not in datazone - block = 0, count = 4096 [ 167.168160][ T5201] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.185: Invalid inode bitmap blk 0 in block_group 0 [ 167.183928][ T5201] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 167.195545][ T5201] EXT4-fs (loop4): 1 orphan inode deleted [ 167.201559][ T5201] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 167.390917][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 167.457971][ T1154] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 167.493770][ T5201] syz.4.185 (5201) used greatest stack depth: 18720 bytes left [ 167.568644][ T1154] EXT4-fs error (device loop4): ext4_release_dquot:6220: comm kworker/u4:3: Failed to release dquot type 0 [ 168.378218][ T1107] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 168.742093][ T1107] usb 1-1: Using ep0 maxpacket: 8 [ 168.982183][ T1107] usb 1-1: config 253 has an invalid interface number: 199 but max is 0 [ 169.000877][ T1107] usb 1-1: config 253 has no interface number 0 [ 169.048152][ T1107] usb 1-1: config 253 interface 199 altsetting 129 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 169.065530][ T5236] input: syz0 as /devices/virtual/input/input14 [ 169.128400][ T1107] usb 1-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xC3, skipping [ 169.180703][ T1107] usb 1-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xF8, skipping [ 169.404063][ T1107] usb 1-1: config 253 interface 199 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.633655][ T1107] usb 1-1: config 253 interface 199 has no altsetting 0 [ 170.083651][ T1107] usb 1-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=4c.dd [ 170.110750][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.119772][ T1107] usb 1-1: Product: syz [ 170.124267][ T1107] usb 1-1: Manufacturer: syz [ 170.128876][ T1107] usb 1-1: SerialNumber: syz [ 170.483245][ T5251] loop3: detected capacity change from 0 to 2048 [ 170.616118][ T5251] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 170.693807][ T5251] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.742543][ T1107] hub 1-1:253.199: bad descriptor, ignoring hub [ 170.754258][ T1107] hub: probe of 1-1:253.199 failed with error -5 [ 170.787775][ T1107] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 170.807148][ T1107] usb 1-1: selecting invalid altsetting 0 [ 170.822250][ T2420] pvrusb2: Invalid write control endpoint [ 170.834242][ T1107] usb 1-1: USB disconnect, device number 2 [ 171.392682][ T2420] pvrusb2: Invalid write control endpoint [ 171.398436][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 171.468603][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 171.571990][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 171.658861][ T2420] pvrusb2: Device being rendered inoperable [ 171.688108][ T5264] loop0: detected capacity change from 0 to 512 [ 171.705590][ T5266] loop5: detected capacity change from 0 to 1024 [ 171.745803][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 171.762251][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 171.770456][ T2420] pvrusb2: Attached sub-driver cx25840 [ 171.823811][ T5264] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 171.835145][ T5264] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.845531][ T5266] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 171.845531][ T5266] [ 171.845555][ T5266] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 172.163647][ T5278] syz.0.195[5278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.164183][ T5278] syz.0.195[5278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.565280][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 174.201973][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 174.210014][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 174.243330][ T5287] loop2: detected capacity change from 0 to 16 [ 175.107393][ T5287] erofs: (device loop2): mounted with root inode @ nid 36. [ 175.147149][ T5287] attempt to access beyond end of device [ 175.147149][ T5287] loop2: rw=0, want=24, limit=16 [ 175.342823][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 175.375759][ T2420] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 175.520222][ T5302] fuse: Bad value for 'fd' [ 175.571419][ T5303] input: syz0 as /devices/virtual/input/input15 [ 175.627200][ T2420] TUNER: Unable to find symbol tda829x_probe() [ 175.890353][ T2420] DVB: Unable to find symbol tda9887_attach() [ 175.897190][ T2420] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 175.927126][ T2420] pvrusb2: Attached sub-driver tuner [ 175.956426][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 176.152271][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 177.637616][ T5319] loop0: detected capacity change from 0 to 1024 [ 177.907134][ T5319] EXT4-fs (loop0): Test dummy encryption mode enabled [ 177.948738][ T5325] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 177.951510][ T5319] EXT4-fs (loop0): Test dummy encryption mode enabled [ 178.022189][ T5319] EXT4-fs (loop0): Ignoring removed orlov option [ 178.028756][ T5319] EXT4-fs (loop0): Mount option "data_err=abort" incompatible with ext2 [ 178.139876][ T5328] loop5: detected capacity change from 0 to 2048 [ 178.405337][ T5328] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 178.452167][ T5328] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.997830][ T5360] overlayfs: conflicting lowerdir path [ 180.762099][ T5365] loop5: detected capacity change from 0 to 512 [ 180.885257][ T5365] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 180.896760][ T5365] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.207461][ T5379] syz.5.211[5379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.208032][ T5379] syz.5.211[5379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.827064][ T5387] input: syz0 as /devices/virtual/input/input16 [ 183.420411][ T5395] loop3: detected capacity change from 0 to 128 [ 183.583619][ T5397] tipc: Enabling of bearer rejected, failed to enable media [ 184.617955][ T5391] chnl_net:caif_netlink_parms(): no params data found [ 185.047382][ T5391] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.390933][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.442489][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 185.722699][ T5391] device bridge_slave_0 entered promiscuous mode [ 185.785800][ T5391] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.865973][ T5434] loop3: detected capacity change from 0 to 1024 [ 185.874232][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.884887][ T5391] device bridge_slave_1 entered promiscuous mode [ 185.964874][ T5434] EXT4-fs (loop3): Test dummy encryption mode enabled [ 185.971834][ T5434] EXT4-fs (loop3): Test dummy encryption mode enabled [ 185.990660][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 185.996845][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 186.031497][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 186.032025][ T5434] EXT4-fs (loop3): Ignoring removed orlov option [ 186.112020][ T5434] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2 [ 186.171154][ T5391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.221235][ T5391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.527303][ T5391] team0: Port device team_slave_0 added [ 186.563019][ T5391] team0: Port device team_slave_1 added [ 186.754053][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.800691][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.868704][ T5391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.895145][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.910994][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.013675][ T5391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.159756][ T5391] device hsr_slave_0 entered promiscuous mode [ 187.179969][ T5391] device hsr_slave_1 entered promiscuous mode [ 187.197725][ T5391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.222033][ T5391] Cannot create hsr debugfs directory [ 187.522106][ T4247] Bluetooth: hci0: command 0x041b tx timeout [ 187.703767][ T5391] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 187.732456][ T5391] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 187.802906][ T5391] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 187.831325][ T5391] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 187.882072][ T5450] tipc: Enabling of bearer rejected, failed to enable media [ 188.100969][ T5391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.129040][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.149256][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.161460][ T5391] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.214809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.233087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.276497][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.283762][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.322464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.368028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.413194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.479114][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.486301][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.494702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.522496][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.583818][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.642304][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.680283][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.727224][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.747100][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.771352][ T5391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.782278][ T5391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.837920][ T5461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 189.172087][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.180717][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.198359][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.207897][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.225138][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.299989][ T5467] capability: warning: `syz.3.232' uses 32-bit capabilities (legacy support in use) [ 189.560802][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.566079][ T5474] loop5: detected capacity change from 0 to 128 [ 189.602654][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 189.619554][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.648109][ T5391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.730227][ T5474] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.823480][ T5474] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.865531][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.922815][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.042803][ T4506] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.084770][ T5498] loop2: detected capacity change from 0 to 1024 [ 191.126851][ T5391] device veth0_vlan entered promiscuous mode [ 191.145930][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.151342][ T5498] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext3 [ 191.160703][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.206132][ T4506] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.250484][ T5391] device veth1_vlan entered promiscuous mode [ 191.259705][ T5502] loop5: detected capacity change from 0 to 1024 [ 191.281849][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.301752][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.311167][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.329970][ T5502] EXT4-fs (loop5): Test dummy encryption mode enabled [ 191.344193][ T5502] EXT4-fs (loop5): Test dummy encryption mode enabled [ 191.351023][ T5502] EXT4-fs (loop5): Ignoring removed orlov option [ 191.376225][ T4506] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.442101][ T5502] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2 [ 191.480343][ T4506] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.533931][ T5391] device veth0_macvtap entered promiscuous mode [ 191.550297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.559343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.575966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.590925][ T5391] device veth1_macvtap entered promiscuous mode [ 191.611038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.628753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.660703][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.673935][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.695403][ T4247] Bluetooth: hci0: command 0x0419 tx timeout [ 191.948585][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.980470][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.502809][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.572439][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.598117][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.644550][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.654521][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.665079][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.679690][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.690251][ T5518] loop2: detected capacity change from 0 to 128 [ 192.706368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.727666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.750861][ T5516] tipc: Enabling of bearer rejected, failed to enable media [ 192.783930][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.829482][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.850854][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.866057][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.895153][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.915783][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.935836][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.959964][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.980251][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.993152][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.005347][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.018381][ T5520] device pim6reg1 entered promiscuous mode [ 193.039153][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.049190][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.110150][ T5391] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.128123][ T5391] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.154996][ T5391] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.172085][ T5391] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.274084][ T1154] attempt to access beyond end of device [ 193.274084][ T1154] loop2: rw=1, want=649, limit=128 [ 193.344372][ T5525] loop5: detected capacity change from 0 to 128 [ 193.529441][ T5525] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.555602][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.568670][ T5525] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.613517][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.626303][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.631978][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.742705][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.773077][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.087440][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.093846][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.925330][ T5572] loop5: detected capacity change from 0 to 1024 [ 196.932870][ T4506] device hsr_slave_0 left promiscuous mode [ 196.952405][ T4506] device hsr_slave_1 left promiscuous mode [ 197.002624][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.010103][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.028300][ T5572] EXT4-fs (loop5): Test dummy encryption mode enabled [ 197.050999][ T5572] EXT4-fs (loop5): Test dummy encryption mode enabled [ 197.075297][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.092037][ T5572] EXT4-fs (loop5): Ignoring removed orlov option [ 197.098493][ T5572] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2 [ 197.121537][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.152854][ T4506] device bridge_slave_1 left promiscuous mode [ 197.169438][ T4506] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.199436][ T4506] device bridge_slave_0 left promiscuous mode [ 197.220937][ T4506] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.396070][ T4506] device veth1_macvtap left promiscuous mode [ 197.479282][ T4506] device veth0_macvtap left promiscuous mode [ 197.506199][ T4506] device veth1_vlan left promiscuous mode [ 197.863212][ T4506] device veth0_vlan left promiscuous mode [ 198.457341][ T5603] loop5: detected capacity change from 0 to 128 [ 198.611737][ T5603] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.666878][ T5603] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.991040][ T5610] loop3: detected capacity change from 0 to 512 [ 199.082393][ T5610] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 199.173027][ T4506] team0 (unregistering): Port device team_slave_1 removed [ 199.312991][ T4506] team0 (unregistering): Port device team_slave_0 removed [ 199.402845][ T4506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.667163][ T5614] loop5: detected capacity change from 0 to 2048 [ 200.000137][ T5614] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.204300][ T4506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.323485][ T26] audit: type=1800 audit(1738887667.002:35): pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.261" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 200.558768][ T5623] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.718701][ T4506] bond0 (unregistering): Released all slaves [ 201.064509][ T5631] netlink: 'syz.5.265': attribute type 34 has an invalid length. [ 201.234446][ T5634] loop6: detected capacity change from 0 to 512 [ 201.336812][ T5634] EXT4-fs (loop6): Test dummy encryption mode enabled [ 201.358116][ T5637] loop0: detected capacity change from 0 to 1024 [ 201.410442][ T5634] EXT4-fs (loop6): Test dummy encryption mode enabled [ 201.436528][ T5637] EXT4-fs (loop0): Test dummy encryption mode enabled [ 201.449518][ T5637] EXT4-fs (loop0): Test dummy encryption mode enabled [ 201.469989][ T5634] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:163: inode #12: comm syz.6.267: inline data xattr refers to an external xattr inode [ 201.496106][ T5637] EXT4-fs (loop0): Ignoring removed orlov option [ 201.525021][ T5637] EXT4-fs (loop0): Mount option "data_err=abort" incompatible with ext2 [ 201.618258][ T5634] EXT4-fs (loop6): Remounting filesystem read-only [ 201.626648][ T5634] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.267: couldn't read orphan inode 12 (err -117) [ 201.705030][ T5634] EXT4-fs (loop6): Remounting filesystem read-only [ 201.779112][ T5634] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,nolazytime,sysvgroups,prjquota,norecovery,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,. Quota mode: writeback. [ 203.085842][ T5647] loop5: detected capacity change from 0 to 40427 [ 203.112637][ T5652] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 203.336080][ T5647] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 203.343984][ T5647] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 203.356464][ T5647] F2FS-fs (loop5): invalid crc value [ 203.679293][ T5647] F2FS-fs (loop5): Found nat_bits in checkpoint [ 203.775723][ T5670] loop0: detected capacity change from 0 to 256 [ 203.861458][ T5647] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 203.868650][ T5647] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 204.424589][ T5677] loop6: detected capacity change from 0 to 128 [ 204.543315][ T5677] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.706343][ T5683] loop0: detected capacity change from 0 to 512 [ 204.713015][ T5677] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.831245][ T5683] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 207.481541][ T5719] netlink: 'syz.0.279': attribute type 34 has an invalid length. [ 207.527697][ T5722] loop2: detected capacity change from 0 to 512 [ 207.564260][ T5721] loop5: detected capacity change from 0 to 1024 [ 207.638538][ T5720] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 207.720932][ T5722] EXT4-fs (loop2): Test dummy encryption mode enabled [ 207.728331][ T5721] EXT4-fs (loop5): Test dummy encryption mode enabled [ 207.740044][ T5722] EXT4-fs (loop2): Test dummy encryption mode enabled [ 207.748573][ T5721] EXT4-fs (loop5): Test dummy encryption mode enabled [ 207.779997][ T5721] EXT4-fs (loop5): Ignoring removed orlov option [ 207.803027][ T5722] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.281: inline data xattr refers to an external xattr inode [ 207.822324][ T5721] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2 [ 207.861266][ T5722] EXT4-fs (loop2): Remounting filesystem read-only [ 207.889647][ T5722] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.281: couldn't read orphan inode 12 (err -117) [ 207.985068][ T5722] EXT4-fs (loop2): Remounting filesystem read-only [ 208.014060][ T5731] loop3: detected capacity change from 0 to 512 [ 208.063858][ T5722] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,nolazytime,sysvgroups,prjquota,norecovery,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,. Quota mode: writeback. [ 208.618549][ T5735] loop0: detected capacity change from 0 to 256 [ 209.080546][ T5731] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 209.091849][ T5731] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.971800][ T5739] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 211.458756][ T5761] loop2: detected capacity change from 0 to 128 [ 211.480098][ T5760] loop6: detected capacity change from 0 to 1024 [ 211.702880][ T5760] EXT4-fs (loop6): Test dummy encryption mode enabled [ 211.732125][ T5761] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.745884][ T5760] EXT4-fs (loop6): Test dummy encryption mode enabled [ 211.756615][ T5760] EXT4-fs (loop6): Ignoring removed orlov option [ 211.788849][ T5760] EXT4-fs (loop6): Mount option "data_err=abort" incompatible with ext2 [ 211.797897][ T5761] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.826109][ T5784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.290'. [ 216.157600][ T5804] netlink: 'syz.5.294': attribute type 34 has an invalid length. [ 216.182101][ T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 216.443360][ T13] usb 7-1: Using ep0 maxpacket: 8 [ 216.526019][ T5813] loop3: detected capacity change from 0 to 256 [ 216.652975][ T13] usb 7-1: config 253 has an invalid interface number: 199 but max is 0 [ 216.655057][ T5813] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 216.681682][ T13] usb 7-1: config 253 has no interface number 0 [ 216.704388][ T13] usb 7-1: config 253 interface 199 altsetting 129 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 216.754700][ T13] usb 7-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xC3, skipping [ 216.786647][ T13] usb 7-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xF8, skipping [ 216.877001][ T13] usb 7-1: config 253 interface 199 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.918491][ T13] usb 7-1: config 253 interface 199 has no altsetting 0 [ 217.959295][ T5834] loop3: detected capacity change from 0 to 1024 [ 217.982193][ T13] usb 7-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=4c.dd [ 217.993478][ T5831] loop0: detected capacity change from 0 to 1024 [ 218.001620][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.028131][ T13] usb 7-1: Product: syz [ 218.035013][ T5834] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 218.035013][ T5834] [ 218.059376][ T5831] EXT4-fs (loop0): Test dummy encryption mode enabled [ 218.067596][ T13] usb 7-1: Manufacturer: syz [ 218.073219][ T5831] EXT4-fs (loop0): Test dummy encryption mode enabled [ 218.076956][ T5834] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 218.091700][ T13] usb 7-1: SerialNumber: syz [ 218.104488][ T5831] EXT4-fs (loop0): Ignoring removed orlov option [ 218.165758][ T5831] EXT4-fs (loop0): Mount option "data_err=abort" incompatible with ext2 [ 218.545738][ T5843] loop0: detected capacity change from 0 to 1024 [ 218.557216][ T5844] loop3: detected capacity change from 0 to 512 [ 218.602502][ T13] hub 7-1:253.199: bad descriptor, ignoring hub [ 218.612085][ T13] hub: probe of 7-1:253.199 failed with error -5 [ 218.630117][ T5843] EXT4-fs (loop0): Test dummy encryption mode enabled [ 218.646386][ T5844] EXT4-fs (loop3): Test dummy encryption mode enabled [ 218.656827][ T13] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 218.664809][ T5843] EXT4-fs (loop0): Test dummy encryption mode enabled [ 218.685643][ T5843] EXT4-fs (loop0): Ignoring removed orlov option [ 218.692706][ T5844] EXT4-fs (loop3): Test dummy encryption mode enabled [ 218.699650][ T5843] EXT4-fs (loop0): Mount option "data_err=abort" incompatible with ext2 [ 218.708764][ T13] usb 7-1: selecting invalid altsetting 0 [ 218.721788][ T2420] pvrusb2: Invalid write control endpoint [ 218.724769][ T13] usb 7-1: USB disconnect, device number 2 [ 218.773723][ T5844] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.304: inline data xattr refers to an external xattr inode [ 218.836776][ T2420] pvrusb2: Invalid write control endpoint [ 218.837893][ T5844] EXT4-fs (loop3): Remounting filesystem read-only [ 218.846221][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 218.885169][ T5844] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.304: couldn't read orphan inode 12 (err -117) [ 218.903965][ T5844] EXT4-fs (loop3): Remounting filesystem read-only [ 218.937715][ T5844] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,nolazytime,sysvgroups,prjquota,norecovery,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,. Quota mode: writeback. [ 218.974525][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 218.988821][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 219.012227][ T2420] pvrusb2: Device being rendered inoperable [ 219.051994][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 219.135712][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 219.305078][ T2420] pvrusb2: Attached sub-driver cx25840 [ 219.405822][ T26] audit: type=1326 audit(1738887686.082:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5862 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb345bde9 code=0x7ffc0000 [ 219.770366][ T5865] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 219.986790][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 220.049620][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 220.064792][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 220.112815][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 220.120963][ T2420] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 221.112831][ T5884] netlink: 'syz.3.311': attribute type 34 has an invalid length. [ 221.423508][ T5894] loop2: detected capacity change from 0 to 1024 [ 221.440392][ T2420] TUNER: Unable to find symbol tda829x_probe() [ 221.605145][ T2420] DVB: Unable to find symbol tda9887_attach() [ 221.641920][ T2420] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 221.672709][ T5894] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 221.672709][ T5894] [ 221.722593][ T5894] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 221.801001][ T2420] pvrusb2: Attached sub-driver tuner [ 221.877635][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 222.088735][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 222.617794][ T5905] loop5: detected capacity change from 0 to 1024 [ 222.746344][ T5905] EXT4-fs (loop5): Test dummy encryption mode enabled [ 222.782496][ T5905] EXT4-fs (loop5): Test dummy encryption mode enabled [ 222.789344][ T5905] EXT4-fs (loop5): Ignoring removed orlov option [ 222.846584][ T5905] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2 [ 222.868233][ T5910] loop2: detected capacity change from 0 to 512 [ 223.023258][ T5910] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.316: casefold flag without casefold feature [ 223.066075][ T5910] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.316: couldn't read orphan inode 15 (err -117) [ 223.226847][ T5910] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.689419][ T5928] Zero length message leads to an empty skb [ 224.689809][ T5934] loop5: detected capacity change from 0 to 256 [ 224.935133][ T5938] loop0: detected capacity change from 0 to 1024 [ 225.031011][ T5938] EXT4-fs (loop0): Test dummy encryption mode enabled [ 225.106792][ T5938] EXT4-fs (loop0): Test dummy encryption mode enabled [ 225.205572][ T5938] EXT4-fs (loop0): Ignoring removed orlov option [ 225.222149][ T5938] EXT4-fs (loop0): Mount option "data_err=abort" incompatible with ext2 [ 226.828038][ T5959] netlink: 'syz.5.324': attribute type 34 has an invalid length. [ 228.168467][ T5971] loop2: detected capacity change from 0 to 1024 [ 228.344389][ T5971] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 228.344389][ T5971] [ 228.392090][ T5971] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 228.634692][ T5982] loop6: detected capacity change from 0 to 256 [ 230.900109][ T5982] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.911031][ T5982] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 230.960072][ T5982] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 232.526785][ T5986] netlink: 'syz.5.329': attribute type 4 has an invalid length. [ 232.614759][ T5997] loop2: detected capacity change from 0 to 1024 [ 232.690613][ T5997] EXT4-fs (loop2): Test dummy encryption mode enabled [ 232.726410][ T5997] EXT4-fs (loop2): Test dummy encryption mode enabled [ 232.781564][ T5997] EXT4-fs (loop2): Ignoring removed orlov option [ 232.790004][ T5997] EXT4-fs (loop2): Mount option "data_err=abort" incompatible with ext2 [ 232.987186][ T6011] loop5: detected capacity change from 0 to 1024 [ 233.140875][ T6011] EXT4-fs (loop5): test_dummy_encryption requires encrypt feature [ 234.280230][ T6011] loop5: detected capacity change from 0 to 512 [ 234.610073][ T6011] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 234.660589][ T6011] EXT4-fs (loop5): Unrecognized mount option "seclabel" or missing value [ 234.779576][ T6035] netlink: 'syz.6.339': attribute type 34 has an invalid length. [ 235.877344][ T6044] loop3: detected capacity change from 0 to 1024 [ 236.181969][ T6052] input: syz0 as /devices/virtual/input/input17 [ 236.327091][ T6044] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 236.327091][ T6044] [ 236.568062][ T6044] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 237.308927][ T6069] loop6: detected capacity change from 0 to 512 [ 237.426410][ T6069] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 237.437941][ T6069] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.689264][ T6074] syz.6.348[6074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.689385][ T6074] syz.6.348[6074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.079624][ T6078] input: syz0 as /devices/virtual/input/input18 [ 239.589777][ T6096] loop6: detected capacity change from 0 to 2048 [ 239.748585][ T6096] EXT4-fs (loop6): Unrecognized mount option "smackfsroot={" or missing value [ 239.898111][ T6110] netlink: 'syz.0.354': attribute type 34 has an invalid length. [ 241.591254][ T4216] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 241.974267][ T4216] usb 1-1: Using ep0 maxpacket: 8 [ 242.182674][ T4216] usb 1-1: config 253 has an invalid interface number: 199 but max is 0 [ 242.244014][ T4216] usb 1-1: config 253 has no interface number 0 [ 242.390255][ T4216] usb 1-1: config 253 interface 199 altsetting 129 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 242.602809][ T4216] usb 1-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xC3, skipping [ 242.692054][ T4216] usb 1-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xF8, skipping [ 242.751466][ T4216] usb 1-1: config 253 interface 199 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.842439][ T4216] usb 1-1: config 253 interface 199 has no altsetting 0 [ 242.891447][ T4195] Bluetooth: hci5: command 0x0406 tx timeout [ 242.940315][ T6137] loop5: detected capacity change from 0 to 1024 [ 243.042434][ T4216] usb 1-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=4c.dd [ 243.060921][ T4216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.097707][ T4216] usb 1-1: Product: syz [ 243.122935][ T4216] usb 1-1: Manufacturer: syz [ 243.125448][ T6137] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 243.125448][ T6137] [ 243.127562][ T4216] usb 1-1: SerialNumber: syz [ 243.151053][ T6137] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 243.251603][ T6144] loop3: detected capacity change from 0 to 1024 [ 243.340246][ T6144] EXT4-fs (loop3): Test dummy encryption mode enabled [ 243.368005][ T6144] EXT4-fs (loop3): Test dummy encryption mode enabled [ 243.398270][ T6144] EXT4-fs (loop3): Ignoring removed orlov option [ 243.457161][ T6144] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2 [ 243.734951][ T4216] hub 1-1:253.199: bad descriptor, ignoring hub [ 243.751962][ T4195] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 243.765675][ T4216] hub: probe of 1-1:253.199 failed with error -5 [ 243.844349][ T4216] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 243.913349][ T4216] usb 1-1: selecting invalid altsetting 0 [ 243.970884][ T2420] pvrusb2: Invalid write control endpoint [ 243.994874][ T4195] usb 6-1: Using ep0 maxpacket: 32 [ 244.049154][ T4216] usb 1-1: USB disconnect, device number 3 [ 244.112234][ T4195] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 244.120514][ T4195] usb 6-1: config 0 has no interface number 0 [ 244.232067][ T4195] usb 6-1: config 0 interface 184 has no altsetting 0 [ 244.326482][ T2420] pvrusb2: Invalid write control endpoint [ 244.333820][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 244.365099][ T6168] loop0: detected capacity change from 0 to 512 [ 244.374004][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 244.415436][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 244.452085][ T4195] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 244.481682][ T4195] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.490352][ T4195] usb 6-1: Product: syz [ 244.495074][ T2420] pvrusb2: Device being rendered inoperable [ 244.501011][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 244.549874][ T4195] usb 6-1: Manufacturer: syz [ 244.554593][ T1107] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 244.585027][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 244.619428][ T4195] usb 6-1: SerialNumber: syz [ 244.622335][ T2420] pvrusb2: Attached sub-driver cx25840 [ 244.640580][ T6168] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 244.641123][ T4195] usb 6-1: config 0 descriptor?? [ 244.652637][ T6168] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.693404][ T4195] smsc75xx v1.0.0 [ 244.868787][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 244.882297][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 244.890324][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 244.909429][ T6180] syz.0.363[6180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.909535][ T6180] syz.0.363[6180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.921732][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 244.952387][ T2420] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 244.982028][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 245.452243][ T1107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.473004][ T2420] TUNER: Unable to find symbol tda829x_probe() [ 245.495738][ T4195] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 245.507128][ T4195] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 245.604882][ T2420] DVB: Unable to find symbol tda9887_attach() [ 245.621394][ T2420] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 245.631976][ T6194] loop3: detected capacity change from 0 to 128 [ 245.668784][ T2420] pvrusb2: Attached sub-driver tuner [ 245.685710][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 245.709680][ T6191] input: syz0 as /devices/virtual/input/input19 [ 245.732325][ T1107] usb 3-1: config 1 interface 0 altsetting 202 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.775659][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 245.832182][ T4195] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 245.870446][ T1107] usb 3-1: config 1 interface 0 has no altsetting 0 [ 245.886888][ T6200] loop0: detected capacity change from 0 to 1024 [ 245.905513][ T4195] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 245.918292][ T6194] attempt to access beyond end of device [ 245.918292][ T6194] loop3: rw=2049, want=505, limit=128 [ 245.995830][ T6193] attempt to access beyond end of device [ 245.995830][ T6193] loop3: rw=524288, want=369, limit=128 [ 246.039369][ T6193] attempt to access beyond end of device [ 246.039369][ T6193] loop3: rw=0, want=153, limit=128 [ 246.072336][ T1107] usb 3-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.40 [ 246.102245][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.109358][ T6200] EXT4-fs (loop0): Test dummy encryption mode enabled [ 246.117770][ T6200] EXT4-fs (loop0): Test dummy encryption mode enabled [ 246.124744][ T4195] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 246.135667][ T6200] EXT4-fs (loop0): Ignoring removed orlov option [ 246.142128][ T4195] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 246.151537][ T6194] attempt to access beyond end of device [ 246.151537][ T6194] loop3: rw=0, want=153, limit=128 [ 246.164363][ T6200] EXT4-fs (loop0): Mount option "data_err=abort" incompatible with ext2 [ 246.171993][ T1107] usb 3-1: Product: syz [ 246.181714][ T1107] usb 3-1: Manufacturer: syz [ 246.182545][ T4195] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 246.203543][ T6193] attempt to access beyond end of device [ 246.203543][ T6193] loop3: rw=0, want=153, limit=128 [ 246.400225][ T6193] attempt to access beyond end of device [ 246.400225][ T6193] loop3: rw=0, want=153, limit=128 [ 246.489988][ T4195] usb 6-1: USB disconnect, device number 4 [ 246.946938][ T6193] attempt to access beyond end of device [ 246.946938][ T6193] loop3: rw=0, want=153, limit=128 [ 246.973606][ T1107] usb 3-1: SerialNumber: syz [ 246.994352][ T6193] attempt to access beyond end of device [ 246.994352][ T6193] loop3: rw=0, want=153, limit=128 [ 247.007293][ T1107] usb 3-1: can't set config #1, error -71 [ 247.023110][ T1107] usb 3-1: USB disconnect, device number 4 [ 247.241250][ T6210] loop6: detected capacity change from 0 to 1024 [ 247.459300][ T6212] input: syz0 as /devices/virtual/input/input20 [ 248.294403][ T6210] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 248.294403][ T6210] [ 248.922280][ T6210] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 249.342113][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 249.642110][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 249.663013][ T6230] loop3: detected capacity change from 0 to 512 [ 249.733138][ T6230] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 249.744596][ T6230] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.982452][ T6239] loop6: detected capacity change from 0 to 1024 [ 250.020442][ T6240] syz.3.375[6240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.020546][ T6240] syz.3.375[6240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.072423][ T7] usb 1-1: config 253 has an invalid interface number: 199 but max is 0 [ 250.095409][ T6239] EXT4-fs (loop6): Test dummy encryption mode enabled [ 250.111025][ T6239] EXT4-fs (loop6): Test dummy encryption mode enabled [ 250.121396][ T6239] EXT4-fs (loop6): Ignoring removed orlov option [ 250.130852][ T7] usb 1-1: config 253 has no interface number 0 [ 250.144974][ T6239] EXT4-fs (loop6): Mount option "data_err=abort" incompatible with ext2 [ 250.169691][ T7] usb 1-1: config 253 interface 199 altsetting 129 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 250.225986][ T7] usb 1-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xC3, skipping [ 250.241179][ T7] usb 1-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xF8, skipping [ 250.260036][ T7] usb 1-1: config 253 interface 199 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.280616][ T7] usb 1-1: config 253 interface 199 has no altsetting 0 [ 250.409360][ T6244] input: syz0 as /devices/virtual/input/input21 [ 250.502161][ T7] usb 1-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=4c.dd [ 250.511235][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.541921][ T7] usb 1-1: Product: syz [ 250.546131][ T7] usb 1-1: Manufacturer: syz [ 250.550734][ T7] usb 1-1: SerialNumber: syz [ 250.565136][ T1107] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 250.671502][ T6253] loop5: detected capacity change from 0 to 1024 [ 250.898268][ T6253] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8803c018, mo2=0002] [ 250.944084][ T6253] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,nodiscard,abort,init_itable,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,debug,,errors=continue. Quota mode: none. [ 251.012834][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 251.752342][ T7] hub 1-1:253.199: bad descriptor, ignoring hub [ 251.752373][ T7] hub: probe of 1-1:253.199 failed with error -5 [ 251.754995][ T7] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 251.762973][ T7] usb 1-1: selecting invalid altsetting 0 [ 251.763040][ T2420] pvrusb2: Invalid write control endpoint [ 251.825146][ T7] usb 1-1: USB disconnect, device number 4 [ 252.064754][ T1107] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 252.101233][ T1107] usb 3-1: config 0 has no interface number 0 [ 252.105986][ T2420] pvrusb2: Invalid write control endpoint [ 252.119997][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 252.133197][ T1107] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.145949][ T1107] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.146315][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 252.326569][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 252.443143][ T2420] pvrusb2: Device being rendered inoperable [ 252.527877][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 252.683633][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 252.862078][ T2420] pvrusb2: Attached sub-driver cx25840 [ 252.881976][ T1107] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 252.891062][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.912667][ T1107] usb 3-1: config 0 descriptor?? [ 253.009798][ T6283] loop2: detected capacity change from 0 to 1024 [ 253.066391][ T1107] usb 3-1: can't set config #0, error -71 [ 253.089982][ T1107] usb 3-1: USB disconnect, device number 5 [ 253.115566][ T6283] EXT4-fs (loop2): Test dummy encryption mode enabled [ 253.139254][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 253.157864][ T6283] EXT4-fs (loop2): Test dummy encryption mode enabled [ 253.172505][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 253.198410][ T6283] EXT4-fs (loop2): Ignoring removed orlov option [ 253.211324][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 253.233948][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 253.242937][ T6283] EXT4-fs (loop2): Mount option "data_err=abort" incompatible with ext2 [ 253.261536][ T2420] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 253.321985][ T13] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 253.489341][ T6297] loop6: detected capacity change from 0 to 1024 [ 253.576585][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 253.611571][ T6300] input: syz0 as /devices/virtual/input/input22 [ 253.680558][ T6297] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 253.680558][ T6297] [ 253.742050][ T2420] TUNER: Unable to find symbol tda829x_probe() [ 253.760172][ T6297] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 253.822965][ T2420] DVB: Unable to find symbol tda9887_attach() [ 253.829073][ T2420] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 253.872065][ T13] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 253.881240][ T13] usb 6-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 253.903440][ T2420] pvrusb2: Attached sub-driver tuner [ 253.908768][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 253.947820][ T13] usb 6-1: Product: syz [ 253.960583][ T13] usb 6-1: Manufacturer: syz [ 253.965984][ T13] usb 6-1: SerialNumber: syz [ 253.971259][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 253.991577][ T6310] loop3: detected capacity change from 0 to 128 [ 254.029860][ T13] usb 6-1: config 0 descriptor?? [ 254.104472][ T13] usb 6-1: selecting invalid altsetting 1 [ 254.127586][ T6315] input: syz0 as /devices/virtual/input/input23 [ 254.186697][ T13] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 254.305639][ T4439] udevd[4439]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.340667][ T6316] input: syz0 as /devices/virtual/input/input24 [ 254.380673][ T7] usb 6-1: USB disconnect, device number 5 [ 254.812074][ T4295] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 255.593866][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.608061][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.475010][ T6361] loop6: detected capacity change from 0 to 256 [ 256.951588][ T4295] usb 3-1: Using ep0 maxpacket: 8 [ 257.204227][ T6363] loop3: detected capacity change from 0 to 1024 [ 257.233511][ T6361] FAT-fs (loop6): Unrecognized mount option "codepame=win95" or missing value [ 257.257059][ T6363] EXT4-fs (loop3): Test dummy encryption mode enabled [ 257.279108][ T6363] EXT4-fs (loop3): Test dummy encryption mode enabled [ 257.288086][ T4295] usb 3-1: config 253 has an invalid interface number: 199 but max is 0 [ 257.302272][ T4295] usb 3-1: config 253 has no interface number 0 [ 257.308584][ T4295] usb 3-1: config 253 interface 199 altsetting 129 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 257.325570][ T4295] usb 3-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xC3, skipping [ 257.328609][ T6363] EXT4-fs (loop3): Ignoring removed orlov option [ 257.336714][ T4295] usb 3-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xF8, skipping [ 257.336746][ T4295] usb 3-1: config 253 interface 199 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.336776][ T4295] usb 3-1: config 253 interface 199 has no altsetting 0 [ 257.456490][ T6363] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2 [ 257.512368][ T4295] usb 3-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=4c.dd [ 257.551256][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.632150][ T4295] usb 3-1: Product: syz [ 257.671979][ T4295] usb 3-1: Manufacturer: syz [ 257.676648][ T4295] usb 3-1: SerialNumber: syz [ 257.697796][ T6371] loop2: detected capacity change from 0 to 1024 [ 257.742235][ T4295] usb 3-1: can't set config #253, error -71 [ 257.757916][ T6373] loop6: detected capacity change from 0 to 1024 [ 257.779277][ T4295] usb 3-1: USB disconnect, device number 6 [ 257.808634][ T6371] EXT4-fs (loop2): Test dummy encryption mode enabled [ 257.856045][ T6373] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 257.856045][ T6373] [ 257.867729][ T6371] EXT4-fs (loop2): Test dummy encryption mode enabled [ 257.888525][ T6371] EXT4-fs (loop2): Ignoring removed orlov option [ 257.895722][ T6373] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 257.906010][ T6371] EXT4-fs (loop2): Mount option "data_err=abort" incompatible with ext2 [ 257.952734][ T6377] loop5: detected capacity change from 0 to 128 [ 259.006185][ T6389] input: syz0 as /devices/virtual/input/input25 [ 260.366472][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.6.403'. [ 261.295362][ T6393] input: syz0 as /devices/virtual/input/input26 [ 261.307874][ T6387] input: syz0 as /devices/virtual/input/input27 [ 261.540548][ T6395] netlink: 'syz.5.406': attribute type 34 has an invalid length. [ 262.072256][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 262.821987][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 262.959253][ T6412] loop5: detected capacity change from 0 to 128 [ 263.032283][ T13] usb 3-1: config 253 has an invalid interface number: 199 but max is 0 [ 263.061134][ T13] usb 3-1: config 253 has no interface number 0 [ 263.069131][ T13] usb 3-1: config 253 interface 199 altsetting 129 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 263.131348][ T13] usb 3-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xC3, skipping [ 263.156214][ T13] usb 3-1: config 253 interface 199 altsetting 129 has an invalid endpoint with address 0xF8, skipping [ 263.181237][ T6414] loop6: detected capacity change from 0 to 1024 [ 263.182203][ T13] usb 3-1: config 253 interface 199 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.232334][ T13] usb 3-1: config 253 interface 199 has no altsetting 0 [ 263.265302][ T6414] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 263.265302][ T6414] [ 263.338323][ T6414] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 263.390386][ T6407] loop0: detected capacity change from 0 to 40427 [ 263.397229][ T13] usb 3-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=4c.dd [ 263.413541][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.444001][ T13] usb 3-1: Product: syz [ 263.448200][ T13] usb 3-1: Manufacturer: syz [ 263.454309][ T13] usb 3-1: SerialNumber: syz [ 263.489103][ T6407] F2FS-fs (loop0): invalid crc value [ 263.525800][ T6407] F2FS-fs (loop0): Found nat_bits in checkpoint [ 263.732010][ T6420] loop5: detected capacity change from 0 to 256 [ 263.867523][ T6420] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.878431][ T6420] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 263.931743][ T6420] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 264.899178][ T6407] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 265.832426][ T13] hub 3-1:253.199: bad descriptor, ignoring hub [ 265.839933][ T13] hub: probe of 3-1:253.199 failed with error -5 [ 265.841741][ T13] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 265.934631][ T6430] input: syz0 as /devices/virtual/input/input28 [ 266.283789][ T13] usb 3-1: selecting invalid altsetting 0 [ 266.289845][ T2420] pvrusb2: Invalid write control endpoint [ 266.298563][ T6433] input: syz0 as /devices/virtual/input/input29 [ 266.424475][ T13] usb 3-1: USB disconnect, device number 7 [ 266.622703][ T2420] pvrusb2: Invalid write control endpoint [ 266.628462][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 266.667208][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 266.689059][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 266.862585][ T6439] netlink: 'syz.5.418': attribute type 34 has an invalid length. [ 266.906709][ T2420] pvrusb2: Device being rendered inoperable [ 266.927797][ T6438] input: syz0 as /devices/virtual/input/input30 [ 267.232047][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 267.256298][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 268.142085][ T2420] pvrusb2: Attached sub-driver cx25840 [ 268.217968][ T6457] loop0: detected capacity change from 0 to 128 [ 268.229626][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 268.251977][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 268.300823][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 268.363089][ T2420] pvrusb2: Attempted to execute control transfer when device not ok [ 268.371125][ T2420] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 268.402157][ T6458] loop3: detected capacity change from 0 to 2048 [ 268.529385][ T6465] loop5: detected capacity change from 0 to 1024 [ 268.584518][ T2420] TUNER: Unable to find symbol tda829x_probe() [ 268.595101][ T6458] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 268.632399][ T6465] EXT4-fs (loop5): Test dummy encryption mode enabled [ 268.639372][ T6465] EXT4-fs (loop5): Test dummy encryption mode enabled [ 268.666353][ T2420] DVB: Unable to find symbol tda9887_attach() [ 268.672764][ T2420] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 268.679928][ T2420] pvrusb2: Attached sub-driver tuner [ 268.685437][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 268.698572][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 268.726392][ T6465] EXT4-fs (loop5): Ignoring removed orlov option [ 268.747255][ T6465] EXT4-fs (loop5): Mount option "data_err=abort" incompatible with ext2 [ 268.856205][ T4335] attempt to access beyond end of device [ 268.856205][ T4335] loop0: rw=1, want=385, limit=128 [ 270.994116][ T6493] loop0: detected capacity change from 0 to 256 [ 272.230147][ T6498] input: syz0 as /devices/virtual/input/input31 [ 272.367632][ T6500] netlink: 'syz.3.434': attribute type 34 has an invalid length. [ 272.609329][ T6507] loop3: detected capacity change from 0 to 512 [ 272.798165][ T6509] input: syz0 as /devices/virtual/input/input32 [ 274.573764][ T6513] loop6: detected capacity change from 0 to 128 [ 274.581351][ T6507] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 274.968877][ T4279] attempt to access beyond end of device [ 274.968877][ T4279] loop6: rw=1, want=1041, limit=128 [ 275.417768][ T6516] input: syz0 as /devices/virtual/input/input33 [ 275.479869][ T6523] loop2: detected capacity change from 0 to 512 [ 275.743970][ T6523] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.442: casefold flag without casefold feature [ 275.757426][ T6523] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.442: couldn't read orphan inode 15 (err -117) [ 275.797442][ T6523] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 277.771706][ T6538] loop5: detected capacity change from 0 to 256 [ 282.227079][ T6566] loop2: detected capacity change from 0 to 512 [ 282.541729][ T6566] EXT4-fs (loop2): orphan cleanup on readonly fs [ 282.566640][ T6566] Quota error (device loop2): find_tree_dqentry: Getting block too big (196613 >= 6) [ 282.576984][ T6566] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 282.586585][ T6566] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.451: Failed to acquire dquot type 1 [ 282.612298][ T6566] EXT4-fs (loop2): 1 truncate cleaned up [ 282.620231][ T6566] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 284.771115][ T6577] loop0: detected capacity change from 0 to 128 [ 284.832441][ T6579] loop3: detected capacity change from 0 to 512 [ 285.135987][ T6579] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 285.162208][ T6577] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 285.227967][ T6579] EXT4-fs error (device loop3): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 285.311839][ T6583] loop2: detected capacity change from 0 to 2048 [ 285.319234][ T6579] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #11: comm syz.3.456: corrupted inode contents [ 285.348696][ T6573] input: syz0 as /devices/virtual/input/input34 [ 285.359404][ T4708] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 285.373823][ T6579] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #11: comm syz.3.456: mark_inode_dirty error [ 285.404088][ T6579] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.456: invalid indirect mapped block 1 (level 1) [ 285.423912][ T6583] xt_hashlimit: size too large, truncated to 1048576 [ 285.452439][ T6579] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #11: comm syz.3.456: corrupted inode contents [ 285.478044][ T6579] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 285.497781][ T6579] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #11: comm syz.3.456: corrupted inode contents [ 285.551551][ T6579] EXT4-fs error (device loop3): ext4_truncate:4272: inode #11: comm syz.3.456: mark_inode_dirty error [ 285.570891][ T6590] loop2: detected capacity change from 0 to 512 [ 285.588012][ T6579] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 285.615729][ T6579] EXT4-fs (loop3): 1 truncate cleaned up [ 285.621530][ T6579] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.691233][ T6590] EXT4-fs (loop2): Ignoring removed oldalloc option [ 285.789220][ T6590] ------------[ cut here ]------------ [ 285.822144][ T6590] WARNING: CPU: 1 PID: 6590 at mm/page_alloc.c:5440 __alloc_pages+0x5cf/0x700 [ 285.831067][ T6590] Modules linked in: [ 285.891128][ T6590] CPU: 1 PID: 6590 Comm: syz.2.458 Not tainted 5.15.178-syzkaller #0 [ 285.964312][ T6590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 286.000138][ T6590] RIP: 0010:__alloc_pages+0x5cf/0x700 [ 286.042084][ T6590] Code: 00 48 ba 00 00 00 00 00 fc ff df e9 1d fd ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 2e fd ff ff e8 e6 49 0a 00 e9 24 fd ff ff <0f> 0b 45 31 e4 e9 70 fd ff ff 48 8d 4c 24 50 80 e1 07 80 c1 03 38 [ 286.100191][ T6590] RSP: 0018:ffffc900034bf100 EFLAGS: 00010246 [ 286.120442][ T6590] RAX: dffffc0000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 286.146990][ T6590] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900034bf188 [ 286.184741][ T6590] RBP: ffffc900034bf218 R08: dffffc0000000000 R09: ffffc900034bf160 [ 286.209851][ T6590] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000040c40 [ 286.241031][ T6590] R13: 1ffff92000697e28 R14: ffffc900034bf160 R15: 1ffff92000697e24 [ 286.262091][ T6590] FS: 00007efdb12836c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 286.281217][ T6590] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.297296][ T6590] CR2: 000020000021f000 CR3: 0000000055d5e000 CR4: 00000000003506e0 [ 286.315737][ T6590] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.334597][ T6590] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.353994][ T6590] Call Trace: [ 286.360479][ T6590] [ 286.368233][ T6590] ? __warn+0x15b/0x300 [ 286.378473][ T6590] ? __alloc_pages+0x5cf/0x700 [ 286.388075][ T6590] ? report_bug+0x1b7/0x2e0 [ 286.399943][ T6590] ? handle_bug+0x3d/0x70 [ 286.410965][ T6590] ? exc_invalid_op+0x16/0x40 [ 286.423462][ T6590] ? asm_exc_invalid_op+0x16/0x20 [ 286.464015][ T6590] ? __alloc_pages+0x5cf/0x700 [ 286.485284][ T6590] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 286.520604][ T6590] kmalloc_large_node+0x7c/0x180 [ 286.533525][ T6590] __kmalloc_node+0x22d/0x390 [ 286.538267][ T6590] ? __kmalloc+0x168/0x300 [ 286.566616][ T6590] ? ext4_expand_extra_isize_ea+0xd41/0x1bb0 [ 286.576742][ T6590] ? ext4_expand_extra_isize_ea+0xd11/0x1bb0 [ 286.616715][ T6590] ext4_expand_extra_isize_ea+0xe4f/0x1bb0 [ 286.631953][ T6590] ? ext4_xattr_set+0x3d0/0x3d0 [ 286.651989][ T6590] ? rwsem_write_trylock+0x166/0x210 [ 286.657446][ T6590] ? clear_nonspinnable+0x60/0x60 [ 286.675493][ T6590] ? dquot_initialize_needed+0x128/0x320 [ 286.693532][ T6590] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 286.711226][ T6590] __ext4_mark_inode_dirty+0x539/0x860 [ 286.729089][ T6590] ? ext4_blocks_for_truncate+0x270/0x270 [ 286.753649][ T6590] ? rcu_read_lock_any_held+0xb3/0x160 [ 286.769426][ T6590] ? ext4_journal_check_start+0x17b/0x240 [ 286.775336][ T6590] ? ext4_inode_is_fast_symlink+0x262/0x390 [ 286.791511][ T6590] ext4_evict_inode+0xadc/0x1100 [ 286.801641][ T6590] ? _raw_spin_unlock+0x24/0x40 [ 286.806768][ T6590] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 286.823002][ T6590] ? do_raw_spin_unlock+0x137/0x8b0 [ 286.828250][ T6590] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 286.851944][ T6590] evict+0x529/0x930 [ 286.855983][ T6590] ? mode_strip_sgid+0x210/0x210 [ 286.860951][ T6590] ? rcu_is_watching+0x11/0xa0 [ 286.876209][ T6590] ? _raw_spin_unlock+0x24/0x40 [ 286.881120][ T6590] ? iput+0x6f5/0x8b0 [ 286.896443][ T6590] ext4_orphan_cleanup+0x9d9/0x1240 [ 286.901813][ T6590] ? ext4_orphan_del+0xc50/0xc50 [ 286.911495][ T6590] ? __init_swait_queue_head+0xaa/0x140 [ 286.927303][ T6590] ? errseq_check_and_advance+0x60/0x110 [ 286.933046][ T6590] ext4_fill_super+0x98de/0xa110 [ 286.958361][ T6590] ? ext4_mount+0x40/0x40 [ 286.962866][ T6590] ? vscnprintf+0x80/0x80 [ 286.967251][ T6590] ? set_blocksize+0x1ec/0x370 [ 286.981931][ T6590] mount_bdev+0x2c9/0x3f0 [ 286.986356][ T6590] ? ext4_mount+0x40/0x40 [ 286.990708][ T6590] legacy_get_tree+0xeb/0x180 [ 287.001952][ T6590] ? ext4_errno_to_code+0x140/0x140 [ 287.007238][ T6590] vfs_get_tree+0x88/0x270 [ 287.011680][ T6590] do_new_mount+0x2ba/0xb40 [ 287.031919][ T6590] ? do_move_mount_old+0x160/0x160 [ 287.037083][ T6590] ? user_path_at_empty+0x12b/0x180 [ 287.051921][ T6590] __se_sys_mount+0x2d5/0x3c0 [ 287.056658][ T6590] ? __x64_sys_mount+0xc0/0xc0 [ 287.061458][ T6590] ? syscall_enter_from_user_mode+0x2e/0x240 [ 287.081908][ T6590] ? lockdep_hardirqs_on+0x94/0x130 [ 287.087160][ T6590] ? __x64_sys_mount+0x1c/0xc0 [ 287.101921][ T6590] do_syscall_64+0x3b/0xb0 [ 287.106381][ T6590] ? clear_bhb_loop+0x15/0x70 [ 287.111074][ T6590] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.131927][ T6590] RIP: 0033:0x7efdb345d58a [ 287.136399][ T6590] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.181925][ T6590] RSP: 002b:00007efdb1282e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 287.190400][ T6590] RAX: ffffffffffffffda RBX: 00007efdb1282ef0 RCX: 00007efdb345d58a [ 287.221967][ T6590] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 00007efdb1282eb0 [ 287.230030][ T6590] RBP: 00002000000002c0 R08: 00007efdb1282ef0 R09: 0000000000800700 [ 287.249302][ T6590] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 287.271944][ T6590] R13: 00007efdb1282eb0 R14: 000000000000044b R15: 0000200000000200 [ 287.280495][ T6590] [ 287.284895][ T6590] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 287.292186][ T6590] CPU: 1 PID: 6590 Comm: syz.2.458 Not tainted 5.15.178-syzkaller #0 [ 287.300256][ T6590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 287.310314][ T6590] Call Trace: [ 287.313599][ T6590] [ 287.316539][ T6590] dump_stack_lvl+0x1e3/0x2d0 [ 287.321232][ T6590] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 287.326870][ T6590] ? panic+0x860/0x860 [ 287.330976][ T6590] ? __alloc_pages+0x4d0/0x700 [ 287.335750][ T6590] ? __alloc_pages+0x4d0/0x700 [ 287.340521][ T6590] panic+0x318/0x860 [ 287.344425][ T6590] ? __warn+0x16a/0x300 [ 287.348591][ T6590] ? fb_is_primary_device+0xd0/0xd0 [ 287.353816][ T6590] ? __alloc_pages+0x5cf/0x700 [ 287.358596][ T6590] __warn+0x2b2/0x300 [ 287.362591][ T6590] ? __alloc_pages+0x5cf/0x700 [ 287.367365][ T6590] report_bug+0x1b7/0x2e0 [ 287.371708][ T6590] handle_bug+0x3d/0x70 [ 287.375869][ T6590] exc_invalid_op+0x16/0x40 [ 287.380384][ T6590] asm_exc_invalid_op+0x16/0x20 [ 287.385249][ T6590] RIP: 0010:__alloc_pages+0x5cf/0x700 [ 287.390629][ T6590] Code: 00 48 ba 00 00 00 00 00 fc ff df e9 1d fd ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 2e fd ff ff e8 e6 49 0a 00 e9 24 fd ff ff <0f> 0b 45 31 e4 e9 70 fd ff ff 48 8d 4c 24 50 80 e1 07 80 c1 03 38 [ 287.410254][ T6590] RSP: 0018:ffffc900034bf100 EFLAGS: 00010246 [ 287.416352][ T6590] RAX: dffffc0000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 287.424342][ T6590] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900034bf188 [ 287.432323][ T6590] RBP: ffffc900034bf218 R08: dffffc0000000000 R09: ffffc900034bf160 [ 287.440306][ T6590] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000040c40 [ 287.448297][ T6590] R13: 1ffff92000697e28 R14: ffffc900034bf160 R15: 1ffff92000697e24 [ 287.456304][ T6590] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 287.461652][ T6590] kmalloc_large_node+0x7c/0x180 [ 287.466611][ T6590] __kmalloc_node+0x22d/0x390 [ 287.471311][ T6590] ? __kmalloc+0x168/0x300 [ 287.475732][ T6590] ? ext4_expand_extra_isize_ea+0xd41/0x1bb0 [ 287.481726][ T6590] ? ext4_expand_extra_isize_ea+0xd11/0x1bb0 [ 287.487734][ T6590] ext4_expand_extra_isize_ea+0xe4f/0x1bb0 [ 287.493585][ T6590] ? ext4_xattr_set+0x3d0/0x3d0 [ 287.498458][ T6590] ? rwsem_write_trylock+0x166/0x210 [ 287.503789][ T6590] ? clear_nonspinnable+0x60/0x60 [ 287.508824][ T6590] ? dquot_initialize_needed+0x128/0x320 [ 287.514478][ T6590] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 287.520145][ T6590] __ext4_mark_inode_dirty+0x539/0x860 [ 287.525630][ T6590] ? ext4_blocks_for_truncate+0x270/0x270 [ 287.531377][ T6590] ? rcu_read_lock_any_held+0xb3/0x160 [ 287.536849][ T6590] ? ext4_journal_check_start+0x17b/0x240 [ 287.542592][ T6590] ? ext4_inode_is_fast_symlink+0x262/0x390 [ 287.548510][ T6590] ext4_evict_inode+0xadc/0x1100 [ 287.553463][ T6590] ? _raw_spin_unlock+0x24/0x40 [ 287.558368][ T6590] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 287.564280][ T6590] ? do_raw_spin_unlock+0x137/0x8b0 [ 287.569529][ T6590] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 287.575441][ T6590] evict+0x529/0x930 [ 287.579382][ T6590] ? mode_strip_sgid+0x210/0x210 [ 287.584333][ T6590] ? rcu_is_watching+0x11/0xa0 [ 287.589107][ T6590] ? _raw_spin_unlock+0x24/0x40 [ 287.593988][ T6590] ? iput+0x6f5/0x8b0 [ 287.597987][ T6590] ext4_orphan_cleanup+0x9d9/0x1240 [ 287.603207][ T6590] ? ext4_orphan_del+0xc50/0xc50 [ 287.608148][ T6590] ? __init_swait_queue_head+0xaa/0x140 [ 287.613705][ T6590] ? errseq_check_and_advance+0x60/0x110 [ 287.619354][ T6590] ext4_fill_super+0x98de/0xa110 [ 287.624336][ T6590] ? ext4_mount+0x40/0x40 [ 287.628676][ T6590] ? vscnprintf+0x80/0x80 [ 287.633014][ T6590] ? set_blocksize+0x1ec/0x370 [ 287.637794][ T6590] mount_bdev+0x2c9/0x3f0 [ 287.642136][ T6590] ? ext4_mount+0x40/0x40 [ 287.646489][ T6590] legacy_get_tree+0xeb/0x180 [ 287.651176][ T6590] ? ext4_errno_to_code+0x140/0x140 [ 287.656404][ T6590] vfs_get_tree+0x88/0x270 [ 287.660925][ T6590] do_new_mount+0x2ba/0xb40 [ 287.665545][ T6590] ? do_move_mount_old+0x160/0x160 [ 287.670672][ T6590] ? user_path_at_empty+0x12b/0x180 [ 287.675887][ T6590] __se_sys_mount+0x2d5/0x3c0 [ 287.680582][ T6590] ? __x64_sys_mount+0xc0/0xc0 [ 287.685359][ T6590] ? syscall_enter_from_user_mode+0x2e/0x240 [ 287.691367][ T6590] ? lockdep_hardirqs_on+0x94/0x130 [ 287.696688][ T6590] ? __x64_sys_mount+0x1c/0xc0 [ 287.701478][ T6590] do_syscall_64+0x3b/0xb0 [ 287.705901][ T6590] ? clear_bhb_loop+0x15/0x70 [ 287.710591][ T6590] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.716499][ T6590] RIP: 0033:0x7efdb345d58a [ 287.720924][ T6590] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.740551][ T6590] RSP: 002b:00007efdb1282e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 287.748980][ T6590] RAX: ffffffffffffffda RBX: 00007efdb1282ef0 RCX: 00007efdb345d58a [ 287.756964][ T6590] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 00007efdb1282eb0 [ 287.764944][ T6590] RBP: 00002000000002c0 R08: 00007efdb1282ef0 R09: 0000000000800700 [ 287.772928][ T6590] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 287.780907][ T6590] R13: 00007efdb1282eb0 R14: 000000000000044b R15: 0000200000000200 [ 287.788910][ T6590] [ 287.792228][ T6590] Kernel Offset: disabled [ 287.796818][ T6590] Rebooting in 86400 seconds..