last executing test programs: 2m1.78151887s ago: executing program 2 (id=344): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00'}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000", @ANYRES16=r1, @ANYBLOB="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"], 0x154}}, 0x0) 2m1.450649628s ago: executing program 2 (id=347): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m0.872556625s ago: executing program 2 (id=350): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2'}, 0x31) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1m59.089655579s ago: executing program 2 (id=353): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f00000000c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}]}, 0x3, 0x51e, &(0x7f0000000680)="$eJzs3dFrJHcdAPDvTLLX5C41qfqgBWuxlUvV2ySN1wYfqoLoU0Gt+HrGZBNCNtkj2bSXUGyKf4AgogVf9MkXwT9AkL74LkJB30VFkXrVB4X2RmZ29u6y2U1yuJuB5POBX3Z+M7Pz/f427G9/v51hJ4BL6+mImI2IsYh4LiKmy/VpWeKwU/L93rv7+kpeksiyV95NIinXdY/1WPl4rXzaRER882sR302Ox93dP9hcbjYbO2V9rr2VvJ9lBzc2tpbXG+uN7cXFhReWXly6uTQ/lHbORMRLX/nrj3/wi6++9JvPvfanW3+f/V6e1n+z7I3oaccwdZpeK16LrvGI2BlFsIqMFy3suFlxLgAAnCwf7384Ij5VjP+nY6wYzQEAAAAXSfbFqXg/icgAAACACyuNiKlI0np5ve9UpGm93rmG96NxNW22dtufXWvtba/m2yJmopaubTQb8+W1AzNRS/L6QnmNbbf+fE99MSKeiIgfTU8W9fpKq7la9ZcfAAAAcElc65n//3u6M/8vHFacHAAAADA8M1UnAAAAAIyc+T8AAABcfOb/AAAAcKF9/eWX85J173+9+ur+3mbr1Rurjd3N+tbeSn2ltXO7vt5qrRe/2bd12vGardbtz8f23p25dmO3Pbe7f3Brq7W33b61ceQW2AAAAMA5euKTb/8xiYjDL0wWJXel3FaLyMYe3nm8igyBUUkfZee/jC4P4Pw9/Pk+WWEewPkzpIfLq1Z1AkDlklO2D7x453fDzwUAABiN6x8ffP7/3bVKUwNGrDz/n5w2/wcunrGqEwAq0zn/dy/rqDob4DzVThoBmBTAhZcO5/z/KZcSJjoUAACo2FRRkrRezgOmIk3r9YjHi9sC1JK1jWZjPiI+FBF/mK49ltcXimcmRvMAAAAAAAAAAAAAAAAAAAAAAAAAcEZZlkQGAAAAXGgR6d+6d+a6Pv3sVO/3A1eS/0wXjxHx2k9f+cmd5XZ7ZyFf/8/769tvleufr+IbDAAAAKBXd57enccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDC9d/f1lW45z7j/+HJEzPSLPx4TxeNE1CLi6r+SGH/oeUlEjA0h/uGbEfGxfvGTPK2YKbM4Ev9KRBoRk8OK3/f1PyF+dOJfG0J8uMzezvufL/V7/6XxdPHY//03Xpb/1+D+L73f/40N6P8eH3TQ2tHqk+/8am5g/Dcjnhzv3/904yf58frEf+aMbfzOtw4OBm3Lfh5xvV//lxyNNdfeuj23u39wY2Nreb2x3theXFx4YenFpZtL83NrG81G+bdvjB9+4tf3HtQ+ONb+qyf0v0X7B7z+z56x/R+8c+fuRzqLPf+ZqMXPsmz2mf7//8JnjsfvfvZ9utwrr+evYfrWt/vGf+qXv39qUG55+1cHtH/ilPbPnrH9z33j+38+464AwDnY3T/YXG42GzsWLDzCQj7urDyNJJI4vmm5+sQ6C2+U77HlZvfdNqQj/7acHI0y+Yr6IwAAYHQeDPp7tyTVJAQAAAAAAAAAAAAAAAAAAACX0Kk/AzZoUxoRZ/w5sd6Yh9U0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRP8LAAD//0mN1e4=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000040)='./file2\x00', 0x0) 1m57.292336342s ago: executing program 2 (id=360): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m55.517793559s ago: executing program 2 (id=366): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket(0x10, 0x3, 0x9) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)) 1m53.630034633s ago: executing program 32 (id=366): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket(0x10, 0x3, 0x9) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)) 25.016717828s ago: executing program 5 (id=579): clock_adjtime(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x2c, 0x0, @dev, @local, {[@routing={0x0, 0x0, 0x0, 0x3}]}}}}}, 0x0) 23.906748465s ago: executing program 5 (id=583): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='io_uring_poll_arm\x00', 0xffffffffffffffff, 0x0, 0xeb7}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, 0x0, &(0x7f0000000040)) 22.576670107s ago: executing program 5 (id=588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, @void, @value}, 0x5e) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r0, 0x1) 22.006675557s ago: executing program 5 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0x0, 0x1}, 0x6) 17.938649715s ago: executing program 5 (id=606): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") poll(&(0x7f0000000080)=[{r1, 0x9240}, {r1, 0x100}, {r0, 0x48}, {r1, 0x4}], 0x4, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x20, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4}}]}}]}, 0x48}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ftruncate(r6, 0xc17a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) syz_open_dev$usbfs(&(0x7f0000000000), 0xc0f, 0x20000) 16.769261945s ago: executing program 5 (id=608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback=r5, 0x1f, 0x0, 0x4, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000500), &(0x7f0000000580), &(0x7f00000005c0)=[0x0, 0x0]}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001800020000000200060000000000000000000003008000000400000001000000ffff0000005f5f303000"], &(0x7f0000000340)=""/128, 0x36, 0x80, 0x1, 0x2, 0x0, @void, @value}, 0x28) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$eJzs3M1rHOUfAPDvzG6SX1+TX60vrdVGq1h8SZq0akHBFxA8KAh6qCeJSVpq00aaCLYEG6XUi6AF7yJ4EfwLPHkS9SR41bsUivTS6mllMrPrJtnNSzfJptnPB6aZJ/vMPt/vzDwzz8xkGkDH6s/+SSJ2RsTvEdEbEWl9hW35lNW7dWNm9O8bM6NJVCpv/pVki8XNGzOj1apJ8XNHXihnX5ReTuLFBu1OXbh4ZmRiYvx8UR6cPvv+4NSFi0+dPjtyavzU+Lnh48ePHR169pnhp9ckzyymm/s/mjyw79W3r74+euLquz9/l9QFXZ9Hi57rrc3O1NbJQo+uUWObxa66+aTcxkBYlZ6IyDZX11z/743S5d21z3rjlU/aGhywriqVSmW4+cezFWALS6LdEQDtUT3RZ9e/1WmDhh6bwvWX8gugLO9bxZR/Us7vg/Tk10a71qn9/og4MfvPV9kUq74P0bVOUQEAW9kP2fjnyQbjv3LEPXX1dhfPhvoi4v8RsSci7oqIvRFxd+R1742I+xo30/9Ok/b7F5QXj3/Say2kt6xs/Pd88Wxr/viv9hSsr1SUds3l35WcPD0xfqRYJ4ejqycrDzX89iRiNvv52+fN2q8f/2VT1n51LFjEca3cM3+ZsZHpkZYTL1z/OGJ/uVH+SZT/yyL2RcT+22zj9OPfHpj/m1Jtbvn8l7AGz5kqX0c8lm//2ViQf1Wy9PPJwf/FxPiRwepesdgvv155o1n7ef5pLJ3/ttYTbSLb/tsb7f8v1PLvS+qf104t+oru5dq48senTa9pbnf/707emtf4hyPT0+eHIrqT1xb/vu4Gd7VcrZ/lf/hQ4/6/p1gmy//+iMh24gci4sGIOFjE/lBEPBwRh5bI/6eXH3mvaf4HW9j/10CW/1jD41+z7b/6mdKZH79v1v7Ktv+xamEuqJUc/1YaYCvrDgAAAO4UaUTsjCQdqM2n6cBA/vfye2N7OjE5Nf3EyckPzo3l7wj0RVdavdPVW3c/dKi4N1wtDxflS0X5aHHf+MvStrnywOjkxFi7k4cOt6NJ/8/8WWp3dMC6874WdC79HzrX7fd/Rw640y3Ti9ONigPYeM7i0Lka9f9L9YUk8r+SB7Yc53/oXLX+/8UKKte97rXw5U3gzrPU+b/Su4GBABvO+B86Uivv9W+KmfgmYuk6yWYJdVUzn7WyeHkDIoy0jeunuy0bZbgU0cZdorzS/9UiLlQutdxou49MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa+PfAAAA///67uRi") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) unshare(0x22020600) 14.274768047s ago: executing program 1 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x6, 0x103ba, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f00000004c0), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f0000000180), 0x0}, 0x20) 13.167548188s ago: executing program 4 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0x0, 0x1}, 0x6) 13.044494024s ago: executing program 0 (id=618): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r6}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r7}, 0x8) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @rand_addr=0x64010100}, 0xb}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c", 0xc}], 0x1}}], 0x1, 0x8040) 11.708525325s ago: executing program 0 (id=619): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x8, 0x65, 0x0, 0xea, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0xd}}}}}) 11.707381685s ago: executing program 4 (id=621): fremovexattr(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r0 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0xfffffffffffffff9}, 0xfffffffffffffd7f) fsopen(&(0x7f0000000240)='selinuxfs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0x7, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0xffffff7f, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x10}]}}]}, 0x48}}, 0x4000) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000040)="364c8f3fca5d66571e583e9188", 0xd, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.397135187s ago: executing program 0 (id=622): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x7ff, &(0x7f0000002080)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) io_pgetevents(r4, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) 6.973922267s ago: executing program 1 (id=623): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2'}, 0x31) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 6.972234793s ago: executing program 4 (id=624): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) syz_pidfd_open(r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2700000014000707", 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 5.750424569s ago: executing program 0 (id=625): syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 5.597686623s ago: executing program 4 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 5.437397911s ago: executing program 1 (id=628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000064fb2dbcb9a11e7bfd1810", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kmem_cache_free\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000040)) shutdown(r1, 0x1) io_uring_setup(0x3efa, &(0x7f0000000000)={0x0, 0x0, 0x40}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000980)={&(0x7f0000c57000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/48, 0x30, 0x0, 0x0}, &(0x7f00000009c0)=0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0xffffffff) accept4(r7, 0x0, 0x0, 0x80000) 4.304724504s ago: executing program 0 (id=629): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4e, 0xc2, 0xb5, 0x20, 0x424, 0x7505, 0x32a8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0xce, 0xfb}}]}}]}}, 0x0) 4.215607746s ago: executing program 3 (id=630): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x3, 0x0, 0x0) 3.917238462s ago: executing program 3 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0x0, 0x1}, 0x6) 3.852552411s ago: executing program 1 (id=632): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x8, 0x65, 0x0, 0xea, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0xd}}}}}) 2.749792387s ago: executing program 3 (id=633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.457028746s ago: executing program 1 (id=634): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.455550433s ago: executing program 4 (id=635): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x7ff, &(0x7f0000002080)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) io_pgetevents(r4, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) 1.330729293s ago: executing program 33 (id=608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback=r5, 0x1f, 0x0, 0x4, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000500), &(0x7f0000000580), &(0x7f00000005c0)=[0x0, 0x0]}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001800020000000200060000000000000000000003008000000400000001000000ffff0000005f5f303000"], &(0x7f0000000340)=""/128, 0x36, 0x80, 0x1, 0x2, 0x0, @void, @value}, 0x28) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$eJzs3M1rHOUfAPDvzG6SX1+TX60vrdVGq1h8SZq0akHBFxA8KAh6qCeJSVpq00aaCLYEG6XUi6AF7yJ4EfwLPHkS9SR41bsUivTS6mllMrPrJtnNSzfJptnPB6aZJ/vMPt/vzDwzz8xkGkDH6s/+SSJ2RsTvEdEbEWl9hW35lNW7dWNm9O8bM6NJVCpv/pVki8XNGzOj1apJ8XNHXihnX5ReTuLFBu1OXbh4ZmRiYvx8UR6cPvv+4NSFi0+dPjtyavzU+Lnh48ePHR169pnhp9ckzyymm/s/mjyw79W3r74+euLquz9/l9QFXZ9Hi57rrc3O1NbJQo+uUWObxa66+aTcxkBYlZ6IyDZX11z/743S5d21z3rjlU/aGhywriqVSmW4+cezFWALS6LdEQDtUT3RZ9e/1WmDhh6bwvWX8gugLO9bxZR/Us7vg/Tk10a71qn9/og4MfvPV9kUq74P0bVOUQEAW9kP2fjnyQbjv3LEPXX1dhfPhvoi4v8RsSci7oqIvRFxd+R1742I+xo30/9Ok/b7F5QXj3/Say2kt6xs/Pd88Wxr/viv9hSsr1SUds3l35WcPD0xfqRYJ4ejqycrDzX89iRiNvv52+fN2q8f/2VT1n51LFjEca3cM3+ZsZHpkZYTL1z/OGJ/uVH+SZT/yyL2RcT+22zj9OPfHpj/m1Jtbvn8l7AGz5kqX0c8lm//2ViQf1Wy9PPJwf/FxPiRwepesdgvv155o1n7ef5pLJ3/ttYTbSLb/tsb7f8v1PLvS+qf104t+oru5dq48senTa9pbnf/707emtf4hyPT0+eHIrqT1xb/vu4Gd7VcrZ/lf/hQ4/6/p1gmy//+iMh24gci4sGIOFjE/lBEPBwRh5bI/6eXH3mvaf4HW9j/10CW/1jD41+z7b/6mdKZH79v1v7Ktv+xamEuqJUc/1YaYCvrDgAAAO4UaUTsjCQdqM2n6cBA/vfye2N7OjE5Nf3EyckPzo3l7wj0RVdavdPVW3c/dKi4N1wtDxflS0X5aHHf+MvStrnywOjkxFi7k4cOt6NJ/8/8WWp3dMC6874WdC79HzrX7fd/Rw640y3Ti9ONigPYeM7i0Lka9f9L9YUk8r+SB7Yc53/oXLX+/8UKKte97rXw5U3gzrPU+b/Su4GBABvO+B86Uivv9W+KmfgmYuk6yWYJdVUzn7WyeHkDIoy0jeunuy0bZbgU0cZdorzS/9UiLlQutdxou49MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa+PfAAAA///67uRi") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) unshare(0x22020600) 1.308625106s ago: executing program 3 (id=637): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') 1.06866802s ago: executing program 1 (id=638): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2'}, 0x31) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 324.784364ms ago: executing program 4 (id=639): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f00000003c0)) 216.91303ms ago: executing program 0 (id=640): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0xd8, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x3, 0x3}, 'syz0\x00', 0x7}) ioctl$UI_DEV_CREATE(r3, 0x5501) read$FUSE(r3, &(0x7f0000000840)={0x2020}, 0x1800) 140.722847ms ago: executing program 3 (id=641): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000480)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000200)=@id, 0x10, 0x0}, 0x4000041) 0s ago: executing program 3 (id=642): io_setup(0x23, &(0x7f0000000280)=0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) kernel console output (not intermixed with test programs): active interface with an up link [ 65.312443][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.343923][ T5836] team0: Port device team_slave_0 added [ 65.352208][ T5836] team0: Port device team_slave_1 added [ 65.360032][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.386603][ T5827] hsr_slave_0: entered promiscuous mode [ 65.394146][ T5827] hsr_slave_1: entered promiscuous mode [ 65.403664][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.412014][ T5827] Cannot create hsr debugfs directory [ 65.448971][ T5828] team0: Port device team_slave_0 added [ 65.478467][ T5843] team0: Port device team_slave_0 added [ 65.486915][ T5828] team0: Port device team_slave_1 added [ 65.506591][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.515674][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.543314][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.572824][ T5843] team0: Port device team_slave_1 added [ 65.593771][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.601133][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.627305][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.657825][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.665192][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.691548][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.704286][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.711453][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.720940][ T5844] Bluetooth: hci3: command tx timeout [ 65.737463][ T5834] Bluetooth: hci0: command tx timeout [ 65.737896][ T5834] Bluetooth: hci1: command tx timeout [ 65.749532][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.777921][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.784984][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.811713][ T5834] Bluetooth: hci2: command tx timeout [ 65.813185][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.828210][ T5834] Bluetooth: hci4: command tx timeout [ 65.839053][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.846779][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.872979][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.973449][ T5836] hsr_slave_0: entered promiscuous mode [ 65.980029][ T5836] hsr_slave_1: entered promiscuous mode [ 65.986025][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.994575][ T5836] Cannot create hsr debugfs directory [ 66.055171][ T5828] hsr_slave_0: entered promiscuous mode [ 66.062649][ T5828] hsr_slave_1: entered promiscuous mode [ 66.068631][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.076616][ T5828] Cannot create hsr debugfs directory [ 66.115320][ T5843] hsr_slave_0: entered promiscuous mode [ 66.121948][ T5843] hsr_slave_1: entered promiscuous mode [ 66.127968][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.136194][ T5843] Cannot create hsr debugfs directory [ 66.175001][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.185881][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.226395][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.256002][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.357700][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.384971][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.414162][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.429111][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.545283][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.574702][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.601451][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.612510][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.626341][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.682624][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.694953][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.705538][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.716634][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.728743][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.742496][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.749817][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.775486][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.796059][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.803218][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.874022][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.884379][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.898407][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.918899][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.940641][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.947689][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.995172][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.002374][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.019167][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.026341][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.210459][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.243458][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.264382][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.304310][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.322912][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.351099][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.358235][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.372091][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.396600][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.403845][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.415849][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.423027][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.433002][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.440178][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.462852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.470011][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.505465][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.512649][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.528992][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.548605][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.577852][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.694039][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.777699][ T5837] veth0_vlan: entered promiscuous mode [ 67.797414][ T5834] Bluetooth: hci3: command tx timeout [ 67.804503][ T5846] Bluetooth: hci0: command tx timeout [ 67.804515][ T5844] Bluetooth: hci1: command tx timeout [ 67.805082][ T5837] veth1_vlan: entered promiscuous mode [ 67.846819][ T5827] veth0_vlan: entered promiscuous mode [ 67.871462][ T5846] Bluetooth: hci4: command tx timeout [ 67.876920][ T5846] Bluetooth: hci2: command tx timeout [ 67.927666][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.951466][ T5827] veth1_vlan: entered promiscuous mode [ 68.011842][ T5837] veth0_macvtap: entered promiscuous mode [ 68.022863][ T5837] veth1_macvtap: entered promiscuous mode [ 68.033274][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.057949][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.068484][ T5828] veth0_vlan: entered promiscuous mode [ 68.082019][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.098068][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.126765][ T5827] veth0_macvtap: entered promiscuous mode [ 68.154158][ T5828] veth1_vlan: entered promiscuous mode [ 68.168821][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.184582][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.195132][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.210583][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.238642][ T5827] veth1_macvtap: entered promiscuous mode [ 68.279943][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.291263][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.303042][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.321250][ T5836] veth0_vlan: entered promiscuous mode [ 68.350748][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.362318][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.374541][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.395666][ T5828] veth0_macvtap: entered promiscuous mode [ 68.413605][ T5836] veth1_vlan: entered promiscuous mode [ 68.434342][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.445387][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.457792][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.466640][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.482315][ T5828] veth1_macvtap: entered promiscuous mode [ 68.566142][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.578509][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.588536][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.600215][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.611085][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.657972][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.668719][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.682686][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.693250][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.705101][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.716526][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.723279][ T5836] veth0_macvtap: entered promiscuous mode [ 68.729193][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.749942][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.758649][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.767816][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.776667][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.788436][ T5843] veth0_vlan: entered promiscuous mode [ 68.811816][ T5836] veth1_macvtap: entered promiscuous mode [ 68.835023][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.843851][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.875742][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.891013][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.901212][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.912500][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.924030][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.934842][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.946163][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.956209][ T5843] veth1_vlan: entered promiscuous mode [ 68.980964][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.992596][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.002516][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.013592][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.023611][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.034269][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.045327][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.059070][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.067330][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.093533][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.102721][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.111739][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.120691][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.138474][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.147510][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.154809][ T5843] veth0_macvtap: entered promiscuous mode [ 69.157702][ T5843] veth1_macvtap: entered promiscuous mode [ 69.240890][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.266463][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.279395][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.290693][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.306316][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.325538][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.358446][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.369443][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.385648][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.407382][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.526365][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.562291][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.585377][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.596024][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.606404][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.617229][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.627262][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.642314][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.652304][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.663303][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.674237][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.754084][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.775140][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.786373][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.796657][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.861035][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.868909][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.881624][ T5846] Bluetooth: hci0: command tx timeout [ 69.887082][ T5846] Bluetooth: hci3: command tx timeout [ 69.893028][ T5834] Bluetooth: hci1: command tx timeout [ 69.953128][ T5846] Bluetooth: hci2: command tx timeout [ 69.958652][ T5834] Bluetooth: hci4: command tx timeout [ 69.987908][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.007227][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.138745][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.196035][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.227216][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.254786][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.427117][ T5925] loop0: detected capacity change from 0 to 128 [ 70.440647][ T5925] ======================================================= [ 70.440647][ T5925] WARNING: The mand mount option has been deprecated and [ 70.440647][ T5925] and is ignored by this kernel. Remove the mand [ 70.440647][ T5925] option from the mount to silence this warning. [ 70.440647][ T5925] ======================================================= [ 70.532971][ C0] vkms_vblank_simulate: vblank timer overrun [ 70.577424][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.577504][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.873870][ T5921] loop2: detected capacity change from 0 to 8192 [ 70.997325][ T5925] EXT4-fs (loop0): Test dummy encryption mode enabled [ 71.071357][ T5925] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.094459][ T5925] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.212398][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 71.837753][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.921580][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.955735][ T5834] Bluetooth: hci1: command tx timeout [ 71.962849][ T5844] Bluetooth: hci0: command tx timeout [ 71.973918][ T5846] Bluetooth: hci3: command tx timeout [ 72.031959][ T5844] Bluetooth: hci4: command tx timeout [ 72.038440][ T5846] Bluetooth: hci2: command tx timeout [ 72.296542][ T5925] fscrypt (loop0): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 72.310261][ T5943] fscrypt (loop0): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 72.322180][ T5944] fscrypt (loop0): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 72.923464][ T5970] loop4: detected capacity change from 0 to 1024 [ 73.031839][ T5828] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.062591][ T5970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.219168][ T5979] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 74.327632][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.431781][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.589816][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 74.649562][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.677412][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.714736][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 74.734940][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.798364][ T8] usb 2-1: config 0 descriptor?? [ 75.947810][ T8] wacom 0003:056A:0331.0001: hidraw0: USB HID v0.02 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 76.039782][ T8] usb 2-1: USB disconnect, device number 2 [ 76.415989][ T6012] loop2: detected capacity change from 0 to 128 [ 77.751226][ T6018] block device autoloading is deprecated and will be removed. [ 78.575773][ T6021] loop1: detected capacity change from 0 to 40427 [ 79.198511][ T6021] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 79.205931][ T6021] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 79.230144][ T6021] F2FS-fs (loop1): Unrecognized mount option "0xffffffffffffffff" or missing value [ 81.215567][ T6030] loop0: detected capacity change from 0 to 2048 [ 81.223334][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 81.288288][ T6032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 81.341572][ T6030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.924964][ T6036] netlink: 100 bytes leftover after parsing attributes in process `syz.2.29'. [ 82.018406][ T6040] 9pnet_fd: Insufficient options for proto=fd [ 82.068047][ T29] audit: type=1800 audit(1736045964.771:2): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 82.128964][ T25] cfg80211: failed to load regulatory.db [ 82.171779][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.408395][ T6051] loop2: detected capacity change from 0 to 512 [ 83.817596][ T6067] loop4: detected capacity change from 0 to 128 [ 84.540676][ T6073] syz.4.39: attempt to access beyond end of device [ 84.540676][ T6073] loop4: rw=2049, sector=145, nr_sectors = 168 limit=128 [ 84.594889][ T6066] syz.4.39: attempt to access beyond end of device [ 84.594889][ T6066] loop4: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 84.617804][ T6067] syz.4.39: attempt to access beyond end of device [ 84.617804][ T6067] loop4: rw=524288, sector=201, nr_sectors = 112 limit=128 [ 85.492414][ T6067] syz.4.39: attempt to access beyond end of device [ 85.492414][ T6067] loop4: rw=0, sector=201, nr_sectors = 8 limit=128 [ 85.592531][ T6067] syz.4.39: attempt to access beyond end of device [ 85.592531][ T6067] loop4: rw=0, sector=201, nr_sectors = 8 limit=128 [ 85.902420][ T5963] kworker/u8:10: attempt to access beyond end of device [ 85.902420][ T5963] loop4: rw=1, sector=177, nr_sectors = 24 limit=128 [ 87.421332][ T6096] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.963924][ T6099] loop2: detected capacity change from 0 to 512 [ 87.982148][ T6099] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.995404][ T6099] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.012548][ T6099] EXT4-fs (loop2): 1 truncate cleaned up [ 88.019213][ T6099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.032177][ T6085] loop0: detected capacity change from 0 to 40427 [ 88.231116][ T6085] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 88.238907][ T6085] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 88.288457][ T6085] F2FS-fs (loop0): invalid crc value [ 88.307142][ T6104] loop4: detected capacity change from 0 to 512 [ 88.316312][ T6104] EXT4-fs: Ignoring removed i_version option [ 88.322673][ T6104] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.337703][ T6104] ext4: Unknown parameter 'seclabel' [ 88.366049][ T6085] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.869421][ T6085] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 88.928298][ T6085] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.134108][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.147797][ T29] audit: type=1804 audit(1736045971.931:3): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.43" name="/newroot/5/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 89.197412][ T6085] netlink: 240 bytes leftover after parsing attributes in process `syz.0.43'. [ 89.221965][ T29] audit: type=1804 audit(1736045971.941:4): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.43" name="/newroot/5/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 89.443543][ T6117] loop3: detected capacity change from 0 to 512 [ 89.456946][ T6117] EXT4-fs: Ignoring removed i_version option [ 89.488230][ T6117] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.488297][ T6117] ext4: Unknown parameter 'seclabel' [ 90.769982][ T6133] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.027816][ T6139] tipc: Started in network mode [ 91.080567][ T6139] tipc: Node identity 66d88b9b29f6, cluster identity 4711 [ 91.128263][ T6145] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 91.262638][ T6139] tipc: Enabled bearer , priority 7 [ 91.412638][ T6133] ªªªªªª: renamed from syzkaller0 [ 91.698883][ T6133] tipc: Disabling bearer [ 93.994366][ T6169] loop3: detected capacity change from 0 to 128 [ 94.157023][ T6169] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.215373][ T6169] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.528622][ T6177] loop4: detected capacity change from 0 to 128 [ 94.714779][ T6180] loop2: detected capacity change from 0 to 512 [ 94.747762][ T6180] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.66: corrupted in-inode xattr: invalid ea_ino [ 94.766375][ T6180] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.66: couldn't read orphan inode 15 (err -117) [ 94.784244][ T6180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.265396][ T5836] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.866881][ T6200] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.949463][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.939351][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.006417][ T6212] loop2: detected capacity change from 0 to 512 [ 98.024188][ T6212] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.351185][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.375035][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.449629][ T6212] EXT4-fs (loop2): 1 truncate cleaned up [ 98.456335][ T6212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.496108][ T9] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 98.506452][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.600006][ T9] usb 1-1: config 0 descriptor?? [ 98.609291][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 98.867119][ T6228] netlink: 25 bytes leftover after parsing attributes in process `syz.4.79'. [ 98.880699][ T6228] gretap0: entered promiscuous mode [ 98.910910][ T6228] netlink: 5 bytes leftover after parsing attributes in process `syz.4.79'. [ 98.920856][ T6228] 0ªX¹¦Dö»: renamed from gretap0 [ 98.939153][ T6228] 0ªX¹¦Dö»: left promiscuous mode [ 98.944723][ T6228] 0ªX¹¦Dö»: entered allmulticast mode [ 99.157956][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.489467][ T6228] syz.4.79 (6228) used greatest stack depth: 18704 bytes left [ 101.570802][ T6259] loop4: detected capacity change from 0 to 16 [ 101.590434][ T5927] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.760031][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 101.791289][ T5927] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=ff.00 [ 101.845421][ T6259] erofs (device loop4): mounted with root inode @ nid 36. [ 102.157788][ T5927] usb 2-1: New USB device strings: Mfr=15, Product=0, SerialNumber=0 [ 102.216707][ T25] usb 1-1: USB disconnect, device number 2 [ 102.225983][ T5927] usb 2-1: Manufacturer: syz [ 102.289000][ T5927] usb 2-1: config 0 descriptor?? [ 102.345915][ T5927] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 102.612465][ T5927] ftdi_sio ttyUSB0: unknown device type: 0xff00 [ 102.637336][ T5927] usb 2-1: USB disconnect, device number 3 [ 102.729020][ T5927] ftdi_sio 2-1:0.0: device disconnected [ 103.744989][ T6271] netlink: 76 bytes leftover after parsing attributes in process `syz.4.91'. [ 104.995927][ T6287] loop2: detected capacity change from 0 to 512 [ 106.089884][ T6287] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.126164][ T6287] EXT4-fs (loop2): 1 truncate cleaned up [ 106.148015][ T6287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.565265][ T6276] loop1: detected capacity change from 0 to 40427 [ 106.628825][ T6276] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 106.666707][ T6276] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 106.699792][ T6276] F2FS-fs (loop1): invalid crc value [ 106.726491][ T6276] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 107.030806][ T6276] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 107.089867][ T6276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.931649][ T6307] tty tty25: ldisc open failed (-12), clearing slot 24 [ 107.958043][ T6308] tty tty25: ldisc open failed (-12), clearing slot 24 [ 108.405180][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.450355][ T6342] loop1: detected capacity change from 0 to 256 [ 111.549691][ T5927] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.099916][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 112.125035][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.196919][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.275366][ T5927] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 112.321262][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.632142][ T5927] usb 4-1: config 0 descriptor?? [ 113.332304][ T5927] lua 0003:1E7D:2C2E.0002: item 0 1 0 11 parsing failed [ 113.346609][ T5927] lua 0003:1E7D:2C2E.0002: parse failed [ 113.362519][ T5927] lua 0003:1E7D:2C2E.0002: probe with driver lua failed with error -22 [ 113.595513][ T5927] usb 4-1: USB disconnect, device number 2 [ 114.771503][ T6359] loop2: detected capacity change from 0 to 40427 [ 114.935826][ T6359] F2FS-fs (loop2): Unrecognized mount option "0xffffffffffffffff18446744073709551615" or missing value [ 115.152840][ T5844] Bluetooth: hci5: command 0x1003 tx timeout [ 115.159955][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 115.591453][ T6372] loop0: detected capacity change from 0 to 128 [ 115.764478][ T6378] syz.0.116: attempt to access beyond end of device [ 115.764478][ T6378] loop0: rw=2049, sector=145, nr_sectors = 232 limit=128 [ 116.451008][ T5959] kworker/u8:9: attempt to access beyond end of device [ 116.451008][ T5959] loop0: rw=1, sector=201, nr_sectors = 104 limit=128 [ 117.384582][ T29] audit: type=1326 audit(1736046000.181:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 117.406817][ T29] audit: type=1326 audit(1736046000.181:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 117.430526][ T29] audit: type=1326 audit(1736046000.181:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 117.452876][ T29] audit: type=1326 audit(1736046000.181:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 117.475444][ T29] audit: type=1326 audit(1736046000.181:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 117.497862][ T29] audit: type=1326 audit(1736046000.181:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 117.520071][ T29] audit: type=1326 audit(1736046000.181:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 117.543098][ T29] audit: type=1326 audit(1736046000.181:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 117.565702][ T29] audit: type=1326 audit(1736046000.181:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 117.587952][ T29] audit: type=1326 audit(1736046000.181:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 118.588363][ T6415] loop3: detected capacity change from 0 to 1024 [ 118.650333][ T6415] EXT4-fs: Ignoring removed i_version option [ 118.685287][ T6415] EXT4-fs: inline encryption not supported [ 118.732775][ T6419] loop1: detected capacity change from 0 to 128 [ 118.754402][ T6415] EXT4-fs (loop3): Test dummy encryption mode enabled [ 118.766749][ T6417] loop4: detected capacity change from 0 to 256 [ 118.773462][ T6415] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 118.880880][ T6419] syz.1.131: attempt to access beyond end of device [ 118.880880][ T6419] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 118.888212][ T6415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.943935][ T6418] syz.1.131: attempt to access beyond end of device [ 118.943935][ T6418] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 119.087215][ T6415] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 119.182230][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.219376][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.432191][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.448843][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.980363][ T9] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 119.990346][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.301309][ T9] usb 3-1: config 0 descriptor?? [ 122.543041][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.706109][ T6422] fuse: Bad value for 'fd' [ 122.742891][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.759793][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.770267][ T46] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 122.780757][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.795418][ T46] usb 5-1: config 0 descriptor?? [ 122.800715][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 122.800736][ T29] audit: type=1326 audit(1736046005.591:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 122.829769][ T29] audit: type=1326 audit(1736046005.591:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 122.852398][ T29] audit: type=1326 audit(1736046005.591:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 122.875154][ T29] audit: type=1326 audit(1736046005.591:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 122.897514][ T29] audit: type=1326 audit(1736046005.591:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 122.919948][ T29] audit: type=1326 audit(1736046005.591:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 122.942269][ T29] audit: type=1326 audit(1736046005.591:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 122.964847][ T29] audit: type=1326 audit(1736046005.591:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 122.987399][ T29] audit: type=1326 audit(1736046005.591:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 123.010022][ T29] audit: type=1326 audit(1736046005.591:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 123.300882][ T9] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -71 [ 123.324946][ T9] usb 3-1: USB disconnect, device number 2 [ 123.325131][ T46] cp2112 0003:10C4:EA90.0004: collection stack underflow [ 123.366080][ T46] cp2112 0003:10C4:EA90.0004: item 0 1 0 12 parsing failed [ 123.375097][ T46] cp2112 0003:10C4:EA90.0004: parse failed [ 123.419822][ T6466] netlink: 'syz.0.143': attribute type 1 has an invalid length. [ 123.656196][ T46] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -22 [ 123.675335][ T46] usb 5-1: USB disconnect, device number 2 [ 123.913165][ T6475] loop0: detected capacity change from 0 to 512 [ 123.957133][ T6475] EXT4-fs: Ignoring removed i_version option [ 123.994110][ T6475] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.037846][ T6475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.045136][ T6475] ext4: Unknown parameter 'seclabel' [ 125.287910][ T6496] usb usb8: usbfs: process 6496 (syz.4.148) did not claim interface 2 before use [ 127.252679][ T6510] loop4: detected capacity change from 0 to 256 [ 129.017807][ T6522] loop2: detected capacity change from 0 to 40427 [ 129.102161][ T6522] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 129.135781][ T6522] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 129.186714][ T6522] F2FS-fs (loop2): invalid crc value [ 129.221844][ T6522] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.544614][ T6522] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 129.563471][ T6522] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.599267][ C0] hrtimer: interrupt took 48387 ns [ 129.779625][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.949573][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 129.963040][ T8] usb 1-1: config 7 has an invalid interface number: 110 but max is 0 [ 130.004853][ T8] usb 1-1: config 7 has no interface number 0 [ 130.209408][ T8] usb 1-1: config 7 interface 110 has no altsetting 0 [ 130.243599][ T8] usb 1-1: New USB device found, idVendor=0421, idProduct=0088, bcdDevice=ae.31 [ 130.253151][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.262392][ T8] usb 1-1: Product: syz [ 130.267102][ T8] usb 1-1: Manufacturer: syz [ 130.273157][ T8] usb 1-1: SerialNumber: syz [ 130.501503][ T8] usb 1-1: bad CDC descriptors [ 130.515317][ T8] usb 1-1: USB disconnect, device number 3 [ 130.712172][ T6552] veth1_macvtap: mtu less than device minimum [ 133.233625][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.240414][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.278509][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.099338][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 137.130152][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 137.143608][ T8] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 137.153680][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.189612][ T8] usb 2-1: Product: syz [ 137.193834][ T8] usb 2-1: Manufacturer: syz [ 137.198456][ T8] usb 2-1: SerialNumber: syz [ 137.230355][ T8] usb 2-1: config 0 descriptor?? [ 137.261561][ T8] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 137.311587][ T8] usb 2-1: Detected FT232R [ 137.447987][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 137.812945][ T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 137.823657][ T8] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 137.862857][ T8] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 137.912507][ T8] usb 2-1: USB disconnect, device number 4 [ 137.942686][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 137.969800][ T8] ftdi_sio 2-1:0.0: device disconnected [ 138.537405][ T6624] loop1: detected capacity change from 0 to 128 [ 138.716842][ T6628] syz.1.185: attempt to access beyond end of device [ 138.716842][ T6628] loop1: rw=2049, sector=145, nr_sectors = 216 limit=128 [ 138.846633][ T6623] syz.1.185: attempt to access beyond end of device [ 138.846633][ T6623] loop1: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 139.229751][ T6631] loop1: detected capacity change from 0 to 1024 [ 139.269455][ T6631] EXT4-fs: Ignoring removed orlov option [ 139.299874][ T6631] EXT4-fs (loop1): Test dummy encryption mode enabled [ 139.339097][ T6631] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 139.392431][ T6631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.383818][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.872523][ T6646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.191'. [ 140.905028][ T6646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.191'. [ 144.636397][ T6674] loop0: detected capacity change from 0 to 128 [ 144.914023][ T6674] syz.0.197: attempt to access beyond end of device [ 144.914023][ T6674] loop0: rw=2049, sector=145, nr_sectors = 752 limit=128 [ 145.038410][ T6673] syz.0.197: attempt to access beyond end of device [ 145.038410][ T6673] loop0: rw=524288, sector=145, nr_sectors = 152 limit=128 [ 145.103926][ T6673] syz.0.197: attempt to access beyond end of device [ 145.103926][ T6673] loop0: rw=524288, sector=305, nr_sectors = 64 limit=128 [ 145.600020][ T6691] loop4: detected capacity change from 0 to 256 [ 145.771291][ T6691] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 145.949718][ T6691] loop4: detected capacity change from 0 to 512 [ 146.081543][ T6691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.094678][ T6691] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.114161][ T6691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.667406][ T6704] loop3: detected capacity change from 0 to 512 [ 148.699536][ T6704] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 148.759869][ T6704] EXT4-fs (loop3): 1 truncate cleaned up [ 148.767592][ T6704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.732462][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.021159][ T6736] syzkaller0: entered promiscuous mode [ 151.045646][ T6736] syzkaller0: entered allmulticast mode [ 153.554858][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 153.554879][ T29] audit: type=1326 audit(1736046036.341:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 153.585108][ T29] audit: type=1326 audit(1736046036.341:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 153.614861][ T29] audit: type=1326 audit(1736046036.391:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 153.637405][ T29] audit: type=1326 audit(1736046036.391:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 153.687768][ T29] audit: type=1326 audit(1736046036.391:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 153.746973][ T29] audit: type=1326 audit(1736046036.391:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 153.799461][ T29] audit: type=1326 audit(1736046036.391:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 153.830884][ T29] audit: type=1326 audit(1736046036.391:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 153.860736][ T29] audit: type=1326 audit(1736046036.391:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 153.966539][ T29] audit: type=1326 audit(1736046036.391:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3f3d85d29 code=0x7ffc0000 [ 154.955107][ T6781] loop2: detected capacity change from 0 to 512 [ 154.962339][ T6781] EXT4-fs: Ignoring removed i_version option [ 154.976344][ T6781] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.986503][ T6781] ext4: Unknown parameter 'seclabel' [ 156.092761][ T6795] pim6reg1: entered promiscuous mode [ 156.098131][ T6795] pim6reg1: entered allmulticast mode [ 158.781781][ T6825] loop0: detected capacity change from 0 to 512 [ 158.789954][ T6825] EXT4-fs: Ignoring removed i_version option [ 158.797192][ T6825] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.874718][ T6825] ext4: Unknown parameter 'seclabel' [ 161.912235][ T6833] ªªªªªª: renamed from vlan0 (while UP) [ 162.338049][ T6876] wg2: entered promiscuous mode [ 162.386376][ T6876] wg2: entered allmulticast mode [ 163.226628][ T6882] pim6reg1: entered promiscuous mode [ 163.263514][ T6882] pim6reg1: entered allmulticast mode [ 163.945405][ T6901] syz.1.272 (6901) used obsolete PPPIOCDETACH ioctl [ 171.093857][ T6968] veth1_macvtap: left promiscuous mode [ 171.099541][ T6968] macsec0: entered promiscuous mode [ 174.766782][ T7040] loop1: detected capacity change from 0 to 256 [ 175.729916][ T7051] loop2: detected capacity change from 0 to 2048 [ 176.151728][ T7051] Alternate GPT is invalid, using primary GPT. [ 176.492088][ T7051] loop2: p2 p3 p7 [ 176.688697][ T5205] Alternate GPT is invalid, using primary GPT. [ 176.695376][ T5205] loop2: p2 p3 p7 [ 177.802614][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 177.871913][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 177.885217][ T5832] udevd[5832]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 177.900617][ T6124] udevd[6124]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 177.979438][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 177.992990][ T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=502d, bcdDevice= 0.00 [ 178.002421][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.091345][ T9] usb 2-1: config 0 descriptor?? [ 178.274324][ T7076] loop3: detected capacity change from 0 to 256 [ 178.320441][ T7076] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 178.935810][ T7078] loop2: detected capacity change from 0 to 512 [ 178.996935][ T7078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.074286][ T7078] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.161945][ T9] hid-generic 0003:18D1:502D.0005: hidraw0: USB HID v0.02 Device [HID 18d1:502d] on usb-dummy_hcd.1-1/input0 [ 179.351214][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.369741][ T46] usb 2-1: USB disconnect, device number 5 [ 180.558980][ T7092] Zero length message leads to an empty skb [ 181.273714][ T7090] loop2: detected capacity change from 0 to 2048 [ 181.759339][ T5883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 181.874634][ T7107] loop3: detected capacity change from 0 to 16 [ 181.910144][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 181.919192][ T7107] erofs (device loop3): mounted with root inode @ nid 36. [ 181.934890][ T5883] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.036146][ T5883] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.046671][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 182.053830][ T5883] usb 1-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 182.062962][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.082281][ T5883] usb 1-1: config 0 descriptor?? [ 182.091669][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 182.129162][ T7109] tipc: Cannot configure node identity twice [ 184.664855][ T7135] loop2: detected capacity change from 0 to 512 [ 184.910563][ T7135] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 185.025858][ T7135] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 185.028347][ T7144] loop1: detected capacity change from 0 to 4096 [ 185.034543][ T7135] System zones: [ 185.062685][ T5883] usbhid 1-1:0.0: can't add hid device: -71 [ 185.069394][ T7135] 0-1, 15-15, 18-18, 34-34 [ 185.077608][ T7135] EXT4-fs (loop2): orphan cleanup on readonly fs [ 185.084561][ T7135] __quota_error: 17 callbacks suppressed [ 185.084578][ T7135] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 185.101255][ T7135] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 185.127547][ T5883] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 185.149642][ T7144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.180820][ T5883] usb 1-1: USB disconnect, device number 4 [ 185.189932][ T7135] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 185.219972][ T7135] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.353: bad orphan inode 16 [ 185.284836][ T7135] EXT4-fs (loop2): Remounting filesystem read-only [ 185.309655][ T7135] ext4_test_bit(bit=15, block=18) = 1 [ 185.327265][ T7135] is_bad_inode(inode)=0 [ 185.338114][ T7135] NEXT_ORPHAN(inode)=0 [ 185.357956][ T7150] loop0: detected capacity change from 0 to 512 [ 185.401323][ T7135] max_ino=32 [ 185.423589][ T7135] i_nlink=2 [ 185.910976][ T7135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.938762][ T7135] fscrypt (loop2, inode 16): Error -5 getting encryption context [ 185.987664][ T7156] loop4: detected capacity change from 0 to 2048 [ 187.448323][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 187.600704][ T7150] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.356: corrupted in-inode xattr: invalid ea_ino [ 187.617730][ T7150] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.356: couldn't read orphan inode 15 (err -117) [ 187.634038][ T7150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.649603][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 187.656731][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 187.664886][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 187.707515][ T7156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.980473][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.002012][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.044547][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.099097][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.247180][ T29] audit: type=1326 audit(1736046071.031:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 188.285198][ T7173] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.300718][ T29] audit: type=1326 audit(1736046071.031:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 188.326909][ T29] audit: type=1326 audit(1736046071.031:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 188.460352][ T29] audit: type=1326 audit(1736046071.031:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 189.507821][ T29] audit: type=1326 audit(1736046071.031:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 190.286210][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.369425][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.390826][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.420874][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.457042][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 190.507273][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.621734][ T6649] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.731947][ T7194] veth0: entered promiscuous mode [ 190.741747][ T7192] veth0: left promiscuous mode [ 190.835280][ T6649] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.857901][ T7197] loop4: detected capacity change from 0 to 256 [ 190.871977][ T7197] vfat: Bad value for 'time_offset' [ 191.123027][ T6649] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.201112][ T6649] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.676869][ T7185] chnl_net:caif_netlink_parms(): no params data found [ 192.793854][ T5846] Bluetooth: hci3: command tx timeout [ 193.942608][ T7229] loop1: detected capacity change from 0 to 512 [ 193.982156][ T7229] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 194.137124][ T6649] bridge_slave_1: left allmulticast mode [ 194.143569][ T6649] bridge_slave_1: left promiscuous mode [ 194.151046][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.348971][ T7227] loop3: detected capacity change from 0 to 512 [ 194.357922][ T7227] ext4: Unknown parameter 'nouser_xattr' [ 194.682501][ T6649] bridge_slave_0: left allmulticast mode [ 194.688220][ T6649] bridge_slave_0: left promiscuous mode [ 194.695474][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.791382][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.797740][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.837591][ T5846] Bluetooth: hci3: command tx timeout [ 195.106749][ T7250] loop4: detected capacity change from 0 to 1024 [ 195.129930][ T7250] EXT4-fs: Ignoring removed bh option [ 195.140330][ T7250] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.158699][ T7250] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.214910][ T7250] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 195.475305][ T7250] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 195.519823][ T7250] EXT4-fs (loop4): mount failed [ 196.305341][ T7265] loop4: detected capacity change from 0 to 256 [ 196.314525][ T7265] exfat: Deprecated parameter 'utf8' [ 196.326060][ T7265] exfat: Deprecated parameter 'namecase' [ 196.333973][ T7265] exfat: Deprecated parameter 'utf8' [ 196.434849][ T7265] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 196.528270][ T6649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.550828][ T6649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.568203][ T6649] bond0 (unregistering): Released all slaves [ 196.697679][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.722069][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.781762][ T7185] bridge_slave_0: entered allmulticast mode [ 197.104151][ T5846] Bluetooth: hci3: command tx timeout [ 197.394768][ T7185] bridge_slave_0: entered promiscuous mode [ 197.883258][ T7275] loop0: detected capacity change from 0 to 128 [ 197.920259][ T7275] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.932961][ T7275] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.950839][ T29] audit: type=1326 audit(1736046080.741:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 197.979036][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.991676][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.006111][ T29] audit: type=1326 audit(1736046080.751:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 198.042115][ T7185] bridge_slave_1: entered allmulticast mode [ 198.060683][ T7185] bridge_slave_1: entered promiscuous mode [ 198.086244][ T6649] tipc: Left network mode [ 198.113742][ T29] audit: type=1326 audit(1736046080.751:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 198.191923][ T29] audit: type=1326 audit(1736046080.751:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 198.243231][ T29] audit: type=1326 audit(1736046080.751:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 198.297849][ T29] audit: type=1326 audit(1736046080.751:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 198.329417][ T29] audit: type=1326 audit(1736046080.751:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbf2e9847df code=0x7ffc0000 [ 198.406295][ T29] audit: type=1326 audit(1736046080.751:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 198.454435][ T29] audit: type=1326 audit(1736046080.751:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 198.484050][ T5828] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.154891][ T5846] Bluetooth: hci3: command tx timeout [ 199.266145][ T7185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.569611][ T7309] loop4: detected capacity change from 0 to 512 [ 199.603822][ T7309] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.402: casefold flag without casefold feature [ 199.636602][ T7309] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.402: couldn't read orphan inode 15 (err -117) [ 199.659565][ T7309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.678222][ T7305] wg2: entered promiscuous mode [ 199.683755][ T7305] wg2: entered allmulticast mode [ 199.876024][ T7185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.696257][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.996822][ T6649] hsr_slave_0: left promiscuous mode [ 202.179601][ T6649] hsr_slave_1: left promiscuous mode [ 202.303503][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.530398][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.583910][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.612337][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.656902][ T6649] veth1_macvtap: left promiscuous mode [ 202.666421][ T6649] veth0_macvtap: left promiscuous mode [ 202.682805][ T6649] veth1_vlan: left promiscuous mode [ 202.688639][ T6649] veth0_vlan: left promiscuous mode [ 202.733563][ T7344] loop4: detected capacity change from 0 to 512 [ 202.740812][ T7344] EXT4-fs: Ignoring removed i_version option [ 202.746855][ T7344] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.766983][ T7344] ext4: Unknown parameter 'seclabel' [ 202.847543][ T7342] loop0: detected capacity change from 0 to 256 [ 203.044194][ T7342] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1d0c1f25, utbl_chksum : 0xe619d30d) [ 204.222315][ T7350] overlayfs: failed to resolve './file2': -2 [ 205.022795][ T6649] team0 (unregistering): Port device team_slave_1 removed [ 205.073967][ T6649] team0 (unregistering): Port device team_slave_0 removed [ 205.678978][ T7337] wg2: left promiscuous mode [ 205.686225][ T7337] wg2: left allmulticast mode [ 205.701299][ T7338] wg2: entered promiscuous mode [ 205.706318][ T7338] wg2: entered allmulticast mode [ 205.744640][ T7185] team0: Port device team_slave_0 added [ 205.836451][ T7185] team0: Port device team_slave_1 added [ 206.164845][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.188009][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.268629][ T7185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.967139][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.997369][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.025773][ T7185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.437881][ T7369] loop1: detected capacity change from 0 to 2048 [ 207.906415][ T7375] loop0: detected capacity change from 0 to 128 [ 207.919060][ T7369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.039780][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 208.039800][ T29] audit: type=1800 audit(1736046090.827:153): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.414" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 208.096074][ T7369] EXT4-fs error (device loop1): ext4_search_dir:1505: inode #2: block 16: comm syz.1.414: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 208.569058][ T7385] loop4: detected capacity change from 0 to 512 [ 208.586096][ T7385] EXT4-fs: Ignoring removed i_version option [ 208.593643][ T7385] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.616999][ T7385] ext4: Unknown parameter 'seclabel' [ 208.883910][ T7387] loop0: detected capacity change from 0 to 8192 [ 209.528838][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.531341][ T29] audit: type=1804 audit(1736046092.317:154): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.419" name="/newroot/68/bus/bus" dev="loop0" ino=1048606 res=1 errno=0 [ 209.573990][ T29] audit: type=1804 audit(1736046092.357:155): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.419" name="/newroot/68/bus/bus" dev="loop0" ino=1048606 res=1 errno=0 [ 209.655224][ T7392] loop1: detected capacity change from 0 to 512 [ 209.721868][ T7392] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.420: casefold flag without casefold feature [ 209.749804][ T7392] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.420: couldn't read orphan inode 15 (err -117) [ 209.775225][ T7392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.294715][ T7402] overlayfs: missing 'workdir' [ 211.764539][ T7406] loop0: detected capacity change from 0 to 128 [ 211.934582][ T7407] syz.0.422: attempt to access beyond end of device [ 211.934582][ T7407] loop0: rw=2049, sector=145, nr_sectors = 560 limit=128 [ 211.976465][ T7406] syz.0.422: attempt to access beyond end of device [ 211.976465][ T7406] loop0: rw=524288, sector=249, nr_sectors = 88 limit=128 [ 212.001713][ T7406] syz.0.422: attempt to access beyond end of device [ 212.001713][ T7406] loop0: rw=524288, sector=345, nr_sectors = 160 limit=128 [ 212.032368][ T7406] syz.0.422: attempt to access beyond end of device [ 212.032368][ T7406] loop0: rw=524288, sector=505, nr_sectors = 120 limit=128 [ 212.054428][ T7406] syz.0.422: attempt to access beyond end of device [ 212.054428][ T7406] loop0: rw=524288, sector=633, nr_sectors = 72 limit=128 [ 212.074924][ T7406] syz.0.422: attempt to access beyond end of device [ 212.074924][ T7406] loop0: rw=0, sector=249, nr_sectors = 8 limit=128 [ 212.097119][ T7406] syz.0.422: attempt to access beyond end of device [ 212.097119][ T7406] loop0: rw=0, sector=249, nr_sectors = 8 limit=128 [ 212.161713][ T7406] syz.0.422: attempt to access beyond end of device [ 212.161713][ T7406] loop0: rw=0, sector=249, nr_sectors = 8 limit=128 [ 212.178028][ T7406] syz.0.422: attempt to access beyond end of device [ 212.178028][ T7406] loop0: rw=0, sector=249, nr_sectors = 8 limit=128 [ 212.307123][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.333389][ T63] kworker/u8:4: attempt to access beyond end of device [ 212.333389][ T63] loop0: rw=1, sector=233, nr_sectors = 16 limit=128 [ 212.795823][ T7416] loop0: detected capacity change from 0 to 512 [ 212.856887][ T7416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 212.875279][ T7416] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.899057][ T7416] overlayfs: conflicting lowerdir path [ 215.264477][ T7185] hsr_slave_0: entered promiscuous mode [ 215.419041][ T7185] hsr_slave_1: entered promiscuous mode [ 215.432944][ T7435] loop3: detected capacity change from 0 to 8192 [ 215.636696][ T7449] loop4: detected capacity change from 0 to 512 [ 215.644324][ T7449] EXT4-fs: Ignoring removed i_version option [ 215.650698][ T7449] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.657301][ T7449] ext4: Unknown parameter 'seclabel' [ 216.650036][ T29] audit: type=1326 audit(1736046099.407:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 216.899349][ T29] audit: type=1326 audit(1736046099.407:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 217.170079][ T29] audit: type=1326 audit(1736046099.407:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 217.223950][ T29] audit: type=1326 audit(1736046328.417:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 217.313951][ T29] audit: type=1326 audit(1736046328.417:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 217.402637][ T7185] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.412759][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 217.476976][ T7185] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.519913][ T7473] loop0: detected capacity change from 0 to 128 [ 217.543285][ T7473] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.584520][ T7185] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.606022][ T7473] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.625645][ T7465] wg2: entered promiscuous mode [ 217.630740][ T7465] wg2: entered allmulticast mode [ 217.683690][ T7185] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.749392][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 217.936825][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.962028][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.031514][ T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 218.069977][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.108436][ T8] usb 4-1: config 0 descriptor?? [ 218.143447][ T7185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.201924][ T7185] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.308982][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.316233][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.413818][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.422245][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.541301][ T8] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 218.558910][ T8] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 218.580167][ T8] isku 0003:1E7D:319C.0006: item fetching failed at offset 2/7 [ 218.588270][ T8] isku 0003:1E7D:319C.0006: parse failed [ 218.605734][ T8] isku 0003:1E7D:319C.0006: probe with driver isku failed with error -22 [ 218.752316][ T8] usb 4-1: USB disconnect, device number 3 [ 218.876096][ T7185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.944760][ T5828] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.040495][ T7185] veth0_vlan: entered promiscuous mode [ 220.269125][ T7185] veth1_vlan: entered promiscuous mode [ 220.704368][ T7529] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 220.724265][ T7185] veth0_macvtap: entered promiscuous mode [ 220.731918][ T7529] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 220.769949][ T7185] veth1_macvtap: entered promiscuous mode [ 220.778241][ T7529] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 220.822102][ T7529] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 220.869957][ T7185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.906660][ T7185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.953614][ T7185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.965041][ T7185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.975445][ T7185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.986452][ T7185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.986820][ T7538] loop3: detected capacity change from 0 to 512 [ 220.996763][ T7185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.014682][ T7538] EXT4-fs: Ignoring removed i_version option [ 221.016075][ T7185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.032898][ T7538] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.035680][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.055397][ T7538] ext4: Unknown parameter 'seclabel' [ 221.064999][ T7185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.067097][ T7529] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.080036][ T7185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.089423][ T7529] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 221.092918][ T7185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.118521][ T7185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.128483][ T7185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.139109][ T7185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.149101][ T7185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.160058][ T7185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.171326][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.181247][ T7185] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.190108][ T7185] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.198820][ T7185] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.207591][ T7185] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.283951][ T7529] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 221.293345][ T7529] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 221.340776][ T7529] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 221.346996][ T7529] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 221.368062][ T7529] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 221.940020][ T5829] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 221.958884][ T6649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.003271][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.003556][ T6649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.029164][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.099374][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 222.116677][ T5829] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 222.130498][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.204584][ T5829] usb 2-1: Product: syz [ 222.208822][ T5829] usb 2-1: Manufacturer: syz [ 222.228535][ T5829] usb 2-1: SerialNumber: syz [ 222.263294][ T7555] syz.3.445 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 222.467916][ T5829] r8152-cfgselector 2-1: Unknown version 0x0000 [ 222.474333][ T5829] r8152-cfgselector 2-1: config 0 descriptor?? [ 222.512893][ T7561] loop0: detected capacity change from 0 to 128 [ 222.519487][ T7562] tipc: Started in network mode [ 222.524421][ T7562] tipc: Node identity 566433638ea8, cluster identity 4711 [ 222.541888][ T7562] tipc: Enabled bearer , priority 0 [ 222.658088][ T7565] loop3: detected capacity change from 0 to 16 [ 222.705629][ T7565] erofs (device loop3): mounted with root inode @ nid 36. [ 222.830471][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 222.836919][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 223.302255][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 223.319201][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 223.419719][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 223.456046][ T7561] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.470443][ T7561] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.545601][ T9] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 223.546475][ T7562] syzkaller0: entered promiscuous mode [ 223.559912][ T7562] syzkaller0: entered allmulticast mode [ 223.566066][ T7562] tipc: Resetting bearer [ 223.602685][ T7558] tipc: Resetting bearer [ 223.608475][ T7561] fscrypt (loop0, inode 12): Unsupported encryption flags (0x08) [ 223.720548][ T5828] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.746927][ T46] tipc: Node number set to 3637261155 [ 226.235922][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 226.242173][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 226.248227][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 226.254383][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 226.260496][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 226.491856][ T7597] loop0: detected capacity change from 0 to 1024 [ 226.527234][ T7597] EXT4-fs: Ignoring removed orlov option [ 226.567222][ T7597] EXT4-fs: Ignoring removed nobh option [ 226.601147][ T7597] EXT4-fs (loop0): blocks per group (1280) and clusters per group (8192) inconsistent [ 226.641424][ T7597] binder: 7596:7597 ioctl 400c620e 0 returned -14 [ 226.769301][ T7599] loop5: detected capacity change from 0 to 256 [ 226.824555][ T7599] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 227.049527][ T7599] loop5: detected capacity change from 0 to 512 [ 227.198203][ T7599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.211453][ T7599] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.233747][ T7599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.277084][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.750073][ T7607] loop5: detected capacity change from 0 to 512 [ 228.757023][ T7607] EXT4-fs: Ignoring removed i_version option [ 228.763209][ T7607] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.770630][ T7607] ext4: Unknown parameter 'seclabel' [ 229.875573][ T29] audit: type=1326 audit(1736046341.657:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833f85d29 code=0x7ffc0000 [ 229.898336][ T29] audit: type=1326 audit(1736046341.687:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9833f85d29 code=0x7ffc0000 [ 229.920771][ T29] audit: type=1326 audit(1736046341.687:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833f85d29 code=0x7ffc0000 [ 229.943568][ T29] audit: type=1326 audit(1736046341.687:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833f85d29 code=0x7ffc0000 [ 229.966134][ T29] audit: type=1326 audit(1736046341.687:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f9833f85d29 code=0x7ffc0000 [ 229.988689][ T29] audit: type=1326 audit(1736046341.687:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833f85d29 code=0x7ffc0000 [ 230.011170][ T29] audit: type=1326 audit(1736046341.687:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9833f85d29 code=0x7ffc0000 [ 230.033531][ T29] audit: type=1326 audit(1736046341.687:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833f85d29 code=0x7ffc0000 [ 230.056015][ T29] audit: type=1326 audit(1736046341.687:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f9833f85d29 code=0x7ffc0000 [ 230.078514][ T29] audit: type=1326 audit(1736046341.687:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.5.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833f85d29 code=0x7ffc0000 [ 230.775111][ T7558] tipc: Disabling bearer [ 231.495338][ T7636] loop4: detected capacity change from 0 to 1024 [ 231.502930][ T7636] ext4: Unknown parameter 'noacl' [ 231.546694][ T7629] loop5: detected capacity change from 0 to 40427 [ 231.563659][ T7629] F2FS-fs (loop5): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 231.573549][ T7629] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 231.594933][ T7629] F2FS-fs (loop5): invalid crc value [ 231.615214][ T7629] F2FS-fs (loop5): Found nat_bits in checkpoint [ 231.689371][ T5829] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 231.758847][ T7629] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 231.767789][ T7629] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 231.840306][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 231.868498][ T5829] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.895480][ T5829] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.934801][ T5829] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.952147][ T5829] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 232.142852][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.153367][ T5829] usb 2-1: config 0 descriptor?? [ 232.301877][ T7185] syz-executor: attempt to access beyond end of device [ 232.301877][ T7185] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 232.332523][ T7659] loop0: detected capacity change from 0 to 512 [ 232.376572][ T7185] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 232.405199][ T7659] EXT4-fs: Ignoring removed i_version option [ 232.466491][ T7659] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.480797][ T7659] ext4: Unknown parameter 'seclabel' [ 232.745334][ T5829] hid-multitouch 0003:1FD2:6007.0007: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 233.383425][ T5829] usb 2-1: USB disconnect, device number 7 [ 233.629516][ T46] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 234.534034][ T7685] wg2: left allmulticast mode [ 235.034256][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.074594][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.101633][ T46] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 235.136651][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.610782][ T46] usb 6-1: config 0 descriptor?? [ 235.649870][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 235.718931][ T7691] loop1: detected capacity change from 0 to 512 [ 235.991524][ T46] usbhid 6-1:0.0: can't add hid device: -71 [ 235.997583][ T46] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 236.041070][ T7691] __quota_error: 305 callbacks suppressed [ 236.041090][ T7691] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 236.089526][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.100544][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 236.107043][ T7691] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 236.107533][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 236.131038][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.141028][ T9] usb 4-1: config 0 descriptor?? [ 236.147641][ T46] usb 6-1: USB disconnect, device number 2 [ 236.203627][ T7691] EXT4-fs (loop1): mount failed [ 238.534337][ T7730] ip_tunnel: non-ECT from 172.30.0.2 with TOS=0x2 [ 238.550910][ T7730] loop1: detected capacity change from 0 to 512 [ 239.953864][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 240.945240][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 241.885014][ T7730] EXT4-fs: error -4 creating inode table initialization thread [ 241.893289][ T7730] EXT4-fs (loop1): mount failed [ 241.953869][ T9] usb 4-1: USB disconnect, device number 4 [ 242.398448][ T7740] loop3: detected capacity change from 0 to 512 [ 242.415290][ T7728] wg2: left promiscuous mode [ 242.420139][ T7728] wg2: left allmulticast mode [ 242.565003][ T7740] EXT4-fs: Ignoring removed i_version option [ 242.571164][ T7740] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.577712][ T7740] ext4: Unknown parameter 'seclabel' [ 242.649484][ T7727] wg2: entered promiscuous mode [ 242.654409][ T7727] wg2: entered allmulticast mode [ 245.149641][ T46] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 245.319522][ T46] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 245.460055][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.575974][ T46] usb 2-1: config 0 descriptor?? [ 245.694508][ T29] audit: type=1326 audit(1736046357.487:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 245.788025][ T29] audit: type=1326 audit(1736046357.537:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 245.956928][ T29] audit: type=1326 audit(1736046357.547:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 246.007717][ T29] audit: type=1326 audit(1736046357.547:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 246.079361][ T29] audit: type=1326 audit(1736046357.547:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 246.159495][ T5829] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 246.170495][ T29] audit: type=1326 audit(1736046357.547:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 246.259511][ T29] audit: type=1326 audit(1736046357.547:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 246.309357][ T29] audit: type=1326 audit(1736046357.547:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 246.352793][ T5829] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.369426][ T5829] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.412028][ T29] audit: type=1326 audit(1736046357.547:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 246.450657][ T5829] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 246.460748][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.468845][ T5829] usb 1-1: SerialNumber: syz [ 246.504435][ T29] audit: type=1326 audit(1736046357.547:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 246.756458][ T5829] usb 1-1: 0:2 : does not exist [ 246.763560][ T5829] usb 1-1: unit 5 not found! [ 247.038373][ T5829] usb 1-1: USB disconnect, device number 5 [ 247.815062][ T7796] loop5: detected capacity change from 0 to 256 [ 247.863074][ T7775] loop4: detected capacity change from 0 to 40427 [ 247.892519][ T7775] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 247.899470][ T7775] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 247.962893][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.002201][ T7775] F2FS-fs (loop4): Found nat_bits in checkpoint [ 248.038308][ T7796] FAT-fs (loop5): Directory bread(block 64) failed [ 248.069381][ T7796] FAT-fs (loop5): Directory bread(block 65) failed [ 248.109736][ T7796] FAT-fs (loop5): Directory bread(block 66) failed [ 248.117525][ T7796] FAT-fs (loop5): Directory bread(block 67) failed [ 248.135732][ T7796] FAT-fs (loop5): Directory bread(block 68) failed [ 248.155612][ T7775] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 248.168801][ T7796] FAT-fs (loop5): Directory bread(block 69) failed [ 248.219463][ T7775] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 248.339676][ T7796] FAT-fs (loop5): Directory bread(block 70) failed [ 248.346275][ T7796] FAT-fs (loop5): Directory bread(block 71) failed [ 248.394020][ T7796] FAT-fs (loop5): Directory bread(block 72) failed [ 248.401046][ T7796] FAT-fs (loop5): Directory bread(block 73) failed [ 249.290615][ T7812] xt_TCPMSS: Only works on TCP SYN packets [ 249.307390][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 249.313795][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 249.567920][ T46] usb 2-1: USB disconnect, device number 8 [ 249.599658][ T7817] loop0: detected capacity change from 0 to 512 [ 249.606627][ T7817] EXT4-fs: Ignoring removed i_version option [ 249.866393][ T7817] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.938290][ T7817] ext4: Unknown parameter 'seclabel' [ 251.152920][ T5843] syz-executor: attempt to access beyond end of device [ 251.152920][ T5843] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 251.180137][ T5843] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 251.982046][ T5843] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 252.164080][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 252.164100][ T29] audit: type=1326 audit(1736046363.957:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 252.197080][ T29] audit: type=1326 audit(1736046363.997:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 252.279424][ T29] audit: type=1326 audit(1736046363.997:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 252.314770][ T29] audit: type=1326 audit(1736046363.997:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 252.337340][ T29] audit: type=1326 audit(1736046363.997:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 252.359833][ T29] audit: type=1326 audit(1736046363.997:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 252.382449][ T29] audit: type=1326 audit(1736046364.037:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 252.405005][ T29] audit: type=1326 audit(1736046364.037:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 252.428051][ T29] audit: type=1326 audit(1736046364.037:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 252.451104][ T29] audit: type=1326 audit(1736046364.037:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 252.779431][ T8] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 252.966560][ T7853] 9pnet_fd: Insufficient options for proto=fd [ 253.563340][ T7853] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.569542][ T7853] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.575578][ T7853] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.583103][ T7853] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 253.589180][ T7853] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.640981][ T8] usb 6-1: config 144 has an invalid descriptor of length 0, skipping remainder of the config [ 253.651654][ T8] usb 6-1: config 144 has 0 interfaces, different from the descriptor's value: 1 [ 253.728489][ T8] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 253.738360][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.746634][ T8] usb 6-1: Product: syz [ 253.751221][ T8] usb 6-1: Manufacturer: syz [ 253.755848][ T8] usb 6-1: SerialNumber: syz [ 253.826884][ T7857] loop0: detected capacity change from 0 to 512 [ 253.985125][ T7857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.054803][ T7857] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.919634][ T5911] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 254.925362][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.095643][ T5911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.104558][ T7881] loop3: detected capacity change from 0 to 512 [ 255.107557][ T5911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.143370][ T7881] EXT4-fs: Ignoring removed i_version option [ 255.169371][ T7881] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.182553][ T5911] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 255.186393][ T7881] ext4: Unknown parameter 'seclabel' [ 255.196114][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 255.394321][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 255.404520][ T5911] usb 5-1: SerialNumber: syz [ 255.728999][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 255.735440][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 255.745360][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 255.751643][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 255.964765][ T5911] usb 5-1: 0:2 : does not exist [ 256.000029][ T7893] loop0: detected capacity change from 0 to 1024 [ 256.044661][ T25] usb 6-1: USB disconnect, device number 3 [ 256.064867][ T7893] EXT4-fs: Ignoring removed i_version option [ 256.099450][ T5911] usb 5-1: USB disconnect, device number 3 [ 256.105518][ T7893] EXT4-fs: inline encryption not supported [ 256.115414][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.122365][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.224493][ T7893] EXT4-fs (loop0): Test dummy encryption mode enabled [ 256.274079][ T7893] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 256.735894][ T7893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.513279][ T7906] loop3: detected capacity change from 0 to 131072 [ 257.566929][ T7906] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 257.575693][ T7906] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 257.589083][ T6124] udevd[6124]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.606100][ T7906] F2FS-fs (loop3): Unrecognized mount option "GPL" or missing value [ 257.682641][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 257.682658][ T29] audit: type=1326 audit(1736046369.477:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 257.898404][ T29] audit: type=1326 audit(1736046369.517:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 257.999099][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.064307][ T29] audit: type=1326 audit(1736046369.517:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 258.126605][ T29] audit: type=1326 audit(1736046369.567:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 258.148956][ T29] audit: type=1326 audit(1736046369.567:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 258.199383][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 258.483455][ T7922] wg2: left promiscuous mode [ 258.488203][ T7922] wg2: left allmulticast mode [ 258.546328][ T29] audit: type=1326 audit(1736046370.317:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 258.593251][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 258.619796][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.683015][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.763760][ T29] audit: type=1326 audit(1736046370.377:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 258.804668][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 258.902111][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.990439][ T46] usb 2-1: config 0 descriptor?? [ 259.009157][ T29] audit: type=1326 audit(1736046370.377:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 259.199055][ T29] audit: type=1326 audit(1736046370.377:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 259.351016][ T29] audit: type=1326 audit(1736046370.377:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 259.488294][ T46] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 259.535935][ T46] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 259.579525][ T46] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 259.609358][ T46] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 259.650159][ T46] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 259.680043][ T46] appleir 0003:05AC:8241.0008: No inputs registered, leaving [ 259.774576][ T46] appleir 0003:05AC:8241.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 259.889475][ T46] usb 2-1: USB disconnect, device number 9 [ 260.732444][ T7952] qnx6: Unknown parameter 'qdisc_dequeue' [ 260.790329][ T7963] loop0: detected capacity change from 0 to 512 [ 260.816219][ T7963] EXT4-fs: Ignoring removed i_version option [ 260.848769][ T7963] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.874325][ T7963] ext4: Unknown parameter 'seclabel' [ 263.106928][ T8004] loop4: detected capacity change from 0 to 512 [ 263.339065][ T8004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.352676][ T8004] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.785561][ T7994] loop1: detected capacity change from 0 to 8192 [ 264.048598][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 264.048615][ T29] audit: type=1804 audit(1736046375.837:541): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.528" name="/newroot/115/bus/bus" dev="loop1" ino=1048613 res=1 errno=0 [ 264.225250][ T29] audit: type=1804 audit(1736046375.867:542): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.528" name="/newroot/115/bus/bus" dev="loop1" ino=1048613 res=1 errno=0 [ 264.936375][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.144363][ T8027] loop1: detected capacity change from 0 to 256 [ 265.283199][ T8027] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 266.801204][ T8040] loop4: detected capacity change from 0 to 512 [ 266.812018][ T8040] ext4: Unknown parameter 'fowner<00000000000000000000' [ 268.926582][ T8045] loop3: detected capacity change from 0 to 40427 [ 268.986935][ T8045] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 269.020957][ T8045] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 269.064647][ T8045] F2FS-fs (loop3): invalid crc value [ 269.082236][ T8045] F2FS-fs (loop3): Found nat_bits in checkpoint [ 269.328799][ T8081] loop4: detected capacity change from 0 to 128 [ 269.356901][ T8045] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 269.423361][ T8045] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 271.801620][ T29] audit: type=1326 audit(1736046383.517:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.5.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833f85d29 code=0x7ffc0000 [ 271.865736][ T29] audit: type=1326 audit(1736046383.517:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.5.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f9833f85d29 code=0x7ffc0000 [ 271.912612][ T29] audit: type=1326 audit(1736046383.517:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.5.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833f85d29 code=0x7ffc0000 [ 272.061526][ T5836] syz-executor: attempt to access beyond end of device [ 272.061526][ T5836] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 272.082794][ T5836] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 272.678778][ T8120] loop5: detected capacity change from 0 to 512 [ 273.152447][ T8118] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.158758][ T8118] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.165168][ T8118] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.171278][ T8118] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 273.178601][ T8118] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.387191][ T8120] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.550: casefold flag without casefold feature [ 273.421776][ T8120] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.550: couldn't read orphan inode 15 (err -117) [ 273.437453][ T8120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.731964][ T7185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.730074][ T29] audit: type=1326 audit(1736046386.527:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 274.754738][ T29] audit: type=1326 audit(1736046386.557:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 275.229628][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 275.237972][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 275.244551][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 275.250872][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 275.257319][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 275.394916][ T29] audit: type=1326 audit(1736046387.017:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 275.464483][ T29] audit: type=1326 audit(1736046387.207:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 275.486963][ T29] audit: type=1326 audit(1736046387.207:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 275.699326][ T29] audit: type=1326 audit(1736046387.477:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 275.738902][ T29] audit: type=1326 audit(1736046387.477:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 277.756632][ T8190] fuse: Unknown parameter 'user_id00000000000000000000' [ 278.370125][ T8197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.576'. [ 278.415329][ T8197] 9pnet_fd: Insufficient options for proto=fd [ 278.439582][ T8199] veth0_vlan: entered allmulticast mode [ 278.574511][ T8204] loop0: detected capacity change from 0 to 512 [ 278.778752][ T8204] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 281.856262][ T8245] loop4: detected capacity change from 0 to 2048 [ 281.971154][ T8245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.100650][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 282.100671][ T29] audit: type=1800 audit(1736046393.887:554): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.592" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 282.392957][ T8255] loop3: detected capacity change from 0 to 512 [ 282.404604][ T8255] EXT4-fs: Ignoring removed i_version option [ 282.410754][ T8255] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.417354][ T8255] ext4: Unknown parameter 'seclabel' [ 282.534782][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.587360][ T8242] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 282.649705][ T8242] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 282.667062][ T8242] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 282.674541][ T8242] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 282.682202][ T8242] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 283.434892][ T8260] loop1: detected capacity change from 0 to 256 [ 283.676650][ T8260] FAT-fs (loop1): Directory bread(block 64) failed [ 283.689459][ T8260] FAT-fs (loop1): Directory bread(block 65) failed [ 283.707240][ T8267] futex_wake_op: syz.3.597 tries to shift op by 144; fix this program [ 283.773811][ T8260] FAT-fs (loop1): Directory bread(block 66) failed [ 283.781539][ T8260] FAT-fs (loop1): Directory bread(block 67) failed [ 283.873323][ T8260] FAT-fs (loop1): Directory bread(block 68) failed [ 283.919953][ T8260] FAT-fs (loop1): Directory bread(block 69) failed [ 283.944697][ T29] audit: type=1326 audit(1736046395.737:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 283.967428][ T8260] FAT-fs (loop1): Directory bread(block 70) failed [ 283.984281][ T8260] FAT-fs (loop1): Directory bread(block 71) failed [ 283.999579][ T29] audit: type=1326 audit(1736046395.737:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 284.019527][ T8260] FAT-fs (loop1): Directory bread(block 72) failed [ 284.032338][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 284.249321][ T29] audit: type=1326 audit(1736046395.767:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 284.566754][ T8260] FAT-fs (loop1): Directory bread(block 73) failed [ 284.699533][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 284.752027][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 284.758489][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 284.773686][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 284.910344][ T29] audit: type=1326 audit(1736046395.767:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 285.066314][ T29] audit: type=1326 audit(1736046395.767:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2e985d29 code=0x7ffc0000 [ 285.091342][ T8277] syz.3.601: attempt to access beyond end of device [ 285.091342][ T8277] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 285.163096][ T8277] exFAT-fs (loop3): unable to read boot sector [ 285.169563][ T8277] exFAT-fs (loop3): failed to read boot sector [ 285.175761][ T8277] exFAT-fs (loop3): failed to recognize exfat type [ 285.876549][ T8294] loop5: detected capacity change from 0 to 128 [ 285.895924][ T8294] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.018678][ T8297] loop4: detected capacity change from 0 to 256 [ 286.146801][ T8297] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 286.269721][ T8294] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.828474][ T8299] loop3: detected capacity change from 0 to 512 [ 286.916604][ T8299] EXT4-fs: Ignoring removed i_version option [ 286.948898][ T7185] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.971499][ T8299] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.019105][ T8299] ext4: Unknown parameter 'seclabel' [ 288.357028][ T8311] loop4: detected capacity change from 0 to 1024 [ 288.522087][ T8311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.740249][ T29] audit: type=1804 audit(2000000002.029:560): pid=8311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.611" name="/newroot/130/file0/bus" dev="loop4" ino=19 res=1 errno=0 [ 289.369554][ T29] audit: type=1804 audit(2000000002.039:561): pid=8311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.611" name="/newroot/130/file0/bus" dev="loop4" ino=19 res=1 errno=0 [ 289.543564][ T8318] tc_dump_action: action bad kind [ 290.014616][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.177852][ T8305] loop5: detected capacity change from 0 to 512 [ 290.231631][ T29] audit: type=1326 audit(2000000003.539:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.0.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 290.286834][ T29] audit: type=1326 audit(2000000003.539:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.0.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 290.345282][ T29] audit: type=1326 audit(2000000003.539:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.0.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 290.368348][ T29] audit: type=1326 audit(2000000003.569:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 290.384191][ T8305] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.5.608: corrupted xattr block 95: invalid header [ 290.392286][ T29] audit: type=1326 audit(2000000003.569:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 290.469435][ T29] audit: type=1326 audit(2000000003.579:567): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=8330 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3cf85d29 code=0x7ffc0000 [ 290.492683][ T29] audit: type=1326 audit(2000000003.649:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.0.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 290.515442][ T29] audit: type=1326 audit(2000000003.649:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.0.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e5785d29 code=0x7ffc0000 [ 290.542596][ T8305] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.608: bg 0: block 7: invalid block bitmap [ 290.610879][ T8305] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 291.823802][ T8305] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2977: inode #11: comm syz.5.608: corrupted xattr block 95: invalid header [ 291.861869][ T8305] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 291.871202][ T8305] EXT4-fs (loop5): 1 orphan inode deleted [ 291.883483][ T8305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.895710][ T8350] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 295.390797][ T8355] loop0: detected capacity change from 0 to 512 [ 295.398801][ T8355] EXT4-fs: Ignoring removed i_version option [ 295.405120][ T8355] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.411694][ T8355] ext4: Unknown parameter 'seclabel' [ 298.241026][ T8372] loop3: detected capacity change from 0 to 256 [ 298.453974][ T8372] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 299.259502][ T29] audit: type=1800 audit(2000000012.559:570): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.627" name="file1" dev="loop3" ino=1048619 res=0 errno=0 [ 299.482689][ T8377] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.490620][ T8377] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 299.531975][ T8377] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.571248][ T8377] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 299.598187][ T8377] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.859500][ T5882] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 301.129912][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 301.136741][ T5882] usb 1-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=32.a8 [ 301.153652][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.164641][ T5882] usb 1-1: config 0 descriptor?? [ 301.282536][ T5882] smsc75xx v1.0.0 [ 301.286243][ T5882] smsc75xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 301.340789][ T5882] smsc75xx 1-1:0.0: probe with driver smsc75xx failed with error -22 [ 301.342740][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 301.361251][ T8395] loop4: detected capacity change from 0 to 512 [ 301.370557][ T8395] EXT4-fs: Ignoring removed i_version option [ 301.376607][ T8395] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.383464][ T8395] ext4: Unknown parameter 'seclabel' [ 301.616232][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 301.622746][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 301.629002][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 301.643520][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 302.097125][ T8] usb 1-1: USB disconnect, device number 6 [ 303.575703][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.580349][ T5839] Bluetooth: hci6: sending frame failed (-49) [ 303.585716][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.592217][ T5831] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 303.602537][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.613104][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.626632][ T5834] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 303.634249][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.749044][ T8417] ================================================================== [ 303.757257][ T8417] BUG: KASAN: null-ptr-deref in input_ff_create+0x213/0x2f0 [ 303.764587][ T8417] Read of size 8 at addr 0000000000000040 by task syz.0.640/8417 [ 303.772330][ T8417] [ 303.774686][ T8417] CPU: 0 UID: 0 PID: 8417 Comm: syz.0.640 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 303.774716][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 303.774730][ T8417] Call Trace: [ 303.774735][ T8417] [ 303.774743][ T8417] dump_stack_lvl+0x241/0x360 [ 303.774767][ T8417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.774785][ T8417] ? __pfx__printk+0x10/0x10 [ 303.774809][ T8417] ? _printk+0xd5/0x120 [ 303.774836][ T8417] print_report+0xe8/0x550 [ 303.774858][ T8417] ? __asan_memset+0x23/0x50 [ 303.774878][ T8417] ? __virt_addr_valid+0x58/0x530 [ 303.774903][ T8417] ? input_ff_create+0x213/0x2f0 [ 303.774922][ T8417] kasan_report+0x143/0x180 [ 303.774947][ T8417] ? input_ff_create+0x213/0x2f0 [ 303.774969][ T8417] kasan_check_range+0x282/0x290 [ 303.774995][ T8417] input_ff_create+0x213/0x2f0 [ 303.775015][ T8417] uinput_create_device+0x26d/0x630 [ 303.775043][ T8417] uinput_ioctl_handler+0x488/0x1770 [ 303.775078][ T8417] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 303.775112][ T8417] ? __pfx_uinput_ioctl+0x10/0x10 [ 303.775138][ T8417] __se_sys_ioctl+0xf5/0x170 [ 303.775162][ T8417] do_syscall_64+0xf3/0x230 [ 303.775181][ T8417] ? clear_bhb_loop+0x35/0x90 [ 303.775206][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.775228][ T8417] RIP: 0033:0x7f61e5785d29 [ 303.775251][ T8417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.775267][ T8417] RSP: 002b:00007f61e656e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.775288][ T8417] RAX: ffffffffffffffda RBX: 00007f61e5975fa0 RCX: 00007f61e5785d29 [ 303.775303][ T8417] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 303.775316][ T8417] RBP: 00007f61e5801b08 R08: 0000000000000000 R09: 0000000000000000 [ 303.775329][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.775341][ T8417] R13: 0000000000000000 R14: 00007f61e5975fa0 R15: 00007ffd6de6ffe8 [ 303.775363][ T8417] [ 303.775370][ T8417] ================================================================== [ 303.995137][ T8417] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 304.002382][ T8417] CPU: 1 UID: 0 PID: 8417 Comm: syz.0.640 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 304.012475][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 304.022652][ T8417] Call Trace: [ 304.025948][ T8417] [ 304.028893][ T8417] dump_stack_lvl+0x241/0x360 [ 304.033595][ T8417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.038827][ T8417] ? __pfx__printk+0x10/0x10 [ 304.043446][ T8417] ? preempt_schedule+0xe1/0xf0 [ 304.048334][ T8417] ? vscnprintf+0x5d/0x90 [ 304.052694][ T8417] panic+0x349/0x880 [ 304.056715][ T8417] ? check_panic_on_warn+0x21/0xb0 [ 304.061873][ T8417] ? __pfx_panic+0x10/0x10 [ 304.066332][ T8417] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 304.072351][ T8417] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 304.078712][ T8417] ? print_report+0xe8/0x550 [ 304.083436][ T8417] check_panic_on_warn+0x86/0xb0 [ 304.088420][ T8417] ? input_ff_create+0x213/0x2f0 [ 304.093391][ T8417] end_report+0x77/0x160 [ 304.097645][ T8417] kasan_report+0x154/0x180 [ 304.102159][ T8417] ? input_ff_create+0x213/0x2f0 [ 304.107142][ T8417] kasan_check_range+0x282/0x290 [ 304.112080][ T8417] input_ff_create+0x213/0x2f0 [ 304.116844][ T8417] uinput_create_device+0x26d/0x630 [ 304.122045][ T8417] uinput_ioctl_handler+0x488/0x1770 [ 304.127329][ T8417] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 304.133055][ T8417] ? __pfx_uinput_ioctl+0x10/0x10 [ 304.138077][ T8417] __se_sys_ioctl+0xf5/0x170 [ 304.142665][ T8417] do_syscall_64+0xf3/0x230 [ 304.147163][ T8417] ? clear_bhb_loop+0x35/0x90 [ 304.151842][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.157733][ T8417] RIP: 0033:0x7f61e5785d29 [ 304.162168][ T8417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.181785][ T8417] RSP: 002b:00007f61e656e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.190206][ T8417] RAX: ffffffffffffffda RBX: 00007f61e5975fa0 RCX: 00007f61e5785d29 [ 304.198174][ T8417] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 304.206144][ T8417] RBP: 00007f61e5801b08 R08: 0000000000000000 R09: 0000000000000000 [ 304.214114][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.222082][ T8417] R13: 0000000000000000 R14: 00007f61e5975fa0 R15: 00007ffd6de6ffe8 [ 304.230060][ T8417] [ 304.233336][ T8417] Kernel Offset: disabled [ 304.237653][ T8417] Rebooting in 86400 seconds..