last executing test programs: 28m47.749907004s ago: executing program 32 (id=29): syz_open_pts(0xffffffffffffffff, 0x2800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000010c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) uname(0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000300)=""/218) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") r5 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) ioctl(r5, 0x1, &(0x7f0000000000)) 27m46.752204544s ago: executing program 33 (id=197): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000000)='map_files\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, r5, r5) fchdir(r4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 27m21.407224857s ago: executing program 34 (id=265): socket$nl_generic(0x10, 0x3, 0x10) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) prlimit64(0x0, 0xe, &(0x7f0000002440)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}}) add_key$keyring(0x0, &(0x7f00000023c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 26m45.224203807s ago: executing program 35 (id=372): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) getdents64(r3, 0x0, 0x0) 25m25.125547049s ago: executing program 36 (id=637): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@usrjquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xfffffffffffff181}}, {@resgid}, {@minixdf}, {@debug}, {@grpquota}, {@nombcache}, {@minixdf}, {@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@i_version}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000024c0)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 25m19.265024526s ago: executing program 4 (id=660): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mkdir(0x0, 0x5) pivot_root(&(0x7f0000000240)='./control\x00', 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 25m16.469735822s ago: executing program 4 (id=664): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x30}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@nobh}, {@errors_remount}, {@i_version}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef) 25m12.771982445s ago: executing program 4 (id=669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sched_getparam(r2, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) fcntl$getflags(r3, 0xb) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000c80)={{r1}, "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"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 25m11.204800236s ago: executing program 4 (id=673): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x8040, &(0x7f0000000780)=ANY=[], 0x1, 0x12b9, &(0x7f00000017c0)="$eJzs3c9rXNUXAPDzkplkkn6bzFdrtYJ40Y0ijE0XXbkp0oIYUKopqCC82omGTJOQCYGImLhyJfhniLp0J4j/QDZudCsIItm4DCI+mcykzcwkk5o0CZTPZzM379xz3o87eXDhXmbrlS/vzs82a7P5SgxlWZSWylHaTpFiKIajbSNevPXzr8+89c67r1+bnr5+M6Ub196euppSmnj2h/c++fa5H1fO3fpu4vvR2Ky+v/Xnld82L25e2vrnm5hrprlmWlhcSXm6vbi4kt9u1NOdueZ8LaU3G/W8WU+Vzjnux2cbi0tLaylfuHN+fGm53mymfGEtzdfX0kq23uqZf5jPLaRarZbOjwfHMfP1dlEUEUVRjpEoiqIYi/E4F/+L8xeuRkQ1/h+PxeNxIZ6Ii/FkPBWXdnrt5o+c7eUDAAAAAAAAAAAAAAAAAADAI+LA/f8xEZNRzfr3/4+e9SUDAAAAAAAAAAAAAAAAAADAI6d3/38pYu/+/0N+/x8AAAAAAAAAAAAAAAAAAAB4GA75/f+e/f8v2f8PAAAAAAAAAAAAAAAAAAAAJ6Dc+byZUiXi7uerM6sz7c/28WuzMReNqMflmIy/Y2f3f1u7feO16euX045qvHx3vZO/vjoz3J0/VZ6MarZv/lQ7P3Xnj8b43vwrMRkX9j//lX3zK/HC8638z9r5tZiMnz6IxWjEnYisdW2liCJ+yeLTqZRefWN6rCt/aPBzGz7ZYQEAAICHqpbu6Z+/b3Q67Rtvhzrz89TpmfXMz//q/LHP/LwUT5fO6q7Z1Vz7eD5vNOrLu42s78jAxshBdZabI91Hxjo9H7RyXyOLiLwrfWL895utkkcs2Cz3h6pHqbM2fKSsozbKg/v0jsWlysCCQ3tGMEoxvBPK7j3n7dO7r2M2Kp0bmc8bf3y1J1SJkzppufV17gvtPtC80Xp/PljB2CiKnlB2jC/2of+M7cbooKyD3xnZCb2LOH33B/2srwQAAAAAAAAAAID/orP+K9veu/pvLCL61gN+1Hdkd3l49+LBnsoDV5Z9cQp3CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAv+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL4KAAD//zYqvgk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x141441, 0x40) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 25m9.679240487s ago: executing program 4 (id=677): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) 25m8.99479107s ago: executing program 4 (id=678): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) socket$nl_xfrm(0x10, 0x3, 0x6) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 25m8.555214499s ago: executing program 37 (id=678): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) socket$nl_xfrm(0x10, 0x3, 0x6) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 24m53.579497447s ago: executing program 7 (id=712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 24m53.239310153s ago: executing program 7 (id=714): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, 0x0, 0x103000, 0x191) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) setns(0xffffffffffffffff, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x65000e43) readv(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000000000)=""/16, 0x10}], 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, r5, 0x301, 0x70bd2a, 0x25dfdbfe, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000900) r6 = dup(0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x18) 24m52.129339706s ago: executing program 7 (id=717): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x3) 24m51.160103565s ago: executing program 7 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r3, &(0x7f0000000680), 0x4924924924925c6, 0x0) 24m49.568035377s ago: executing program 7 (id=722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close(r2) 24m47.37950825s ago: executing program 7 (id=727): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000008c0), 0x11d5) 24m32.110450853s ago: executing program 38 (id=727): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000008c0), 0x11d5) 19m58.371053227s ago: executing program 1 (id=1166): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYBLOB="01000000000008001c001280"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x16, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, 0x0, 0x8008000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r6 = fanotify_init(0x81, 0x40000) fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002640)={0x9, {"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", 0x1000}}, 0xfa0) 19m55.026462943s ago: executing program 1 (id=1168): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x8, 0x6011, r0, 0xffffffffffffc000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)='&!\\-\x00'}, 0x30) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2b, 'net_prio'}]}, 0xa) ftruncate(r5, 0x8979) sendfile(r4, r5, 0x0, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r6, &(0x7f0000002240)=""/236, 0xec, 0x4eb) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$eJzs2z9I22kYB/A31lBohw7XqVPbocPRpaVjM7QlSVsqhKiL3KCgiJgpghC5gKAHmkExgzi6iJDFP5Mxg5Oi4Czi4CE4uNyhi+BiDvG97e7wUI8rfD7w48n75vu+T54h4y/wXWsJvzebzUQIofnwrxPNfzjdWUtnvjzPfch3xMvCfPWXH64+Jv48HW99GdeHcb0w/6gxefY5WTtoP3/VvVlpid+PxufxYr3zDsbjni2ltp6MjRezU6XUwH62fDyxt9u2fJrO179Vqitfk596Y2471tZYh0IpjITB0BMKoRD6QvGO+s/Vjt5cPsvW1vrfX2Qa0xtvYy53yzlv2n/4xUxXtfzx9erT2Xel9Z38yYPrXOFv/l0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPy/LKW2noyNF7NTpdTAfrZ8PLG327Z8ms7Xv1WqK1+Tn3pjbjvW1liHQimMhMHQEwohEfpC8Y76z9WO3lw+y9bW+t9fZBrTG29jLnfLOW/af/jFTFe1/PH16tPZd6X1nfzJg+tc4eE9/QAAAAAAAAAAAAAAAAAAAAAIIaQzX57nPuQ7QkiEn0Jr+PG3n1uu9pvxffdEzL2M9TDuL8w/akyefU7WDtrPX3VvVn6N+6PxebxY7/zPh+Ff+yMAAP//17OV3g==") 19m49.419936655s ago: executing program 1 (id=1173): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYBLOB="01000000000008001c001280"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x16, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, 0x0, 0x8008000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r6 = fanotify_init(0x81, 0x40000) fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0) epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002640)={0x9, {"a2e3ad214fc752f91b2547f70e06d038e7ff7fc6e5539b325d078b089b3b083872090890e0878f0e1ac6e7049b3367959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31340d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45259f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96e8664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94195413cd091c0922f93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000fa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0xfa0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x3, 0xffffffff, 0xffffffff, 0xfbe, 0x100, 0x5}) 19m47.517594533s ago: executing program 1 (id=1176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffffff, r2, 0x0, 0x0, 0x0) 19m40.211835178s ago: executing program 1 (id=1187): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x108, r4}, 0x0) 19m35.532117081s ago: executing program 1 (id=1192): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 19m33.06761166s ago: executing program 39 (id=1192): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9m4.5309636s ago: executing program 3 (id=1942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100408b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) io_setup(0x32ba, &(0x7f0000000100)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 9m2.591049939s ago: executing program 3 (id=1946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x104) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) 9m0.379847803s ago: executing program 3 (id=1947): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000200)=0x80000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe85fd000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r4, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000001c0)=0x7) 8m49.871462111s ago: executing program 3 (id=1953): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xa74f4d2231f8950a, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_targets\x00') ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) shmctl$IPC_RMID(r0, 0x0) 8m39.931028188s ago: executing program 3 (id=1961): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000200)=0x80000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe85fd000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r4, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000001c0)=0x7) 8m38.911320928s ago: executing program 3 (id=1962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x108, r4}, 0x0) 8m23.12123977s ago: executing program 40 (id=1962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x108, r4}, 0x0) 6m22.39000199s ago: executing program 2 (id=2077): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0) 6m20.636353214s ago: executing program 2 (id=2078): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='net_dev_xmit\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 6m20.108006945s ago: executing program 2 (id=2080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 6m18.004564367s ago: executing program 2 (id=2082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xffffffffffffffcd) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xfffffffffffffdcd) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) fchmod(0xffffffffffffffff, 0x4a) r3 = socket(0xa, 0x801, 0x0) socket$igmp(0x2, 0x3, 0x2) rt_sigaction(0x33, &(0x7f0000000180)={0x0, 0x58000005, 0x0, {[0xfffbfffffffffffc]}}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 6m16.693908552s ago: executing program 2 (id=2083): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 6m10.075774314s ago: executing program 2 (id=2093): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000500)={"6d121c3063643fd6a39710e95e9cf24068ab311182f7545d0f5b3db63e00", 0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000280)='.\x00', 0x0, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x66c00) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r6, r7, 0x3, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000540)={"217c033fcd080fbb3114b267e88a8c300aa7040c89d1bfc37554db161b35fcb0"}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = dup(r8) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, 0x0, &(0x7f0000000200)) 5m53.535061311s ago: executing program 41 (id=2093): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000500)={"6d121c3063643fd6a39710e95e9cf24068ab311182f7545d0f5b3db63e00", 0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000280)='.\x00', 0x0, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x66c00) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r6, r7, 0x3, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000540)={"217c033fcd080fbb3114b267e88a8c300aa7040c89d1bfc37554db161b35fcb0"}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = dup(r8) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, 0x0, &(0x7f0000000200)) 3m0.945749357s ago: executing program 8 (id=2356): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) tkill(r0, 0x7) 2m59.547820324s ago: executing program 8 (id=2358): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x1eb2, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) io_uring_setup(0x7a12, &(0x7f0000000300)) 2m54.876012707s ago: executing program 8 (id=2363): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m51.243995398s ago: executing program 8 (id=2366): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) tkill(r0, 0x7) 2m47.13897939s ago: executing program 8 (id=2373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x104) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b86080003400000475108000340000000"], 0xdc}}, 0x0) 2m43.912271333s ago: executing program 8 (id=2375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m27.534493098s ago: executing program 42 (id=2375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 22.943966635s ago: executing program 5 (id=2562): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) shmctl$IPC_RMID(r0, 0x0) 20.576529882s ago: executing program 5 (id=2565): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000200)=0x80000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe85fd000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r3, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20, 0x4, r4, 0x0, 0x0, 'syz0\x00', 0x0}) 18.823926787s ago: executing program 6 (id=2569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 18.035595312s ago: executing program 6 (id=2572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xfffffffffffffdcd) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) fchmod(0xffffffffffffffff, 0x4a) r3 = socket(0xa, 0x801, 0x0) socket$igmp(0x2, 0x3, 0x2) rt_sigaction(0x33, &(0x7f0000000180)={0x0, 0x58000005, 0x0, {[0xfffbfffffffffffc]}}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 15.576086841s ago: executing program 6 (id=2573): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) shmctl$IPC_RMID(r0, 0x0) 12.826008565s ago: executing program 5 (id=2576): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) getpid() sendmsg$unix(r0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20009010}, 0x810) 12.426612423s ago: executing program 0 (id=2578): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() read(0xffffffffffffffff, &(0x7f0000000440)=""/247, 0x26) tkill(r3, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r6 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 12.300950906s ago: executing program 5 (id=2579): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 10.60991116s ago: executing program 5 (id=2581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xfffffffffffffdcd) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) fchmod(0xffffffffffffffff, 0x4a) r3 = socket(0xa, 0x801, 0x0) socket$igmp(0x2, 0x3, 0x2) rt_sigaction(0x33, &(0x7f0000000180)={0x0, 0x58000005, 0x0, {[0xfffbfffffffffffc]}}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 10.60495054s ago: executing program 0 (id=2582): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xa8d1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9.041117931s ago: executing program 6 (id=2584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 7.208515637s ago: executing program 5 (id=2585): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="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"/3400], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 6.672007718s ago: executing program 9 (id=2586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 6.596541189s ago: executing program 0 (id=2587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 5.896229273s ago: executing program 0 (id=2588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') writev(r1, &(0x7f00000003c0), 0x100000000000022d) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() getpid() fstat(0xffffffffffffffff, &(0x7f0000006bc0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200000000000005, 0x6) syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0)) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="62723a2926866dbbb487438e976aadd98f69646765"], 0x11) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x24000880) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@nouser_xattr}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noinit_itable}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x361, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000040)={0x36, 0xffffffffffffffff, 0x10, {0xffffffffffff0133, 0x6}, 0x7}, 0x1) 5.104008709s ago: executing program 9 (id=2589): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@fallback=r0, r1, 0x19}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x20008411, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 4.582073609s ago: executing program 0 (id=2590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.086587339s ago: executing program 9 (id=2591): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() read(0xffffffffffffffff, &(0x7f0000000440)=""/247, 0x26) tkill(r3, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r6 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 3.968101751s ago: executing program 0 (id=2592): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f00000000c0)={r1}, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) shmctl$IPC_RMID(r0, 0x0) 3.261451305s ago: executing program 6 (id=2593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xfffffffffffffdcd) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) fchmod(0xffffffffffffffff, 0x4a) r3 = socket(0xa, 0x801, 0x0) socket$igmp(0x2, 0x3, 0x2) rt_sigaction(0x33, &(0x7f0000000180)={0x0, 0x58000005, 0x0, {[0xfffbfffffffffffc]}}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 1.529694459s ago: executing program 6 (id=2594): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mknod$loop(&(0x7f00000007c0)='./file0\x00', 0x100000000000600d, 0x1) io_setup(0x202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = io_uring_setup(0x4f73, &(0x7f0000000340)={0x0, 0xd611, 0x80, 0x1000000, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, &(0x7f0000000000), 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000180)='./bus\x00', 0x0) inotify_init1(0x80800) creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) renameat2(r4, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000200)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.315178464s ago: executing program 9 (id=2595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x87}}, @call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 228.086855ms ago: executing program 9 (id=2596): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 0s ago: executing program 9 (id=2597): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2f, &(0x7f0000000400), 0xa5e) kernel console output (not intermixed with test programs): rs = 160 limit=256 [ 614.475944][ T2926] kworker/u4:11: attempt to access beyond end of device [ 614.475944][ T2926] loop9: rw=1, sector=6952, nr_sectors = 2816 limit=256 [ 614.506427][ T2926] kworker/u4:11: attempt to access beyond end of device [ 614.506427][ T2926] loop9: rw=1, sector=22664, nr_sectors = 2888 limit=256 [ 616.473005][T15615] loop1: detected capacity change from 0 to 1024 [ 617.483437][T15615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 618.737710][T15615] xt_limit: Overflow, try lower: 167772/2147483648 [ 619.081312][ T27] audit: type=1800 audit(1759032937.481:95): pid=15615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1162" name="file1" dev="loop1" ino=839 res=0 errno=0 [ 624.812225][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.818991][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.734451][T15668] loop1: detected capacity change from 0 to 2048 [ 627.792951][T15668] Alternate GPT is invalid, using primary GPT. [ 627.809844][T15668] loop1: p1 p2 p3 [ 627.906742][T15677] loop8: detected capacity change from 0 to 128 [ 627.950739][T15677] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 628.015689][T15677] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 630.995401][T15705] loop8: detected capacity change from 0 to 8 [ 631.066202][T15705] SQUASHFS error: zlib decompression failed, data probably corrupt [ 631.153612][T15705] SQUASHFS error: Failed to read block 0x9b: -5 [ 631.201818][T15705] SQUASHFS error: Unable to read metadata cache entry [99] [ 631.264924][T15680] udevd[15680]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 631.280301][T15705] SQUASHFS error: Unable to read inode 0x127 [ 631.292680][T15649] udevd[15649]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 631.331224][T15679] udevd[15679]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 634.222572][T15736] loop8: detected capacity change from 0 to 128 [ 634.268134][T15736] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 634.294300][T15736] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 634.985839][T15742] loop1: detected capacity change from 0 to 1024 [ 635.045614][T15742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.239552][T15742] loop1: detected capacity change from 1024 to 64 [ 635.278378][T15742] syz.1.1176: attempt to access beyond end of device [ 635.278378][T15742] loop1: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 635.292308][T15742] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 113) [ 635.303820][T15742] Buffer I/O error on device loop1, logical block 113 [ 635.311177][T15742] syz.1.1176: attempt to access beyond end of device [ 635.311177][T15742] loop1: rw=2049, sector=230, nr_sectors = 26 limit=64 [ 635.324743][T15742] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 115) [ 635.336040][T15742] Buffer I/O error on device loop1, logical block 115 [ 635.343217][T15742] Buffer I/O error on device loop1, logical block 116 [ 635.350009][T15742] Buffer I/O error on device loop1, logical block 117 [ 635.356795][T15742] Buffer I/O error on device loop1, logical block 118 [ 635.363643][T15742] Buffer I/O error on device loop1, logical block 119 [ 635.370574][T15742] Buffer I/O error on device loop1, logical block 120 [ 635.377350][T15742] Buffer I/O error on device loop1, logical block 121 [ 635.384130][T15742] Buffer I/O error on device loop1, logical block 122 [ 635.390891][T15742] Buffer I/O error on device loop1, logical block 123 [ 635.398156][T15742] syz.1.1176: attempt to access beyond end of device [ 635.398156][T15742] loop1: rw=2049, sector=258, nr_sectors = 2 limit=64 [ 635.411489][T15742] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 129) [ 635.422867][T15742] syz.1.1176: attempt to access beyond end of device [ 635.422867][T15742] loop1: rw=2049, sector=258, nr_sectors = 30 limit=64 [ 635.436713][T15742] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 129) [ 637.271223][T13100] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 637.302340][T13100] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 637.348800][T13100] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 637.380320][T13100] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 638.338123][T13100] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 638.417962][T13100] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 640.569965][T15744] kmmpd-loop1: attempt to access beyond end of device [ 640.569965][T15744] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 640.584846][T15744] buffer_io_error: 24 callbacks suppressed [ 640.584861][T15744] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 640.600198][T15744] EXT4-fs error (device loop1): kmmpd:186: comm kmmpd-loop1: Error writing to MMP block [ 641.672468][T13100] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz-executor: Error while async write back metadata [ 641.729387][T13100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.827281][T15744] kmmpd-loop1: attempt to access beyond end of device [ 641.827281][T15744] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 641.877453][T15744] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 643.068161][T11727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.420744][T11727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.449285][T11727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.139941][T11727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.351020][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 647.405567][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 647.433788][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 647.667893][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 647.707914][ T5805] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 647.727887][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 649.858599][ T5805] Bluetooth: hci3: command tx timeout [ 651.957372][ T5805] Bluetooth: hci3: command tx timeout [ 652.099290][T15822] chnl_net:caif_netlink_parms(): no params data found [ 653.790131][ T5805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:1024' [ 653.800661][ T5805] CPU: 0 PID: 5805 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 653.808240][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 653.818377][ T5805] Workqueue: hci2 hci_rx_work [ 653.823086][ T5805] Call Trace: [ 653.826373][ T5805] [ 653.829328][ T5805] dump_stack_lvl+0x16c/0x230 [ 653.834051][ T5805] ? show_regs_print_info+0x20/0x20 [ 653.839269][ T5805] ? load_image+0x3b0/0x3b0 [ 653.843783][ T5805] sysfs_create_dir_ns+0x256/0x280 [ 653.848903][ T5805] ? hci_rx_work+0x43a/0xd80 [ 653.853527][ T5805] ? sysfs_warn_dup+0xa0/0xa0 [ 653.858240][ T5805] ? do_raw_spin_unlock+0x121/0x230 [ 653.863472][ T5805] kobject_add_internal+0x6b8/0xc70 [ 653.868796][ T5805] kobject_add+0x156/0x220 [ 653.873268][ T5805] ? __rwlock_init+0x150/0x150 [ 653.878077][ T5805] ? kobject_init+0x1e0/0x1e0 [ 653.882801][ T5805] ? _raw_spin_unlock+0x28/0x40 [ 653.887664][ T5805] ? get_device_parent+0x366/0x390 [ 653.892790][ T5805] device_add+0x408/0xc20 [ 653.897130][ T5805] hci_conn_add_sysfs+0xd5/0x1e0 [ 653.902166][ T5805] le_conn_complete_evt+0xc37/0x1220 [ 653.907487][ T5805] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 653.913583][ T5805] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 653.919860][ T5805] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 653.925602][ T5805] ? lockdep_hardirqs_on+0x98/0x150 [ 653.930823][ T5805] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 653.936477][ T5805] hci_le_enh_conn_complete_evt+0x189/0x460 [ 653.942387][ T5805] ? hci_remote_host_features_evt+0x160/0x160 [ 653.948476][ T5805] hci_event_packet+0x795/0x1210 [ 653.953426][ T5805] ? bis_list+0x290/0x290 [ 653.957786][ T5805] ? lockdep_hardirqs_on+0x98/0x150 [ 653.963011][ T5805] ? hci_send_to_monitor+0xd7/0x4f0 [ 653.968226][ T5805] hci_rx_work+0x43a/0xd80 [ 653.972742][ T5805] ? process_scheduled_works+0x957/0x15b0 [ 653.978464][ T5805] process_scheduled_works+0xa45/0x15b0 [ 653.984081][ T5805] ? assign_work+0x400/0x400 [ 653.988726][ T5805] ? assign_work+0x39e/0x400 [ 653.993336][ T5805] worker_thread+0xa55/0xfc0 [ 653.998124][ T5805] kthread+0x2fa/0x390 [ 654.002277][ T5805] ? pr_cont_work+0x560/0x560 [ 654.006956][ T5805] ? kthread_blkcg+0xd0/0xd0 [ 654.011632][ T5805] ret_from_fork+0x48/0x80 [ 654.016062][ T5805] ? kthread_blkcg+0xd0/0xd0 [ 654.020674][ T5805] ret_from_fork_asm+0x11/0x20 [ 654.025454][ T5805] [ 654.028812][T14856] Bluetooth: hci3: command tx timeout [ 654.029352][ T5805] kobject: kobject_add_internal failed for hci2:1024 with -EEXIST, don't try to register things with the same name in the same directory. [ 654.057442][ T5805] Bluetooth: hci2: failed to register connection device [ 654.550480][T15822] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.577120][T15822] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.607601][T15822] bridge_slave_0: entered allmulticast mode [ 654.615143][T15822] bridge_slave_0: entered promiscuous mode [ 654.667042][T15822] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.708735][T15822] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.715975][T15822] bridge_slave_1: entered allmulticast mode [ 654.747929][T15822] bridge_slave_1: entered promiscuous mode [ 655.360577][T15822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.072759][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1206'. [ 656.131339][T11727] hsr_slave_0: left promiscuous mode [ 656.185476][T14856] Bluetooth: hci3: command tx timeout [ 656.192805][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 656.201019][T11727] hsr_slave_1: left promiscuous mode [ 656.240790][T11727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.285074][T11727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.349453][T11727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.356927][T11727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.474407][T11727] bridge_slave_1: left allmulticast mode [ 656.492810][T11727] bridge_slave_1: left promiscuous mode [ 656.507913][T11727] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.531748][T11727] bridge_slave_0: left allmulticast mode [ 656.547441][T11727] bridge_slave_0: left promiscuous mode [ 656.553382][T11727] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.630388][T11727] veth1_macvtap: left promiscuous mode [ 656.636327][T11727] veth0_macvtap: left promiscuous mode [ 656.644161][T11727] veth1_vlan: left promiscuous mode [ 656.664990][T11727] veth0_vlan: left promiscuous mode [ 660.101380][T16094] futex_wake_op: syz.8.1215 tries to shift op by -1; fix this program [ 660.935306][T16091] loop8: detected capacity change from 0 to 512 [ 661.376706][T16091] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 661.418940][T16091] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 661.436322][T16091] EXT4-fs (loop8): 1 truncate cleaned up [ 661.442812][T16091] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.589245][T11771] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.722707][T11727] team0 (unregistering): Port device team_slave_1 removed [ 661.938154][T11727] team0 (unregistering): Port device team_slave_0 removed [ 662.138775][T11727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.311269][T11727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.063019][T11727] bond0 (unregistering): Released all slaves [ 665.606807][T15822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.638272][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 665.930978][T15822] team0: Port device team_slave_0 added [ 665.957176][T15822] team0: Port device team_slave_1 added [ 666.556723][T15822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.745906][T15822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.027943][T15822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.083379][T15822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.135772][T15822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.307470][T15822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.411335][T15822] hsr_slave_0: entered promiscuous mode [ 668.454334][T15822] hsr_slave_1: entered promiscuous mode [ 669.486091][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 671.317578][ T27] audit: type=1326 audit(1759032988.971:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16315 comm="syz.9.1228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9aa58eec9 code=0x0 [ 674.039923][T15822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 674.082083][T15822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 674.121690][T15822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 674.152562][T15822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 674.414691][T15822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.492428][T15822] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.521409][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.528660][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.593896][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.601193][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.751408][T15822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 677.306903][T15822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.390418][T15822] veth0_vlan: entered promiscuous mode [ 677.424124][T15822] veth1_vlan: entered promiscuous mode [ 677.495070][T15822] veth0_macvtap: entered promiscuous mode [ 677.519279][T15822] veth1_macvtap: entered promiscuous mode [ 677.583777][T15822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.610308][T15822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.637521][T15822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.667965][T15822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.700668][T15822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.718199][T15822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.749364][T15822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.820280][T15822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.872195][T15822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.899336][T15822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.938212][T15822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.958770][T15822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.997791][T15822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.009698][T15822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.072727][T15822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.097810][T15822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.117486][T15822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.126261][T15822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.367122][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.375397][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.964425][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 679.684518][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.692527][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.712526][T16402] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1238'. [ 679.742761][T16402] syz_tun: entered promiscuous mode [ 681.587830][T16416] loop9: detected capacity change from 0 to 8 [ 681.610233][T16416] SQUASHFS error: Unable to read inode 0x11f [ 686.101747][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.108362][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.653095][T16444] loop8: detected capacity change from 0 to 128 [ 688.727542][T16444] EXT4-fs (loop8): Test dummy encryption mode enabled [ 688.805218][T16444] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 688.948081][T16444] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 689.285830][T16444] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 689.526113][T11771] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 694.650910][T16487] loop9: detected capacity change from 0 to 128 [ 694.689802][T16488] xt_socket: unknown flags 0x4c [ 697.766095][T16508] loop9: detected capacity change from 0 to 2048 [ 697.802583][T16508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 702.973873][T16537] loop8: detected capacity change from 0 to 512 [ 703.012325][T16537] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 703.207154][T16542] loop2: detected capacity change from 0 to 512 [ 703.311862][T16542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.464858][T16542] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.980545][T15822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.859080][ T5805] Bluetooth: hci0: command 0x0406 tx timeout [ 705.865237][T14856] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 709.667405][T16596] loop2: detected capacity change from 0 to 1024 [ 709.688508][T16596] hfsplus: unable to parse mount options [ 709.742635][T15680] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 715.150532][T16627] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 715.386483][T16631] loop8: detected capacity change from 0 to 2048 [ 715.394305][T16631] UDF-fs: bad mount option "00000000000000000000" or missing value [ 715.721923][T15649] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 716.214650][T16671] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.016176][T16727] loop8: detected capacity change from 0 to 8 [ 724.023274][T16727] squashfs: Unknown parameter 'Ý' [ 724.085047][T15680] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 724.495633][T16739] loop8: detected capacity change from 0 to 512 [ 724.498780][T16736] loop2: detected capacity change from 0 to 2048 [ 724.578554][T16736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 724.700155][ T27] audit: type=1800 audit(1759033043.171:97): pid=16736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1289" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 724.885295][T16739] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.787614][T16739] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 726.199246][T16739] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 726.229388][T16758] loop2: detected capacity change from 0 to 8 [ 726.299186][T16759] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1301'. [ 726.521424][T16758] squashfs: Unknown parameter '' [ 727.128557][T11771] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.334439][T16772] loop2: detected capacity change from 0 to 8192 [ 727.346137][T16773] loop9: detected capacity change from 0 to 128 [ 731.758588][T16812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1311'. [ 740.823201][T16857] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1321'. [ 745.961561][T16887] loop8: detected capacity change from 0 to 2364 [ 746.782927][T16905] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1334'. [ 748.298049][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.304449][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.630860][T16944] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1343'. [ 754.322581][T16947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 755.483236][T16957] loop2: detected capacity change from 0 to 16 [ 755.522142][T16957] erofs: (device loop2): mounted with root inode @ nid 36. [ 755.583532][T16957] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 755.599592][T16957] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 755.610779][T16957] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 755.628898][T16957] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 755.639839][T16957] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 755.650710][T16957] erofs: (device loop2): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 755.660089][T16957] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 755.670653][T16957] erofs: (device loop2): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 755.679868][T16957] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 755.690638][T16957] erofs: (device loop2): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 755.700204][T16957] erofs: (device loop2): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 755.709720][T16957] erofs: (device loop2): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 755.719288][T16957] erofs: (device loop2): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 755.728774][T16957] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 755.739505][T16957] erofs: (device loop2): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 755.748803][T16957] erofs: (device loop2): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 755.758166][T16957] erofs: (device loop2): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 755.767452][T16957] erofs: (device loop2): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 755.776804][T16957] syz.2.1336: attempt to access beyond end of device [ 755.776804][T16957] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 755.790688][T16957] syz.2.1336: attempt to access beyond end of device [ 755.790688][T16957] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 755.805578][T16957] syz.2.1336: attempt to access beyond end of device [ 755.805578][T16957] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 755.820371][T16957] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639] [ 755.831404][T16957] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 755.842088][T16957] erofs: (device loop2): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 755.851269][T16957] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 755.862248][T16957] erofs: (device loop2): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 755.871528][T16957] erofs: (device loop2): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 755.880941][T16957] syz.2.1336: attempt to access beyond end of device [ 755.880941][T16957] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 755.894669][T16957] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537] [ 756.104984][T16964] loop9: detected capacity change from 0 to 2048 [ 756.194960][T16964] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 756.292484][ T27] audit: type=1800 audit(1759033074.761:98): pid=16964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1341" name="file1" dev="loop9" ino=1346 res=0 errno=0 [ 756.370572][T16970] loop2: detected capacity change from 0 to 128 [ 756.423981][T16970] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 756.537599][T16970] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 757.634907][ T27] audit: type=1804 audit(1759033076.101:99): pid=16970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1346" name="/newroot/29/bus/bus" dev="loop2" ino=1048720 res=1 errno=0 [ 759.527671][T11723] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 760.822218][T16992] loop2: detected capacity change from 0 to 512 [ 760.877453][T16992] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 760.879809][T16995] loop9: detected capacity change from 0 to 128 [ 760.939274][T16992] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.1353: bg 0: block 5: invalid block bitmap [ 760.984050][T16995] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 760.998549][T16995] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 761.039765][T16992] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 761.207447][T16992] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1353: invalid indirect mapped block 3 (level 2) [ 761.606666][T17010] syz_tun: entered allmulticast mode [ 761.682846][T16992] EXT4-fs (loop2): 2 truncates cleaned up [ 761.926556][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 761.937288][T16992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.077923][T16992] EXT4-fs (loop2): shut down requested (2) [ 762.470487][T15822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.519262][T12328] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 762.565614][T17024] loop9: detected capacity change from 0 to 1024 [ 762.577834][T12328] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 762.600881][T17024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 762.644205][T17024] ext4: Unknown parameter 'smackfshat' [ 762.716199][T17034] loop2: detected capacity change from 0 to 8 [ 763.755294][T17034] SQUASHFS error: Unable to read inode 0x11f [ 763.795526][T17031] fido_id[17031]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 768.006005][T17056] loop8: detected capacity change from 0 to 8 [ 768.080599][T17056] SQUASHFS error: Failed to read block 0x260685: -5 [ 768.107671][T17056] SQUASHFS error: Unable to read metadata cache entry [260685] [ 768.115399][T17056] SQUASHFS error: Unable to read directory block [260685:0] [ 774.953510][T17103] loop8: detected capacity change from 0 to 256 [ 774.980419][T17103] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 775.007413][T17103] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 775.091987][T17103] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 778.430839][T17132] loop9: detected capacity change from 0 to 1024 [ 778.458127][T17132] ext4: Unknown parameter 'nouser_xattr' [ 779.135374][ T27] audit: type=1326 audit(1759033097.601:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 779.277421][ T27] audit: type=1326 audit(1759033097.601:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 779.418916][ T27] audit: type=1326 audit(1759033097.661:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 779.419308][T15680] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 779.442197][ T27] audit: type=1326 audit(1759033097.661:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 779.605691][ T27] audit: type=1326 audit(1759033097.661:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 779.687486][ T27] audit: type=1326 audit(1759033097.661:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 780.688314][ T27] audit: type=1326 audit(1759033097.661:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 780.737495][ T27] audit: type=1326 audit(1759033097.671:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 780.762035][ T27] audit: type=1326 audit(1759033097.671:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 780.796593][ T27] audit: type=1326 audit(1759033097.671:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17142 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 793.588385][T17246] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1404'. [ 803.376803][T17285] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1413'. [ 804.619955][T17290] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1411'. [ 804.646538][T17290] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1411'. [ 804.778583][T17293] loop2: detected capacity change from 0 to 1024 [ 804.806858][T17293] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size [ 807.383918][T17312] loop2: detected capacity change from 0 to 8 [ 807.876381][T17312] SQUASHFS error: Unable to read directory block [631:72] [ 808.997416][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.003877][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 826.183441][ T27] audit: type=1326 audit(1759033144.631:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17416 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 826.286877][ T27] audit: type=1326 audit(1759033144.641:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17416 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 826.377849][ T27] audit: type=1326 audit(1759033144.641:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17416 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 826.447600][ T27] audit: type=1326 audit(1759033144.641:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17416 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 826.512929][ T27] audit: type=1326 audit(1759033144.641:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17416 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6c992af79 code=0x7ffc0000 [ 826.530644][T17421] loop2: detected capacity change from 0 to 128 [ 826.570399][T17421] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 826.606071][ T27] audit: type=1326 audit(1759033144.641:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17416 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 826.617989][T17421] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 826.687380][ T27] audit: type=1326 audit(1759033144.641:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17416 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 826.884066][ T2926] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 826.928255][ T27] audit: type=1326 audit(1759033144.641:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17416 comm="syz.2.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c998eec9 code=0x7ffc0000 [ 829.547982][ T5797] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 829.629538][T17446] binder: 17445:17446 unknown command 0 [ 829.635626][T17446] binder: 17445:17446 ioctl c0306201 2000000002c0 returned -22 [ 829.819860][T17448] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1447'. [ 830.629969][ T5797] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 830.648901][ T5797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.683137][ T5797] usb 3-1: config 0 has no interface number 0 [ 830.697594][ T5797] usb 3-1: config 0 interface 11 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 830.737340][ T5797] usb 3-1: config 0 interface 11 has no altsetting 0 [ 830.755390][ T5797] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 830.786175][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.819306][ T5797] usb 3-1: config 0 descriptor?? [ 830.837961][ T5797] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 830.859881][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 87 [ 830.877414][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 7 [ 830.904571][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 830.927787][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 830.946092][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 830.967771][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 830.975925][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 830.997597][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 831.026163][ T5797] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 832.007205][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 832.007865][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 832.007945][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 832.008021][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 832.008092][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 832.008167][ T5797] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 832.010861][ T5797] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 832.348748][T17438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.377835][T17438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.328532][T12328] usb 3-1: USB disconnect, device number 4 [ 833.351970][T12328] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 833.398095][T12328] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 833.421775][T12328] keyspan 3-1:0.11: device disconnected [ 834.393508][T17497] loop2: detected capacity change from 0 to 164 [ 834.461271][T17497] Unable to read rock-ridge attributes [ 836.741213][T17515] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1456'. [ 836.899093][T14856] Bluetooth: hci3: command tx timeout [ 838.360755][T17558] loop9: detected capacity change from 0 to 512 [ 838.447604][T17558] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 838.542875][T17558] EXT4-fs error (device loop9): ext4_validate_block_bitmap:430: comm syz.9.1452: bg 0: block 5: invalid block bitmap [ 838.644195][T17558] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 838.682649][T17558] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1452: invalid indirect mapped block 3 (level 2) [ 838.733613][T17558] EXT4-fs (loop9): 2 truncates cleaned up [ 838.769996][T17558] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.964512][T17558] EXT4-fs (loop9): shut down requested (2) [ 840.693011][T12319] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.848926][T17594] loop9: detected capacity change from 0 to 8 [ 844.911687][T17594] SQUASHFS error: Failed to read block 0x4de: -5 [ 844.940450][T17594] SQUASHFS error: Failed to read block 0x4de: -5 [ 845.007915][ T27] audit: type=1800 audit(1759033419.469:118): pid=17594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1464" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 845.468877][ T27] audit: type=1326 audit(1759033419.939:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.2.1470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6c998eec9 code=0x0 [ 845.741726][T17613] loop9: detected capacity change from 0 to 512 [ 845.775683][T17613] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 845.993431][T17618] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1467'. [ 846.068521][T17613] EXT4-fs error (device loop9): ext4_validate_block_bitmap:430: comm syz.9.1471: bg 0: block 5: invalid block bitmap [ 846.102410][T17613] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 846.114916][T17613] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1471: invalid indirect mapped block 3 (level 2) [ 846.135772][T17613] EXT4-fs (loop9): 2 truncates cleaned up [ 846.149321][T17613] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.182926][T17613] EXT4-fs (loop9): shut down requested (2) [ 847.327461][T12319] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.945500][ T27] audit: type=1326 audit(1759033423.249:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17634 comm="syz.9.1476" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9aa58eec9 code=0x0 [ 849.998067][T17640] loop9: detected capacity change from 0 to 1024 [ 850.088701][T17640] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 850.358916][T12319] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.896247][T17653] loop2: detected capacity change from 0 to 8 [ 850.903201][T17653] squashfs: Unknown parameter 'Ý' [ 859.288325][T17689] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1483'. [ 861.584231][T17706] loop9: detected capacity change from 0 to 8 [ 861.608331][T17706] squashfs: Unknown parameter 'Ý' [ 862.564222][T17592] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 869.138614][T17732] IPv6: sit1: Disabled Multicast RS [ 869.144434][T17732] sit1: entered allmulticast mode [ 870.547787][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.554157][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.320643][T17743] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1496'. [ 874.079217][T17756] loop9: detected capacity change from 0 to 1024 [ 876.400727][T17769] loop9: detected capacity change from 0 to 764 [ 876.754730][ T27] audit: type=1326 audit(1759033707.201:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17768 comm="syz.9.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aa58eec9 code=0x7ffc0000 [ 876.898117][ T27] audit: type=1326 audit(1759033707.211:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17768 comm="syz.9.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aa58eec9 code=0x7ffc0000 [ 880.080279][T17787] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1510'. [ 886.773404][T17813] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1516'. [ 891.493924][T17828] loop2: detected capacity change from 0 to 8 [ 891.501040][T17828] squashfs: Unknown parameter 'Ý' [ 891.960363][T17829] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 895.429663][T17849] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1519'. [ 900.572104][T17882] loop9: detected capacity change from 0 to 512 [ 900.630623][T17882] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 900.723426][T17882] EXT4-fs (loop9): 1 truncate cleaned up [ 900.778276][T17882] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 901.683397][T12319] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.425022][T17898] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1532'. [ 903.968539][T17915] loop2: detected capacity change from 0 to 128 [ 904.194045][T17915] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 904.300883][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1536'. [ 904.642173][T17915] System zones: 1-3, 19-19, 35-36 [ 905.101748][T17915] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 905.116135][T17922] syz_tun (unregistering): left allmulticast mode [ 905.261875][T17915] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 906.046656][T15822] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 914.186883][T17972] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1543'. [ 917.681037][T17994] x_tables: duplicate entry at hook 3 [ 918.990900][T17996] loop2: detected capacity change from 0 to 128 [ 919.030376][T17996] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 919.130862][T17996] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 920.277731][T11725] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 925.279294][T18014] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1556'. [ 927.439080][T18032] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 933.309712][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.316178][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.907065][T18070] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1568'. [ 941.228828][T18078] x_tables: duplicate entry at hook 3 [ 947.410895][T18101] loop9: detected capacity change from 0 to 128 [ 947.598221][T18101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 947.718032][T18101] System zones: 1-3, 19-19, 35-36 [ 947.786537][T18101] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 947.887483][T18101] ext4 filesystem being mounted at /207/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 949.640781][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 950.924378][T18131] x_tables: duplicate entry at hook 3 [ 953.010788][T18141] loop9: detected capacity change from 0 to 128 [ 953.025551][T18141] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 953.079336][T18141] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 953.301767][ T1114] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 960.394113][T18174] x_tables: duplicate entry at hook 3 [ 970.247597][T18215] x_tables: duplicate entry at hook 3 [ 973.800243][T18237] loop2: detected capacity change from 0 to 8192 [ 983.495876][T18280] loop2: detected capacity change from 0 to 8 [ 983.997600][T18280] squashfs: Unknown parameter 'Ý' [ 984.903449][T18263] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 986.945980][T18302] loop9: detected capacity change from 0 to 1024 [ 987.029020][T18302] EXT4-fs: Ignoring removed orlov option [ 987.067109][T18302] EXT4-fs (loop9): can't mount with commit=1, fs mounted w/o journal [ 988.987409][T18330] loop2: detected capacity change from 0 to 1024 [ 990.962288][T18330] hfsplus: found bad thread record in catalog [ 992.649568][ T48] hfsplus: b-tree write err: -5, ino 4 [ 993.312336][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.321887][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.950889][T18358] loop2: detected capacity change from 0 to 128 [ 995.006097][T18358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 995.067618][T18358] System zones: 1-3, 19-19, 35-36 [ 995.112479][T18358] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 995.389260][T18366] x_tables: duplicate entry at hook 3 [ 996.681018][T18358] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 998.031089][T15822] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1003.687189][T18405] loop9: detected capacity change from 0 to 8 [ 1003.720206][T18405] squashfs: Unknown parameter 'Ý' [ 1004.774524][T18310] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1007.775271][T18424] loop2: detected capacity change from 0 to 1024 [ 1007.817710][T18424] ext4: Unknown parameter 'nouser_xattr' [ 1015.991715][T12328] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1016.296346][T18483] loop9: detected capacity change from 0 to 256 [ 1016.335632][T18483] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1016.387693][T18483] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1016.396280][T12328] usb 10-1: device not accepting address 4, error -71 [ 1016.455300][T18483] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1023.700712][T18513] loop9: detected capacity change from 0 to 128 [ 1023.741876][T18513] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1023.761530][T18513] System zones: 1-3, 19-19, 35-36 [ 1025.331531][T18513] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1025.376824][T18513] ext4 filesystem being mounted at /229/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.620276][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1027.695402][T18537] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1027.858580][T18542] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1029.028908][T18552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1667'. [ 1029.816103][T18554] loop2: detected capacity change from 0 to 128 [ 1029.868640][T18554] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1029.947532][T18554] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1030.032437][T11731] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1031.385731][T18566] loop9: detected capacity change from 0 to 8 [ 1031.392580][T18566] squashfs: Unknown parameter 'Ý' [ 1032.270478][T18511] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1036.734923][T18597] loop2: detected capacity change from 0 to 512 [ 1036.782565][T18597] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1036.973846][T18597] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1037.018964][T18597] EXT4-fs (loop2): 1 truncate cleaned up [ 1037.026517][T18597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1037.236343][T15822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.889546][T18638] binder: 18634:18638 ioctl c0306201 0 returned -14 [ 1047.781396][T18656] loop2: detected capacity change from 0 to 8 [ 1047.850073][T18656] SQUASHFS error: Unable to read inode 0xa7 [ 1048.064339][T18656] SQUASHFS error: Unable to read directory block [631:26] [ 1049.237426][T18672] x_tables: duplicate entry at hook 3 [ 1052.736541][T18683] loop2: detected capacity change from 0 to 2048 [ 1052.883056][T18683] loop2: p1 < > p3 [ 1052.892446][T18683] loop2: p3 size 134217728 extends beyond EOD, truncated [ 1054.743175][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.749707][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.982459][T18594] udevd[18594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1054.984299][T18694] udevd[18694]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1058.167742][T18723] loop2: detected capacity change from 0 to 8 [ 1058.175241][T18723] squashfs: Unknown parameter 'Ý' [ 1058.998778][T18594] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1060.958546][T18742] x_tables: duplicate entry at hook 3 [ 1062.229122][T18752] loop9: detected capacity change from 0 to 1024 [ 1062.468049][ T41] hfsplus: b-tree write err: -5, ino 4 [ 1064.174850][T18764] loop9: detected capacity change from 0 to 512 [ 1064.221446][T18764] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1064.334220][T18764] EXT4-fs error (device loop9): ext4_validate_block_bitmap:430: comm syz.9.1708: bg 0: block 5: invalid block bitmap [ 1064.383834][T18764] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 1064.459412][T18764] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1708: invalid indirect mapped block 3 (level 2) [ 1064.530662][T18764] EXT4-fs (loop9): 2 truncates cleaned up [ 1064.567939][T18764] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.781540][T12319] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.433394][T18788] x_tables: duplicate entry at hook 3 [ 1069.796214][T18792] loop2: detected capacity change from 0 to 128 [ 1069.863784][T18792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1069.887362][T18792] System zones: 1-3, 19-19, 35-36 [ 1069.929437][T18792] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1070.017726][T18792] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.894475][T15822] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1075.851888][T18827] loop2: detected capacity change from 0 to 1024 [ 1075.867901][T18827] ext4: Unknown parameter 'nouser_xattr' [ 1076.638352][T18594] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1079.153070][T18842] x_tables: duplicate entry at hook 3 [ 1085.650882][T18880] x_tables: duplicate entry at hook 3 [ 1085.714448][T18885] loop2: detected capacity change from 0 to 256 [ 1085.768592][T18885] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1085.847246][T18885] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1085.957795][T18885] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x256728a3, utbl_chksum : 0xe619d30d) [ 1097.508750][T18934] x_tables: duplicate entry at hook 3 [ 1101.143948][T18961] netlink: 'syz.3.1741': attribute type 11 has an invalid length. [ 1101.590092][T18963] loop9: detected capacity change from 0 to 128 [ 1101.642388][T18963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1101.726544][T18963] System zones: 1-3, 19-19, 35-36 [ 1101.797377][T18963] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1101.927741][T18963] ext4 filesystem being mounted at /248/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.428894][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1105.562549][T18986] loop9: detected capacity change from 0 to 1024 [ 1105.627938][T18986] EXT4-fs: Ignoring removed orlov option [ 1105.668123][T18986] EXT4-fs (loop9): can't mount with commit=1, fs mounted w/o journal [ 1107.547799][T19000] loop9: detected capacity change from 0 to 1024 [ 1109.581756][T19013] loop9: detected capacity change from 0 to 128 [ 1109.609011][T19013] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1109.661448][T19013] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1109.700147][ T48] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1109.908679][T19017] loop9: detected capacity change from 0 to 128 [ 1109.980769][T19017] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1110.027456][T19017] System zones: 1-3, 19-19, 35-36 [ 1110.042886][T19017] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1110.077796][T19017] ext4 filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1112.136027][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1112.870578][T19036] loop2: detected capacity change from 0 to 1024 [ 1112.877947][T19036] ext4: Unknown parameter 'nouser_xattr' [ 1113.450990][T18967] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1114.070693][T19046] x_tables: duplicate entry at hook 3 [ 1116.183677][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.190938][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.268393][T15495] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1119.483744][T15495] usb 10-1: Using ep0 maxpacket: 32 [ 1119.540908][T15495] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.604375][T15495] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.629014][T15495] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1119.667175][T15495] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.700091][T15495] usb 10-1: config 0 descriptor?? [ 1119.968114][T19100] loop2: detected capacity change from 0 to 128 [ 1120.031585][T19100] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1120.082431][T19100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1120.199073][T15495] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 1120.573911][T12328] usb 10-1: USB disconnect, device number 6 [ 1122.134807][T19131] x_tables: duplicate entry at hook 3 [ 1122.703948][T19134] loop9: detected capacity change from 0 to 128 [ 1123.660764][T19134] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1123.905670][T19134] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1124.054098][T19134] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1124.618716][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1125.181213][T19154] loop9: detected capacity change from 0 to 128 [ 1126.567298][T19154] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1126.609653][T19154] System zones: 1-3, 19-19, 35-36 [ 1126.628870][T19154] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1126.799074][T19154] ext4 filesystem being mounted at /258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.318971][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1134.738094][T19211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'. [ 1137.777258][ T27] audit: type=1326 audit(1759033968.241:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19220 comm="syz.8.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7318eec9 code=0x7ffc0000 [ 1137.958939][T19222] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1789'. [ 1138.584548][ T27] audit: type=1326 audit(1759033968.251:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19220 comm="syz.8.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7318eec9 code=0x7ffc0000 [ 1138.684226][ T27] audit: type=1326 audit(1759033968.251:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19220 comm="syz.8.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fce7318eec9 code=0x7ffc0000 [ 1138.764826][ T27] audit: type=1326 audit(1759033968.251:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19220 comm="syz.8.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7318eec9 code=0x7ffc0000 [ 1138.836146][ T27] audit: type=1326 audit(1759033968.251:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19220 comm="syz.8.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7318eec9 code=0x7ffc0000 [ 1143.734112][T19273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1805'. [ 1148.506833][T19293] binder: 19291:19293 ioctl 4b61 0 returned -22 [ 1159.408001][T19342] loop2: detected capacity change from 0 to 8 [ 1159.433778][T19342] squashfs: Unknown parameter 'Ý' [ 1160.560179][T19281] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1167.678067][T19379] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1828'. [ 1172.350584][T19401] loop2: detected capacity change from 0 to 1024 [ 1173.028565][ T27] audit: type=1800 audit(1759034003.441:128): pid=19401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1826" name="file0" dev="loop2" ino=2 res=0 errno=0 [ 1173.784946][T19411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1175.588853][T19420] x_tables: duplicate entry at hook 3 [ 1178.037541][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.051941][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.971427][T19444] loop2: detected capacity change from 0 to 128 [ 1182.982167][T19444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1183.007421][T19444] System zones: 1-3, 19-19, 35-36 [ 1183.028033][T19444] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1183.176293][T19444] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.619013][T15822] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1184.081046][T19456] loop2: detected capacity change from 0 to 8 [ 1184.087913][T19456] squashfs: Unknown parameter 'Ý' [ 1184.917344][T19440] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1186.223231][T19466] loop9: detected capacity change from 0 to 1024 [ 1186.230312][T19466] ext4: Unknown parameter 'nouser_xattr' [ 1186.934369][T19440] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1187.187670][T18509] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 1193.917306][T19517] x_tables: duplicate entry at hook 3 [ 1194.744058][T19525] loop2: detected capacity change from 0 to 128 [ 1194.827291][T19525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1194.835542][T19525] System zones: 1-3, 19-19, 35-36 [ 1195.827444][T19525] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1196.788353][T19525] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1197.282207][T15822] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1200.159178][T19552] loop9: detected capacity change from 0 to 1024 [ 1200.167740][T19552] ext4: Unknown parameter 'nouser_xattr' [ 1203.889264][T19575] x_tables: duplicate entry at hook 3 [ 1213.633387][T19621] loop9: detected capacity change from 0 to 128 [ 1215.241688][T19621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1215.257396][T19621] System zones: 1-3, 19-19, 35-36 [ 1215.284564][T19621] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1215.318294][T19621] ext4 filesystem being mounted at /276/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1215.670873][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1215.963166][T19635] loop9: detected capacity change from 0 to 1024 [ 1216.090813][T19635] hfsplus: request for non-existent node 16777216 in B*Tree [ 1216.127274][T19635] hfsplus: request for non-existent node 16777216 in B*Tree [ 1216.135717][T19635] hfsplus: request for non-existent node 16777216 in B*Tree [ 1216.255832][T19635] hfsplus: request for non-existent node 16777216 in B*Tree [ 1216.409849][T11731] hfsplus: request for non-existent node 16777216 in B*Tree [ 1216.427191][T11731] hfsplus: request for non-existent node 16777216 in B*Tree [ 1223.427358][ T5841] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1225.241828][ T5841] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 1225.257440][ T5841] usb 10-1: config 0 has no interface number 0 [ 1225.286968][ T5841] usb 10-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 1225.327282][ T5841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.335578][ T5841] usb 10-1: Product: syz [ 1225.340762][ T5841] usb 10-1: Manufacturer: syz [ 1225.345482][ T5841] usb 10-1: SerialNumber: syz [ 1225.368652][ T5841] usb 10-1: config 0 descriptor?? [ 1225.384620][ T5841] ftdi_sio 10-1:0.117: FTDI USB Serial Device converter detected [ 1225.398416][ T5841] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 1225.594821][ T5841] usb 10-1: USB disconnect, device number 7 [ 1225.613090][ T5841] ftdi_sio 10-1:0.117: device disconnected [ 1227.636176][T19699] loop9: detected capacity change from 0 to 8 [ 1227.671801][T19699] squashfs: Unknown parameter 'Ý' [ 1228.877241][T19678] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1234.589987][T19724] loop9: detected capacity change from 0 to 8192 [ 1235.938515][T19734] loop2: detected capacity change from 0 to 1024 [ 1236.007204][T19734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1236.528138][ T27] audit: type=1800 audit(1759034066.967:129): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1890" name="file1" dev="loop2" ino=839 res=0 errno=0 [ 1240.057588][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.064039][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.283131][T19773] loop2: detected capacity change from 0 to 8192 [ 1251.025858][T19818] loop9: detected capacity change from 0 to 1024 [ 1253.533520][T19836] loop9: detected capacity change from 0 to 2048 [ 1253.570105][T19836] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 1253.647284][T19836] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1253.670912][T19836] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 1253.717997][T19836] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1253.798701][T19836] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 1253.850695][T19836] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1253.881632][T19836] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 1253.966656][T19836] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1254.007724][T19836] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1) [ 1254.407711][T19852] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1918'. [ 1259.135596][T19875] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1913'. [ 1260.368284][T19881] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1925'. [ 1264.948937][T19910] loop2: detected capacity change from 0 to 8 [ 1264.997742][T19910] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1265.072270][T19910] SQUASHFS error: Failed to read block 0x91: -5 [ 1265.157412][T19910] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1265.164698][T19910] SQUASHFS error: Unable to read inode 0x11f [ 1266.964099][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1935'. [ 1267.663842][T19935] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1936'. [ 1272.531409][T19947] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1939'. [ 1273.448277][T19959] x_tables: duplicate entry at hook 3 [ 1275.371182][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1945'. [ 1288.382434][T20009] x_tables: duplicate entry at hook 3 [ 1294.745480][T20028] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1952'. [ 1297.476107][T20039] loop2: detected capacity change from 0 to 1024 [ 1297.582510][T20039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1297.609951][T20039] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1298.728546][T20049] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1298.756402][T20049] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 476 with error 28 [ 1298.774431][T20049] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1298.774431][T20049] [ 1298.787594][T20049] EXT4-fs (loop2): Total free blocks count 0 [ 1298.793955][T20049] EXT4-fs (loop2): Free/Dirty block details [ 1298.800353][T20049] EXT4-fs (loop2): free_blocks=4293918720 [ 1298.806588][T20049] EXT4-fs (loop2): dirty_blocks=624 [ 1298.812843][T20049] EXT4-fs (loop2): Block reservation details [ 1298.857318][T20049] EXT4-fs (loop2): i_reserved_data_blocks=39 [ 1301.017578][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.024060][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.211681][ T48] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 476 with max blocks 2048 with error 28 [ 1302.901361][ T48] EXT4-fs: 7 callbacks suppressed [ 1302.901378][ T48] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2528 with max blocks 1664 with error 28 [ 1302.977133][ T48] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1302.977133][ T48] [ 1302.986851][ T48] EXT4-fs (loop2): Total free blocks count 0 [ 1303.027477][ T48] EXT4-fs (loop2): Free/Dirty block details [ 1303.043482][ T48] EXT4-fs (loop2): free_blocks=4293918720 [ 1303.073108][ T48] EXT4-fs (loop2): dirty_blocks=1696 [ 1303.078613][ T48] EXT4-fs (loop2): Block reservation details [ 1303.084729][ T48] EXT4-fs (loop2): i_reserved_data_blocks=106 [ 1303.299902][T15822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.951663][T20067] x_tables: duplicate entry at hook 3 [ 1312.952684][T20095] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1967'. [ 1315.463527][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1315.479840][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1315.488743][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1315.513976][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1315.523070][ T5805] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1315.532225][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1318.727279][T18509] Bluetooth: hci4: command tx timeout [ 1318.734544][T20098] chnl_net:caif_netlink_parms(): no params data found [ 1320.737291][T18509] Bluetooth: hci4: command tx timeout [ 1320.790707][T20098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.838793][T20098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.886177][T20098] bridge_slave_0: entered allmulticast mode [ 1320.917420][T20098] bridge_slave_0: entered promiscuous mode [ 1320.948283][T20098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.955479][T20098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.997368][T20098] bridge_slave_1: entered allmulticast mode [ 1321.030394][T20098] bridge_slave_1: entered promiscuous mode [ 1321.251807][T20098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.296749][T20098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.535227][T20098] team0: Port device team_slave_0 added [ 1321.570495][T20098] team0: Port device team_slave_1 added [ 1321.814651][T20098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.867410][T20098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.135742][T20347] x_tables: duplicate entry at hook 3 [ 1322.905807][T20098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.907091][T18509] Bluetooth: hci4: command tx timeout [ 1325.384307][T18509] Bluetooth: hci4: command tx timeout [ 1325.480137][T20098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.502739][T20098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.577111][T20098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.021662][T11733] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.082510][T20098] hsr_slave_0: entered promiscuous mode [ 1326.137824][T20098] hsr_slave_1: entered promiscuous mode [ 1326.157499][T20098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1326.165113][T20098] Cannot create hsr debugfs directory [ 1326.325593][T11733] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.571623][T11733] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.910709][T20428] loop9: detected capacity change from 0 to 8 [ 1326.917849][T20428] squashfs: Unknown parameter 'Ý' [ 1327.951895][T11733] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.300905][T20457] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1979'. [ 1328.311849][T20457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1979'. [ 1337.006598][T20548] xt_CONNSECMARK: invalid mode: 0 [ 1337.732808][ T27] audit: type=1326 audit(1759034423.417:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20543 comm="syz.8.1987" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce7318eec9 code=0x0 [ 1338.031375][T20098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1340.191743][T20567] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1989'. [ 1341.161103][T20098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1341.191031][T20098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1341.290625][T20098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1343.052962][T11733] hsr_slave_0: left promiscuous mode [ 1343.060184][T11733] hsr_slave_1: left promiscuous mode [ 1343.078904][T11733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1343.086377][T11733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.118768][T11733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1343.126222][T11733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1343.158059][T11733] bridge_slave_1: left allmulticast mode [ 1343.163756][T11733] bridge_slave_1: left promiscuous mode [ 1343.187690][T11733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.206837][T11733] bridge_slave_0: left allmulticast mode [ 1343.217277][T11733] bridge_slave_0: left promiscuous mode [ 1343.223126][T11733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.393985][T11733] veth1_macvtap: left promiscuous mode [ 1343.403785][T11733] veth0_macvtap: left promiscuous mode [ 1343.415807][T11733] veth1_vlan: left promiscuous mode [ 1343.423024][T11733] veth0_vlan: left promiscuous mode [ 1345.224713][T20600] binder: 20597:20600 ioctl 4b61 0 returned -22 [ 1346.168598][T20600] binder_alloc: 20597: binder_alloc_buf, no vma [ 1347.024937][T20610] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1997'. [ 1347.035020][T20610] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1997'. [ 1353.286597][T11733] team0 (unregistering): Port device team_slave_1 removed [ 1353.500761][T11733] team0 (unregistering): Port device team_slave_0 removed [ 1353.708006][T11733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.915557][T11733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.190207][T20630] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1360.661271][T20656] loop9: detected capacity change from 0 to 1024 [ 1360.675367][T20656] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1361.544668][T20656] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0003] [ 1361.552944][T20656] System zones: 1-12 [ 1361.570734][T20656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.843711][T12319] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.942773][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.949960][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.100275][T20677] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2005'. [ 1365.110396][T20677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2005'. [ 1366.460703][T11733] bond0 (unregistering): Released all slaves [ 1366.729978][T20098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1366.811980][T20098] 8021q: adding VLAN 0 to HW filter on device team0 [ 1366.868756][T17550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.875916][T17550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1366.956308][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.963548][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1367.124561][T20098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1371.251624][T20098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1371.360057][T20098] veth0_vlan: entered promiscuous mode [ 1371.409314][T20098] veth1_vlan: entered promiscuous mode [ 1371.491858][T20098] veth0_macvtap: entered promiscuous mode [ 1371.514737][T20098] veth1_macvtap: entered promiscuous mode [ 1371.573209][T20098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.604706][T20098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.627073][T20098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.657226][T20098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.678181][T20098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1371.697031][T20098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.733749][T20098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1371.756580][T20098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.788998][T20098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.817046][T20098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.847183][T20098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.877203][T20098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1371.907170][T20098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1371.928725][T20098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.980657][T20098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.017052][T20098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.025916][T20098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.057081][T20098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.245168][T17552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.210718][T17552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.335957][T20717] loop9: detected capacity change from 0 to 128 [ 1373.348893][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.372627][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.439687][T20717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1373.492109][T20717] System zones: 1-3, 19-19, 35-36 [ 1374.988547][T20717] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1375.024245][T20717] ext4 filesystem being mounted at /316/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1376.983139][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1384.737126][T20762] Bluetooth: hci4: command tx timeout [ 1386.800123][ T27] audit: type=1326 audit(1759034473.267:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d58eec9 code=0x7ffc0000 [ 1386.892851][ T27] audit: type=1326 audit(1759034473.297:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d58eec9 code=0x7ffc0000 [ 1386.991254][ T27] audit: type=1326 audit(1759034473.307:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f947d590de7 code=0x7ffc0000 [ 1387.053064][ T27] audit: type=1326 audit(1759034473.307:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f947d590d5c code=0x7ffc0000 [ 1387.079499][T20784] loop0: detected capacity change from 0 to 128 [ 1387.128820][T20784] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1387.143215][T20784] System zones: 1-3, 19-19, 35-36 [ 1387.157280][ T27] audit: type=1326 audit(1759034473.307:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f947d590c94 code=0x7ffc0000 [ 1387.180990][ T27] audit: type=1326 audit(1759034473.307:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f947d590c94 code=0x7ffc0000 [ 1387.198604][T20784] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1387.204247][ T27] audit: type=1326 audit(1759034473.307:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f947d58db2a code=0x7ffc0000 [ 1387.239105][ T27] audit: type=1326 audit(1759034473.317:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20776 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d58eec9 code=0x7ffc0000 [ 1387.290263][T20784] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.389406][T20790] loop2: detected capacity change from 0 to 512 [ 1389.065651][T20790] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.2027: corrupted in-inode xattr: invalid ea_ino [ 1389.612436][T20790] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2027: couldn't read orphan inode 15 (err -117) [ 1389.634204][T20098] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1389.684146][T20790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1392.299528][T15822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.551224][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 1424.058941][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.065858][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1435.842043][T21159] loop9: detected capacity change from 0 to 8 [ 1435.874981][T21159] squashfs: Unknown parameter 'Ý' [ 1436.911034][T20911] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1441.077390][T20893] Bluetooth: hci4: command 0x0406 tx timeout [ 1453.514546][T21252] loop9: detected capacity change from 0 to 128 [ 1454.617503][T21252] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1454.710244][T21252] System zones: 1-3, 19-19, 35-36 [ 1455.039797][T21252] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1455.200287][T21252] ext4 filesystem being mounted at /335/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1456.180166][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1463.177858][T21301] loop0: detected capacity change from 0 to 8 [ 1463.184848][T21301] squashfs: Unknown parameter 'Ý' [ 1465.288766][T20893] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1465.310839][T20893] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1465.319791][T20893] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1465.331246][T20893] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1465.406338][T20893] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1465.424246][T20893] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1467.341563][T21313] chnl_net:caif_netlink_parms(): no params data found [ 1468.907269][T20762] Bluetooth: hci1: command tx timeout [ 1469.562742][T21313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.592280][T21313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.617535][T21313] bridge_slave_0: entered allmulticast mode [ 1469.636487][T21313] bridge_slave_0: entered promiscuous mode [ 1469.827424][T21313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.841476][T21313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.870014][T21313] bridge_slave_1: entered allmulticast mode [ 1469.894100][T21313] bridge_slave_1: entered promiscuous mode [ 1470.085568][T21313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.126865][T21313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.243202][T17546] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.563357][T17546] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.675830][T21313] team0: Port device team_slave_0 added [ 1470.724490][T21313] team0: Port device team_slave_1 added [ 1470.924987][T17546] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.991904][T20893] Bluetooth: hci1: command tx timeout [ 1471.034007][T21313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.054063][T21605] loop9: detected capacity change from 0 to 128 [ 1471.075504][T21313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.075539][T21313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1471.078496][T21313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1471.078506][T21313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.078521][T21313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1471.184845][T17546] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.202444][T21605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1471.202516][T21605] System zones: 1-3, 19-19, 35-36 [ 1471.205900][T21605] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1471.220555][T21605] ext4 filesystem being mounted at /339/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1471.433883][T21313] hsr_slave_0: entered promiscuous mode [ 1471.440132][T21313] hsr_slave_1: entered promiscuous mode [ 1471.440997][T21313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1471.441109][T21313] Cannot create hsr debugfs directory [ 1472.170916][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1473.797432][T20893] Bluetooth: hci1: command tx timeout [ 1475.445427][T21779] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2126'. [ 1475.454844][T21779] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2126'. [ 1476.399899][T20893] Bluetooth: hci1: command tx timeout [ 1477.589800][T21313] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1480.599860][T21313] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1480.658592][T21313] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1480.759717][T21313] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1481.169802][T17546] hsr_slave_0: left promiscuous mode [ 1481.176201][T17546] hsr_slave_1: left promiscuous mode [ 1481.237699][T17546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1481.245281][T17546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1481.260733][T17546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1481.277658][T17546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1481.300880][T17546] bridge_slave_1: left allmulticast mode [ 1481.306855][T17546] bridge_slave_1: left promiscuous mode [ 1481.327510][T17546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.346874][T17546] bridge_slave_0: left allmulticast mode [ 1481.361911][T17546] bridge_slave_0: left promiscuous mode [ 1481.383519][T17546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.467747][T17546] veth1_macvtap: left promiscuous mode [ 1481.473373][T17546] veth0_macvtap: left promiscuous mode [ 1481.497629][T17546] veth1_vlan: left promiscuous mode [ 1481.503087][T17546] veth0_vlan: left promiscuous mode [ 1481.947818][T21872] loop0: detected capacity change from 0 to 128 [ 1482.017860][T21872] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1482.052780][T21872] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1482.317479][T11725] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1482.376017][T21878] loop9: detected capacity change from 0 to 128 [ 1482.402130][T21878] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1482.417776][T21878] System zones: 1-3, 19-19, 35-36 [ 1482.436573][T21878] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1482.457859][T21878] ext4 filesystem being mounted at /346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1484.189052][T17546] team0 (unregistering): Port device team_slave_1 removed [ 1484.380342][T17546] team0 (unregistering): Port device team_slave_0 removed [ 1484.526491][T17546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.688913][T17546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.828188][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.834712][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.307232][T21896] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2144'. [ 1485.316340][T21896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2144'. [ 1485.493152][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1486.316408][T21915] loop0: detected capacity change from 0 to 128 [ 1487.779323][T21915] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1487.819916][T21915] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1487.863508][T17550] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1488.056233][T21926] loop0: detected capacity change from 0 to 128 [ 1488.100606][T21926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1488.115537][T21926] System zones: 1-3, 19-19, 35-36 [ 1488.124859][T21926] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1488.153958][T21926] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1489.199163][T20098] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1489.323842][T17546] bond0 (unregistering): Released all slaves [ 1491.114933][T21313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.186534][T21313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.256488][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.263751][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1491.293272][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.300531][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1493.475045][T21313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1493.797180][T21967] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2154'. [ 1493.806536][T21967] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2154'. [ 1496.580986][T21313] veth0_vlan: entered promiscuous mode [ 1496.739038][T21313] veth1_vlan: entered promiscuous mode [ 1497.081569][T21313] veth0_macvtap: entered promiscuous mode [ 1497.122976][T21313] veth1_macvtap: entered promiscuous mode [ 1497.199000][T21313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1497.227231][T21313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.297636][T21313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1497.315737][T21313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.333125][T21313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1497.348349][T21313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.360866][T21313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1497.411294][T21313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.435850][T21313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.447079][T21313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.458440][T21313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.468650][T21313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.479610][T21313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.494471][T21313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1497.537856][T21313] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.546740][T21313] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.561375][T21313] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.571095][T21313] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.676673][T11725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.721169][T11725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1499.390664][T17550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.390688][T17550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1499.652921][T22065] loop0: detected capacity change from 0 to 128 [ 1499.665826][T22065] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1499.683952][T22065] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1499.714783][T20868] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1501.359664][T22097] loop9: detected capacity change from 0 to 128 [ 1501.377312][T22096] loop0: detected capacity change from 0 to 1024 [ 1501.617118][T22097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1501.625158][T22097] System zones: 1-3, 19-19, 35-36 [ 1501.699558][T22097] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1501.714631][T22097] ext4 filesystem being mounted at /354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1502.611741][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1503.961419][T22131] loop6: detected capacity change from 0 to 128 [ 1503.993342][T22131] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1504.056121][T22131] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1504.138021][T17546] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1507.093003][T22171] pim6reg1: entered promiscuous mode [ 1507.144555][T22171] pim6reg1: entered allmulticast mode [ 1507.304733][T22185] loop9: detected capacity change from 0 to 128 [ 1507.331860][T22185] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1507.512948][T22185] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1507.863111][T17552] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1508.534744][T22213] loop9: detected capacity change from 0 to 1024 [ 1510.513782][T22225] x_tables: duplicate entry at hook 3 [ 1512.574125][T22241] loop9: detected capacity change from 0 to 128 [ 1512.645588][T22241] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1512.740906][T22241] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1512.887908][T17552] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1514.137378][T22261] x_tables: duplicate entry at hook 3 [ 1520.315770][T22292] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2210'. [ 1521.786880][T22297] x_tables: duplicate entry at hook 3 [ 1527.287393][T22327] wg2: entered promiscuous mode [ 1527.297704][T22327] wg2: entered allmulticast mode [ 1527.453091][T22330] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2226'. [ 1529.627287][T22340] loop9: detected capacity change from 0 to 128 [ 1529.687402][T22340] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1529.695508][T22340] System zones: 1-3, 19-19, 35-36 [ 1529.739371][T22340] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1529.777950][T22340] ext4 filesystem being mounted at /368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1530.710059][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1531.163657][T22354] x_tables: duplicate entry at hook 3 [ 1532.089865][T22361] wg2: left promiscuous mode [ 1532.097779][T22361] wg2: left allmulticast mode [ 1532.108956][T22362] loop9: detected capacity change from 0 to 128 [ 1532.133570][T22361] wg2: entered promiscuous mode [ 1532.150815][T22361] wg2: entered allmulticast mode [ 1532.178091][T22362] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1532.228437][T22362] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1532.467358][ T48] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1532.795352][T22376] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2235'. [ 1536.871399][T22401] loop6: detected capacity change from 0 to 128 [ 1537.107039][T22401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1537.175179][T22401] System zones: 1-3, 19-19, 35-36 [ 1537.216767][T22401] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1537.387497][T22401] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1538.007875][T22412] x_tables: duplicate entry at hook 3 [ 1539.225421][T22421] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2244'. [ 1541.897968][T21313] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1542.605934][T22435] pim6reg1: entered promiscuous mode [ 1542.617678][T22435] pim6reg1: entered allmulticast mode [ 1545.460573][T22473] loop9: detected capacity change from 0 to 128 [ 1545.554035][T22473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1545.587484][T22473] System zones: 1-3, 19-19, 35-36 [ 1545.638592][T22473] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1545.689579][T22473] ext4 filesystem being mounted at /377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1546.266303][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.272909][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.250216][T12319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1552.063392][T22523] loop9: detected capacity change from 0 to 8 [ 1552.165587][T22523] squashfs: Unknown parameter 'Ý' [ 1553.088981][T22429] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1554.881908][T22538] loop9: detected capacity change from 0 to 8192 [ 1569.431235][T22605] pim6reg1: entered promiscuous mode [ 1569.436624][T22605] pim6reg1: entered allmulticast mode [ 1569.747547][T22619] loop6: detected capacity change from 0 to 8 [ 1569.754479][T22619] squashfs: Unknown parameter 'Ý' [ 1570.657440][T22429] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1573.337640][T22638] loop0: detected capacity change from 0 to 8 [ 1573.474031][T22638] squashfs: Unknown parameter 'Ý' [ 1576.019818][T22652] binder: 22650:22652 ioctl 4b61 0 returned -22 [ 1579.508159][T22673] loop6: detected capacity change from 0 to 8 [ 1579.515202][T22673] squashfs: Unknown parameter 'Ý' [ 1579.609659][T22429] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1581.989976][T22690] x_tables: duplicate entry at hook 3 [ 1585.213534][T22702] wg2: entered promiscuous mode [ 1585.231938][T22702] wg2: entered allmulticast mode [ 1586.168543][T22709] binder: 22704:22709 ioctl 4b61 0 returned -22 [ 1590.577022][T20762] Bluetooth: hci1: command 0x0406 tx timeout [ 1590.730670][T22729] loop9: detected capacity change from 0 to 1024 [ 1592.120958][T22741] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2309'. [ 1592.130021][T22741] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2309'. [ 1593.828973][T22756] loop6: detected capacity change from 0 to 128 [ 1594.121961][T22756] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1594.257226][T22756] System zones: 1-3, 19-19, 35-36 [ 1594.273531][T22756] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1594.307018][T22756] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1594.558593][T22761] x_tables: duplicate entry at hook 3 [ 1596.344958][T21313] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1599.211232][T22789] loop0: detected capacity change from 0 to 1024 [ 1603.137192][T22812] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2322'. [ 1603.147338][T22812] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2322'. [ 1606.824572][T22857] x_tables: duplicate entry at hook 3 [ 1607.710435][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.716781][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.937058][T22875] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2329'. [ 1613.159273][T22888] syz.8.2324[22888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1613.159575][T22888] syz.8.2324[22888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1613.566756][T22892] loop6: detected capacity change from 0 to 1024 [ 1616.543007][T22897] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2333'. [ 1616.552080][T22897] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2333'. [ 1622.144176][T22940] loop9: detected capacity change from 0 to 1024 [ 1623.299388][T22944] loop0: detected capacity change from 0 to 8 [ 1623.306358][T22944] squashfs: Unknown parameter 'Ý' [ 1625.578655][T22475] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1629.094120][T22969] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2344'. [ 1629.103998][T22969] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2344'. [ 1634.078619][T22988] loop6: detected capacity change from 0 to 1024 [ 1635.423399][T23001] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2354'. [ 1637.839771][T23014] binder: 23011:23014 ioctl 4b61 0 returned -22 [ 1638.130653][T23019] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2357'. [ 1638.139788][T23019] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2357'. [ 1643.776358][T23042] loop0: detected capacity change from 0 to 1024 [ 1645.205396][T23051] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2364'. [ 1652.781669][T23090] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2373'. [ 1653.641669][T23096] binder: 23092:23096 ioctl 4b61 0 returned -22 [ 1658.991706][T23129] loop6: detected capacity change from 0 to 8 [ 1658.998954][T23129] squashfs: Unknown parameter 'Ý' [ 1660.308778][T23136] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1661.131079][T23148] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2385'. [ 1662.467844][T23154] loop9: detected capacity change from 0 to 8 [ 1662.537759][T23154] squashfs: Unknown parameter 'Ý' [ 1669.917401][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.923762][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.827952][T20762] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1670.840638][T20762] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1670.857052][T20762] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1670.879365][T20762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1670.888323][T20762] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1670.895611][T20762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1672.724675][T23224] chnl_net:caif_netlink_parms(): no params data found [ 1673.537244][T20762] Bluetooth: hci3: command tx timeout [ 1674.899226][T23224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.911700][T23224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.937389][T23224] bridge_slave_0: entered allmulticast mode [ 1674.946062][T23224] bridge_slave_0: entered promiscuous mode [ 1675.249150][T23224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.295419][T23224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.319151][T23224] bridge_slave_1: entered allmulticast mode [ 1675.343424][T23224] bridge_slave_1: entered promiscuous mode [ 1675.626487][T20762] Bluetooth: hci3: command tx timeout [ 1676.113701][T23224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.439973][T23224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.981728][T23450] loop6: detected capacity change from 0 to 8 [ 1676.988857][T23450] squashfs: Unknown parameter 'Ý' [ 1677.160790][T23239] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1677.260341][T23224] team0: Port device team_slave_0 added [ 1677.458648][T23224] team0: Port device team_slave_1 added [ 1677.633853][T23224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.665070][T23224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1678.606006][T23224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1678.616818][T20762] Bluetooth: hci3: command tx timeout [ 1678.619926][T23224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1678.677349][T23224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1680.099855][T23224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1680.558561][T23224] hsr_slave_0: entered promiscuous mode [ 1680.657446][T20762] Bluetooth: hci3: command tx timeout [ 1680.677976][T23224] hsr_slave_1: entered promiscuous mode [ 1681.412793][T11733] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.040257][T11733] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.020367][T11733] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.645758][T11733] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.978442][T23224] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1690.459385][T23224] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1690.571767][T23224] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1690.921763][T23224] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1691.144116][T23676] loop6: detected capacity change from 0 to 8 [ 1691.150951][T23676] squashfs: Unknown parameter 'Ý' [ 1692.016125][T23228] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1692.788682][T23687] pim6reg1: entered promiscuous mode [ 1692.794059][T23687] pim6reg1: entered allmulticast mode [ 1693.128793][T23224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1693.458950][T23224] 8021q: adding VLAN 0 to HW filter on device team0 [ 1695.012416][T23224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1695.023884][T23224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1696.591948][T20867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.599165][T20867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1696.649038][T20867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.656255][T20867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1698.631244][T23224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1699.492217][T23743] loop6: detected capacity change from 0 to 8 [ 1699.499006][T23743] squashfs: Unknown parameter 'Ý' [ 1700.241368][T11733] hsr_slave_0: left promiscuous mode [ 1701.015227][T11733] hsr_slave_1: left promiscuous mode [ 1701.022790][T11733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1701.095988][T11733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1701.104791][T23718] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1701.205860][T11733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1701.234943][T11733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1701.318064][T11733] bridge_slave_1: left promiscuous mode [ 1701.323895][T11733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.417944][T11733] bridge_slave_0: left allmulticast mode [ 1701.423663][T11733] bridge_slave_0: left promiscuous mode [ 1701.465613][T11733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.605445][T11733] veth1_macvtap: left promiscuous mode [ 1701.611262][T11733] veth0_macvtap: left promiscuous mode [ 1701.617728][T11733] veth1_vlan: left promiscuous mode [ 1701.623124][T11733] veth0_vlan: left promiscuous mode [ 1707.655891][T11733] team0 (unregistering): Port device team_slave_1 removed [ 1707.830515][T11733] team0 (unregistering): Port device team_slave_0 removed [ 1709.428414][T11733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1709.594169][T11733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1710.361888][T23790] loop9: detected capacity change from 0 to 8 [ 1710.368720][T23790] squashfs: Unknown parameter 'Ý' [ 1711.168492][T23718] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1711.998948][T11733] bond0 (unregistering): Released all slaves [ 1713.729574][T23224] veth0_vlan: entered promiscuous mode [ 1713.790939][T23224] veth1_vlan: entered promiscuous mode [ 1713.922424][T23224] veth0_macvtap: entered promiscuous mode [ 1713.968604][T23224] veth1_macvtap: entered promiscuous mode [ 1714.061944][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1714.076286][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1714.087646][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1714.099563][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1714.121521][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1714.140076][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1714.162842][T23224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1714.181529][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1714.193563][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1714.231270][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1714.257079][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1714.279362][T23224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1714.317063][T23224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1714.338926][T23224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1714.427209][T23224] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.435952][T23224] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.482355][T23224] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.502868][T23224] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.874235][T11725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.907106][T11725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.041845][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.067592][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.356312][T23899] loop5: detected capacity change from 0 to 8 [ 1718.363317][T23899] squashfs: Unknown parameter 'Ý' [ 1719.224916][T23718] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1726.027024][T20762] Bluetooth: hci3: command 0x0406 tx timeout [ 1727.477832][T23969] syz.0.2458[23969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1727.477984][T23969] syz.0.2458[23969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1730.581284][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.601842][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.224379][T24067] binder: 24066:24067 ioctl 4018620d 0 returned -22 [ 1740.329655][T24067] binder: 24066:24067 ioctl 4b61 0 returned -22 [ 1744.700492][T24123] pim6reg1: entered promiscuous mode [ 1744.705861][T24123] pim6reg1: entered allmulticast mode [ 1748.775357][T24148] binder: BINDER_SET_CONTEXT_MGR already set [ 1748.836959][T24148] binder: 24140:24148 ioctl 4018620d 200000004a80 returned -16 [ 1755.283860][T24183] pim6reg1: entered promiscuous mode [ 1755.311874][T24183] pim6reg1: entered allmulticast mode [ 1755.608221][T24192] binder: BINDER_SET_CONTEXT_MGR already set [ 1755.647209][T24192] binder: 24191:24192 ioctl 4018620d 200000004a80 returned -16 [ 1762.687711][T24251] binder: BINDER_SET_CONTEXT_MGR already set [ 1762.726947][T24251] binder: 24250:24251 ioctl 4018620d 200000004a80 returned -16 [ 1765.317590][T24274] syz.6.2505[24274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1765.317732][T24274] syz.6.2505[24274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1766.317701][T24294] binder: 24293:24294 ioctl c0306201 0 returned -14 [ 1767.359484][T24296] loop5: detected capacity change from 0 to 8192 [ 1767.778667][T24294] binder: BINDER_SET_CONTEXT_MGR already set [ 1767.784720][T24294] binder: 24293:24294 ioctl 4018620d 200000004a80 returned -16 [ 1768.187119][T24303] binder: 24293:24303 ioctl 4b61 0 returned -22 [ 1774.412661][T24327] pim6reg1: entered promiscuous mode [ 1774.426947][T24327] pim6reg1: entered allmulticast mode [ 1774.901024][T24344] binder: 24343:24344 ioctl c0306201 0 returned -14 [ 1775.761808][T24345] loop9: detected capacity change from 0 to 8192 [ 1776.264439][T24344] binder: BINDER_SET_CONTEXT_MGR already set [ 1776.292710][T24344] binder: 24343:24344 ioctl 4018620d 200000004a80 returned -16 [ 1776.477858][T24349] binder: 24343:24349 ioctl 4b61 0 returned -22 [ 1783.097282][T24387] binder: 24386:24387 ioctl c0306201 0 returned -14 [ 1783.224093][T24389] binder: 24386:24389 ioctl 4b61 0 returned -22 [ 1783.808703][T24392] pim6reg1: entered promiscuous mode [ 1783.814167][T24392] pim6reg1: entered allmulticast mode [ 1789.145112][T24502] binder: 24498:24502 ioctl 4b61 0 returned -22 [ 1792.027502][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.033885][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.583231][T24541] loop6: detected capacity change from 0 to 8192 [ 1798.147071][T24581] loop6: detected capacity change from 0 to 1024 [ 1798.214016][T24581] ext4: Unknown parameter 'nouser_xattr' [ 1805.535394][T24640] loop9: detected capacity change from 0 to 1024 [ 1805.543236][T24640] ext4: Unknown parameter 'nouser_xattr' [ 1805.942501][T24621] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1806.846546][T24661] syz.9.2580[24661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1806.846962][T24661] syz.9.2580[24661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1811.278019][T24678] pim6reg1: entered promiscuous mode [ 1811.396954][T24678] pim6reg1: entered allmulticast mode [ 1812.301395][T24689] loop0: detected capacity change from 0 to 1024 [ 1812.455541][T24689] ext4: Unknown parameter 'nouser_xattr' [ 1817.559929][T24744] [ 1817.562299][T24744] ====================================================== [ 1817.569307][T24744] WARNING: possible circular locking dependency detected [ 1817.576308][T24744] syzkaller #0 Not tainted [ 1817.580727][T24744] ------------------------------------------------------ [ 1817.587729][T24744] syz.5.2585/24744 is trying to acquire lock: [ 1817.593779][T24744] ffff8880b8e29370 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 1817.602387][T24744] [ 1817.602387][T24744] but task is already holding lock: [ 1817.609748][T24744] ffff8880b8e29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 1817.618616][T24744] [ 1817.618616][T24744] which lock already depends on the new lock. [ 1817.618616][T24744] [ 1817.629006][T24744] [ 1817.629006][T24744] the existing dependency chain (in reverse order) is: [ 1817.638005][T24744] [ 1817.638005][T24744] -> #1 (&base->lock){-.-.}-{2:2}: [ 1817.645302][T24744] _raw_spin_lock_irqsave+0xa8/0xf0 [ 1817.651019][T24744] lock_timer_base+0x123/0x270 [ 1817.656298][T24744] __mod_timer+0xf9/0xdb0 [ 1817.661144][T24744] queue_delayed_work_on+0x12a/0x1e0 [ 1817.666969][T24744] kvfree_call_rcu+0x541/0x780 [ 1817.672251][T24744] rtnl_register_internal+0x486/0x590 [ 1817.678141][T24744] rtnl_register+0x32/0x70 [ 1817.683076][T24744] ip_rt_init+0x2ec/0x390 [ 1817.687921][T24744] ip_init+0xe/0x20 [ 1817.692248][T24744] inet_init+0x2c1/0x3e0 [ 1817.697002][T24744] do_one_initcall+0x1fd/0x750 [ 1817.702281][T24744] do_initcall_level+0x137/0x1f0 [ 1817.707732][T24744] do_initcalls+0x69/0xd0 [ 1817.712574][T24744] kernel_init_freeable+0x3d2/0x570 [ 1817.718284][T24744] kernel_init+0x1d/0x1c0 [ 1817.723128][T24744] ret_from_fork+0x48/0x80 [ 1817.728061][T24744] ret_from_fork_asm+0x11/0x20 [ 1817.733349][T24744] [ 1817.733349][T24744] -> #0 (krc.lock){..-.}-{2:2}: [ 1817.740419][T24744] __lock_acquire+0x2ddb/0x7c80 [ 1817.745794][T24744] lock_acquire+0x197/0x410 [ 1817.750806][T24744] _raw_spin_lock+0x2e/0x40 [ 1817.755905][T24744] kvfree_call_rcu+0x15a/0x780 [ 1817.761187][T24744] trie_delete_elem+0x535/0x6a0 [ 1817.766553][T24744] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 1817.772534][T24744] bpf_trace_run3+0x1e7/0x400 [ 1817.777725][T24744] __bpf_trace_timer_start+0x14a/0x1b0 [ 1817.783885][T24744] enqueue_timer+0x398/0x530 [ 1817.788982][T24744] __mod_timer+0x977/0xdb0 [ 1817.793931][T24744] sk_reset_timer+0x23/0xc0 [ 1817.798943][T24744] tipc_sk_finish_conn+0x154/0x7e0 [ 1817.804571][T24744] tipc_socketpair+0x254/0x470 [ 1817.809843][T24744] __sys_socketpair+0x2b0/0x550 [ 1817.815230][T24744] __x64_sys_socketpair+0x9b/0xb0 [ 1817.820765][T24744] do_syscall_64+0x55/0xb0 [ 1817.825706][T24744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1817.832119][T24744] [ 1817.832119][T24744] other info that might help us debug this: [ 1817.832119][T24744] [ 1817.842337][T24744] Possible unsafe locking scenario: [ 1817.842337][T24744] [ 1817.849775][T24744] CPU0 CPU1 [ 1817.855125][T24744] ---- ---- [ 1817.860480][T24744] lock(&base->lock); [ 1817.864544][T24744] lock(krc.lock); [ 1817.870864][T24744] lock(&base->lock); [ 1817.877456][T24744] lock(krc.lock); [ 1817.881254][T24744] [ 1817.881254][T24744] *** DEADLOCK *** [ 1817.881254][T24744] [ 1817.889405][T24744] 2 locks held by syz.5.2585/24744: [ 1817.894589][T24744] #0: ffff8880b8e29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 1817.903982][T24744] #1: ffffffff8cd2fe20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 1817.913276][T24744] [ 1817.913276][T24744] stack backtrace: [ 1817.919158][T24744] CPU: 0 PID: 24744 Comm: syz.5.2585 Not tainted syzkaller #0 [ 1817.926601][T24744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1817.936737][T24744] Call Trace: [ 1817.940011][T24744] [ 1817.942936][T24744] dump_stack_lvl+0x16c/0x230 [ 1817.947610][T24744] ? load_image+0x3b0/0x3b0 [ 1817.952107][T24744] ? show_regs_print_info+0x20/0x20 [ 1817.957303][T24744] ? print_circular_bug+0x12b/0x1a0 [ 1817.962494][T24744] check_noncircular+0x2bd/0x3c0 [ 1817.967526][T24744] ? print_deadlock_bug+0x5d0/0x5d0 [ 1817.972717][T24744] ? lockdep_lock+0xe0/0x220 [ 1817.977302][T24744] ? _find_first_zero_bit+0xd3/0x100 [ 1817.982584][T24744] __lock_acquire+0x2ddb/0x7c80 [ 1817.987429][T24744] ? stack_trace_snprint+0xf0/0xf0 [ 1817.992535][T24744] ? __stack_depot_save+0x560/0x630 [ 1817.997720][T24744] ? verify_lock_unused+0x140/0x140 [ 1818.002904][T24744] ? kasan_save_stack+0x4d/0x60 [ 1818.007743][T24744] ? kasan_save_stack+0x3e/0x60 [ 1818.012662][T24744] ? __kasan_record_aux_stack+0xaf/0xc0 [ 1818.018230][T24744] ? kvfree_call_rcu+0xee/0x780 [ 1818.023072][T24744] ? trie_delete_elem+0x535/0x6a0 [ 1818.028091][T24744] ? bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 1818.033715][T24744] ? bpf_trace_run3+0x1e7/0x400 [ 1818.038579][T24744] ? __bpf_trace_timer_start+0x14a/0x1b0 [ 1818.044232][T24744] ? enqueue_timer+0x398/0x530 [ 1818.049156][T24744] ? __mod_timer+0x977/0xdb0 [ 1818.053749][T24744] ? sk_reset_timer+0x23/0xc0 [ 1818.058418][T24744] ? tipc_sk_finish_conn+0x154/0x7e0 [ 1818.063694][T24744] ? tipc_socketpair+0x254/0x470 [ 1818.068644][T24744] ? __sys_socketpair+0x2b0/0x550 [ 1818.073676][T24744] ? __x64_sys_socketpair+0x9b/0xb0 [ 1818.078865][T24744] ? do_syscall_64+0x55/0xb0 [ 1818.083446][T24744] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1818.089516][T24744] lock_acquire+0x197/0x410 [ 1818.094014][T24744] ? kvfree_call_rcu+0x15a/0x780 [ 1818.098949][T24744] ? read_lock_is_recursive+0x20/0x20 [ 1818.104315][T24744] ? __phys_addr+0xba/0x170 [ 1818.108811][T24744] _raw_spin_lock+0x2e/0x40 [ 1818.113307][T24744] ? kvfree_call_rcu+0x15a/0x780 [ 1818.118237][T24744] kvfree_call_rcu+0x15a/0x780 [ 1818.123011][T24744] ? call_rcu+0x930/0x930 [ 1818.127333][T24744] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1818.133300][T24744] ? _raw_spin_unlock+0x40/0x40 [ 1818.138140][T24744] trie_delete_elem+0x535/0x6a0 [ 1818.142992][T24744] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 1818.148443][T24744] bpf_trace_run3+0x1e7/0x400 [ 1818.153110][T24744] ? bpf_trace_run3+0xf4/0x400 [ 1818.157953][T24744] ? bpf_trace_run2+0x3c0/0x3c0 [ 1818.162812][T24744] ? __bpf_trace_timer_start+0x133/0x1b0 [ 1818.168446][T24744] __bpf_trace_timer_start+0x14a/0x1b0 [ 1818.173910][T24744] ? __bpf_trace_timer_class+0x100/0x100 [ 1818.179542][T24744] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1818.185514][T24744] ? _raw_spin_unlock+0x40/0x40 [ 1818.190359][T24744] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1818.195721][T24744] enqueue_timer+0x398/0x530 [ 1818.200304][T24744] __mod_timer+0x977/0xdb0 [ 1818.204719][T24744] sk_reset_timer+0x23/0xc0 [ 1818.209215][T24744] tipc_sk_finish_conn+0x154/0x7e0 [ 1818.214322][T24744] tipc_socketpair+0x254/0x470 [ 1818.219099][T24744] __sys_socketpair+0x2b0/0x550 [ 1818.223946][T24744] __x64_sys_socketpair+0x9b/0xb0 [ 1818.228989][T24744] do_syscall_64+0x55/0xb0 [ 1818.233399][T24744] ? clear_bhb_loop+0x40/0x90 [ 1818.238068][T24744] ? clear_bhb_loop+0x40/0x90 [ 1818.242755][T24744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1818.248670][T24744] RIP: 0033:0x7fef2938eec9 [ 1818.253095][T24744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1818.272712][T24744] RSP: 002b:00007fef2a13e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1818.281119][T24744] RAX: ffffffffffffffda RBX: 00007fef295e5fa0 RCX: 00007fef2938eec9 [ 1818.289100][T24744] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1818.297062][T24744] RBP: 00007fef29411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1818.305027][T24744] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 1818.313026][T24744] R13: 00007fef295e6038 R14: 00007fef295e5fa0 R15: 00007ffce98971e8 [ 1818.321027][T24744] [ 1819.323444][T24751] loop6: detected capacity change from 0 to 8192