last executing test programs: 13.004821907s ago: executing program 3 (id=2239): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0179e1d}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000000c0)=0xfffffffe) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f000001a0c0)={{r1}, "cb78b83985acada9633115999fd828f6078f81bc3f330bcdab84196ed711c573b93f3ce178826af8f648a8e0c9a9eb6eb550cae90ae5e5c867ec67739713fcda39c01254cc0d52e918479638afdd370380f7af059a7b981566e2d2db2a86151ddb23c4ae1b4a78b2074de652a6b66576f1a3729f9938962a9b459df91e8ed42a582fee93a3f2d6e80c57098d8d052cecd4520c1cc233a3df2be96dd63085772cc419f9a441cd79bb49fbab48ec6ac4604a25755f8436018d1954147cda33907118a61cf837ca4e34bd9026f628b1d0cd6ae70605ffb9cf089d046f20592375be4e30dc0975730fdf0b3fd2205254858546acf11555ed08ec35ed4c0286fc905b61d6b08b694a615951109c13a963dd4882aa2ba52b05212bf5faf66c2a048a9b38d6ad3474968d6ef0171c71f18946a119bc7ac43dc3e6f32cab57cbb99329625e4f6bf9ef5383ca7e986abbca66aa2afa13c3d85f8e3c8b9caa4f90907125869317f8f683763a95003902b82b9cefd2c647e0aec4f4709382a2c37991d502924e116d06a49422202fa80465b739d1506eb6fcb5f727f790bb932756f1484d70964068215599b29869c558edadac9137cffdb16f91965a8b952ea496dbe55b012d7295ebb062169570f5d12c5f46c0d362b1f834f8b5085e11dbd5f6f9951af2dc0e439f9fde3ff6245631bde155b3d800e1aea7c670dd8502ed756784a4b91247904bf14b9ecbb8a43a1a695a47bb098bd3edcca0419edeb7e6f26619e92766c1751ff7822295672ceb43ebfe93d1c630ae21dba562f81387ae7eb7420f8c39b3a6619bfc81bce2aa670671b542860f6f2ac4a50bc21e1a4f15535d2e04fe76a3b24d49840c38a0bcb243ef69b9682d1615d4382a8f43e51919a8d9caf10fa812022858302fec67dc2a828c227c44b8e318fa78ec895d8a0c971b9c79b4130b11810ac9c349110fd851ccd633284ccd674645029ceeae187a3ca18374c2c96d5a93acccba0a4962d97c804a4c415b4ca4a0122f24468cb1db0eefefba3471180351459c27cf9e15b51b6963fb2582ef44e82b05d243bd6ae0922d6243598177f1fa86ef75402b2681ae3562d149050437bdf0cf284d2ce50cb8b6f49debb8d3afa7cc2596ef755b6fdddd1b18e9b6924ec87a1eb1512a336c9b0b9d0f745120f70cb8964fb54104535acfd10cc795d2e5a4bcb688046df1d0f76a8c6d469ee8e51fb62df06c1b6f2beb29fcc10c4c8120ce58784ea6372d9ab21e6ef4f455a003c34949cfb7fd34fd368b9962109329648cc7661b1623181233f63b204cdfa3074f12eacb6f54db227752e60323df0d1ed5596a58ffd4adba27e15d4859afdfe5603cc878d683ae527cf5cd1f639590b43b4270c12a9ecb049cf512204ed4aa5d12a6b6c44667bb5adf73a7298c85dfcfff063cc31e6059a8dd715bac4996182fac0a819f85db2630397fda0ed4905075a2691886cfcbc154254411472c4a3277cda8a0323ee29ddadde5163b5dbf1b85a8dcc5db9f4e873745d3d6b132dc93a191671afdf0484e899e59ecf2c24c5201a5b47e062c3a44f2c8c15376c6d9dc633195085553bc122cea60c5d3294f29bbd3eb566e8f4bd2561e5242e6e8730ef73fc5db9ae40e6418de9e1d01c5ba854f249feeabc7cb85e37beecda8ef4946d0c628c4e7d8f9cd8018a4ab7ea75b4ecdcbf41dacea8aa3f175d580eb029a82c06c1ede7690a09160fd164b16b186c5f4b9996658bcbb9dc7fa56bfbe2f0ca793dd9472a0ad917af68629188e6507b8c2588a934021d07452767cec5c3c989661dac8ca86d52e38ab74b4a584f817fe5f74afa66f4d9d5563d1bcf49dd842eae4226f2422cf31a53dd46f9153a378eed289fccce7bef0beabc9cda04bac75c26cca44049479b404a3a1a8cffc3322207ccd973a5dbb5b29e0b7009c45743a3d4c889429be3252bbf2272a939d7bcb10995401bd568239c9cbe2dffdb08cfdffd188f88246e4ebbab033396a2c9d7ac1d6725e762dc4187a00247cae9253e6b29208baeea3edcc1edfb24dfa943dc12fea8d7db0c855c9cac4eba412f21c8f416e83f9e58ac759b58f1b72968d3783ba5019e46c85aebd3b447e6c0a3f6b5289893d02681e55f1b8d35294b9d0515871345b44af89c3c6a4adecc249646e080e07d542560394fdf3eca45c7f103b4ab76bbb4421ca5a83e85f8dd2fdff33d8fc5f9c3d287cf2fcf0d2589edc573368f7262693304ec09b364133e690e0274dd6017940c0134f7a4a9d1e71f62dd08c45c272070823f5d35ce114fd5518924c52cd864e36bf38e28b6260920e71d6c4b0e0b5a01bf88af3a7e1363972bfe7ad42de42f433fc391f13a7b1f91a5a70a782a8ad4dd321946c2200830aeb9d08301c533e8c5b677613a11859116e70dea5e7574686c11bde31bee7a106c3c16e1a25608095d3048568f5b425b0783c41464b1459da6774d69ab0d3e25d597f00467bfa15f57f519313d619e29c6dd0faf1a1ae292cae30eadbd434c11f3ca81a9828375c1f2b88839047bc529741f0c0bcd6dafbf2ee408d38ef68c1254781aabd0b238a99bbb16aece3e676d8e8ae85f9ccb5f80395e4388fc3ea28185d0b64dbfcd5ba9933dee03a91bd6a4c75f5e7df0f2e8b0d80e2e4c3cdc01a0bcd33c567ed1f8a3d8ddd522d7ed196ba814e2f91abc67c2cbd845d8e455d1f5430e6b4c1a9d24fdac3ea2a2f317c50c78c1538d680cbda0fdcf2ecf7cbdd755145c7d032134decb2e24dd5980fc4a952071ebf29ace9ea78e917c39ff45919f656e2ab1cf170ec6f45f36e9a23e61234a33e8c7eb479623eeb553e4f34d894226104394117d30cdc204c5f904ae30d4c8af6f9c21ded588c2344690e13fa95902ec0b6ac83a96918d09bfc08bb8781bcb47a6a4983b6b50de781514d55326165895e7f012a5ad3e17db69943c80adb57b27f05650d2507f61f6a6fa5306252811854000f820ab86022ebd6f063167ee1e8af64d50f57196a23f6a584e87d80b4b1e3fdf5e6e470e21015e0d7af711d991b087e7cd3a963ac07e8613a8d0ba393b9b4262bf04804a4a9b0804d609dfbfbac634fabe7d0658028838561716563e1a7b4620fd7f90b9b222b6c3695ea4f6c7f155315f48654f5d5d720327924c1fe6a9a6a12f63237203721f94e0254eb27672da75bfca7110767d0e7157b5a1f84f48aeccf5cf66e953a257552f6e5d2af7dd1abbce9c520e0fdb5b98291ceeef8ea932616155b79b4f499580b276c0b04010d669e03c9302b33aecdbaf05c8d457d22958faa034b88126de947027ae3daa1cba4ca1584343b5553514917aa6834d6b3c68060231b8748b27d45bf12fec0521245a2beab3666900cc7ab252436bb8a03478d0d6c7645f2a786ec413b15c1a571a0d4d0e2d75f229e4dcf407097641ac6c58a9f5d431e5d72d4442104e48c413faef3e1e84b9a89e140443888b65807103e4b80a16a985e09be161edcb1d8d68e93723d63068c7d06ef39f7aff51c9f447d41347fc3e2d327049f030fdf424d9a2b16d9725ff5a494af3eab21a91b0e1bee502d4b81d4f292001892cc21ac9a2c616c9a37054a87261c402f6b3717764e04be0ad577022dd34dc8463a20f617aabcd3ffffd462ccb7394c64406262e7ac29570ff038761ea248f0a0029030830aa149090c4137de50bc1d20969c44dedb0cbc9e22605587b5e49b2d24f7f32ad075e36db9b03eccb1c0903f55a32d8108bfc94c27c406028c158232a7e0ea36f44dca43c27a5ec644f4db1ea3a09f1f2472cb2ea3c35415bce116da1bc84ae4202cd3b0a7546289cc1704a67485fce0414f31fe99486d855fd2a35ab76a9f076be64ea39a0b8e8e038ea6949e9062bcd4847a57ae4517a15edd9eab144811251ec050ea982bcbca346292aba7a399f773c51b5edd1709a625e110dca71d557e5ec7d52193cbaa5877f3727ef5adc960fc3b3966a6d22776f45db12a7fd7b62dc963f8445ecb4dd94e05c7ed08388b9082bcb30637200b84c5063ca14f68ca8f8e0825fe20f7a04706b8c34ac08785bb70d9fe3f77a27c5c53a2b203f3451a168a98f581be035e0b403775691c1de18651e68a3fe66da4d824bce7fd4b5aa43ae7a7c3927c52f7b5cf4705dfc0ec5d0dcc84f8ce8f4b8dcbb08bf756017d426ac4ef885063de19a76606f9c043509ffeaaa08cf6cb2f9c140612d717a534d70f26e40ddd34ffd9794d0bf8c89172f4a24ff9f3ba19dffd3515efcfe2a95f35d45da8545d2e0d68b6ef2d1e0f437963d8eba960ad2eb7893d9e7984969033e4d8a567a603a977a0eae6691a9992002466bcaa48778b2b2ab3178e114e2fce8357f46f799c6d33502e652d5460209b77faaa0b987808409f75deee08d7cc4a8625bb989526662cc5a03404b25d4b6a77e67edf357180f5e932481e4a8f6c6d21b11cdc743545c22aa27994d21e3a0abb681a49a2cbf9c0303158097eaf8a12348b4325e68a13493a5c1270202860ad4151633fb7b3cbf37199febfe80870f07068ae158d0510c729de88cdac8ef3465c1d77808eabb1b966ce8b02341db7367b70738d0d45a70afb4dd596522cbbd2b6e0cfef3034a13b01668fcf3e9fa87ca9e8ef193cb63578a5422af10e7382487f5a4728d6f72183222497050839d88d5d8304be59080290405655a320f81c8c142627d6653f4c17fd00bd8ac4d1033107904d0a4de2821aba2e41be22b0de928a57dc6fc627e284d4ae0c04d968a932c095bbfbf631a4d30bd4d87199af7a6542f9ebd6f7733d6fd2ea8244e0597ba1e8d5ad5301c83d2a4e6126ba9c3f3d35cd1ded55431b086d391eff2abf52f5f03885cc138e0097469a7f361ff686e816a2b647f62b1daa1fceff624e1270902a3dcf59893dd7aa6c3b7751c20aa98ff5ace042ad5505a78c247d813bd09fd30d5ce7b66c024cae0fc4a706016c503b99bccd57fecdf4b34be21f0abd949d87600d9d889282ad8798f1d0ad95affe8b0689756de8e8cc02c24355ce224710f1c4b3434acf7939d63a2b892b90c64b89778b072490b525379ea546682cbbc52df49c3a0a35b39a3f25914b0bb5525543f7d4578a41c567c1804fcf1e11a0cc101366e70030ccf5344a3ac4dc2a141ce20c0aab3f1ca924e82d10aa4d5c0729e35f3ee86192daa1ebdd59b9539cdd7359a007a57ff5cb8cf467de65f03708cc0dc08cc28d66f2b04e599b9f4b548be0ed6debe291658b964136bc786d3ff7c2d16e3c5e4fdc1c924a6fbf020314ac5dda0710bbaf8ffbbecd949f83969c527616b1a6c9bdb6e29bc8d22e9d1153590baa8f7676305838fb0cdf411cb185b0f6637024fff23d88e03eeda8f4902ae5f44bc8b171dc3f454ea0f932ef90969d1feffb6e388bfbedf8932ba0cb237ab03a574de22ac3d87a2af23d09b68b5fae7e8105e8ff9532d55c2f32ec7addba597698e3d46b2a3b6a54d6418c201a4954fad1ede0c470c7f7fbdf67c37ac02c8422148f6ead10d628ed78576fd2cae464eca93f900e6a9824abb42984654d6e5524b6f78666bfc7d226b8e8dd1743186de1a5613154b0cdd74da7ae951f2312e8e75f98186931538dd5352307a8a425bd3412ae03a7dd879630694c0b94ea06ef712814682734474f5a011d5a4147e46e27fec3ddbe0fb05838e81bf5c53d33db8fabe4cf941f00d2eb0802f02ec8d1a64ffce2154289be59cf42a75e783ca70c980d06266bf61e5b32ff0cec0b42a39b761f88980bfb1a17f0badb7084b19a3f2d"}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f000001a080)={0x0, 0x9, 0x92, 0x0, 0xf00, 0x0, &(0x7f0000019080)="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"}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) syz_io_uring_setup(0x58a6, &(0x7f000001b0c0)={0x0, 0x44c3, 0x2, 0x0, 0xf2, 0x0, r4}, &(0x7f000001b140), &(0x7f000001b180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f000001b300)=@IORING_OP_STATX={0x15, 0x20, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f000001b2c0)='./file1\x00', 0x40, 0x4000, 0x1, {0x0, r6}}) ioctl$USBDEVFS_CONNECTINFO(r3, 0x8108551b, &(0x7f0000002a40)) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRESOCT], 0x3, 0x2c8, &(0x7f00000005c0)="$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") 11.377162865s ago: executing program 3 (id=2246): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x7d243a6ea807936d}, 0x14}}, 0x0) 8.699517509s ago: executing program 1 (id=2257): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$eJzs3U1sHPXZAPBnHDsEI0UR76sURSFMApWCFMx6DaYWB1jWY2dgvWvtrqtEVUUj4iArDiAoaskFokrQVq2qnnqkXLn11qpSK/XQ9lSpHHrpDYlTRaV+iQpVcjWzu47t+It8OND8fivvf3bmmfk/Mx7Ps7PenQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIJL6dKUynkQjby6cSbdWn2635raZPljer9c16zy9rt+IpPiJAwfik3/0xv3/1cmHi7sTcbT36GgcKJoDcfmew4ee/L/hocH82yR0vY7vMi6JeKtI6uK55eXFV29BInvo+7/8zLP8e6W4n82aeSfyudpsluadVjo1OVl59PRMJ53JG1nnbKebzaX1dlbrttrpyfrD6fjU1ESajZ1tLTRnp2uNbDDyiUeqlcpk+uzYfFZrd1rNR5+NTv103mjkzdkyplr5VhQxTxQ74nN5N+1mtbk0vbC0vDixU6pF0PhmE/b19p+jDx366PUP/760WOyQWy0k6e+Y1fHxanV88vGpx5+oVIarler6EZUNYjUihiKKiFuy0/IFcnMP4HADhvr1PxqRRzMW4kykm9xGoh7T0Y5WzBWP/zRyTUTfoP5/+dG//mG7ftfW/0GVv+/q5CNR1v9jvUfHtqr/m+a6l7fX4o24HBfjXCzHcizGq7c9ox1uQze6hGTdo9nIohl5dKIVecxFrRyT9sekMRWTMRmVeD5Ox0x0Io2ZyKMRWXTibHSiG1m5R9WjHVnUohutaEcaJ6MeD0ca4zEVUzERaWQxFmejFQvRjNmYjlq5lAuxVG73iQ1ZHr47fvHiHz96txheDRrfbrWKJ3NF0N+2Cbqm3G9b/1dWiucLGyPU/zvA/u0m3oKjOFyflUH9BwAAAP5nJeWr78X5/0jcXw7N5I3sa7c7LQAAAOAmKv/zf7RoRoqh+yMpzv8rm0R+sOe5AQAAADdHUn7GLomI0XigN3QhluKtWIzNXgSIiEN7nSIAAABwg8r//x8rmtGIN8sRg8ulbHH+DwAAAHzRfHera+x/OLjGbmf+ruRXIxExklyZP/NQcqlWxNUu7evN12++urrE7syR5GB/IWUzOXz5niQihuvZ0WRw9cv/3NVrPy7vjwyvzr7Vtf6TdnvbBGL7BMpH8YM43os5fr5s7unPMpz0ehmdyRvZWL3VeLK8JGLx0339paVvRxS9f685dzCJC0vLi2MvvLx8vszlSjH7lUv9Cyhecx3FbXJZ6W+BuH/zNR4pP4jR73e0129l7foP9WYf2r7PZG2fb8eJXsyJ0V47OpjS6/NA0ef42JPjUasdHOpmZ7qvr6xZ+34W46trPnJda/52PNiLefDkg71mkyyq67J46dosqmu3/+62xa6zePf4m2f+9dtWkk3slMXEZ8hiZV/ExiwAbpcL5VV/rlahu8sq9OlKT1H/e3W3KFa1XkDfLo61/7zay+qzjMH8a2rdcGys7kOrB8bdVfeV6B3RT/ZiTvaeTwwf2aSuVDY5or+y9Mrv+kf0x97/yU+/fuz3Pyv7va7q9n483IvpN3Hvb7aoscU6/3BDVX2vmOO9LfvtNKpJXInY981Lr8Th1964/MjSpXMvLr64+FK1OjFZeaxSeby6vx87Uj5j2CZTAO5cO3/HzpYRgzqTPLbhrDrOr6+7966+pWAsXoiXYznOx6ny0wYR8cDm/Y6ueRvCqR3OWkfXfMPLqR3OLa/GVq+NTWKL2Ik1W+xLPy6bT27JrwMA9sSJHerwNvV/9ZX5Uzucd6+v5RvOjmPrWr6Zr9zSrQEAd4as/XEy2n0nabfz+efHp6bGa93TWdpu1Z9L2/n0bJbmzW7Wrp+uNWezdL7d6rbqgxeOp7NO2lmYn2+1u+lMq53GUCc/U37ze9r/6vdONldrdvN6Z76R1TpZWm81u7V6N53OO/V0fuGZRt45nbXLmTvzWT2fyeu1bt5qpp3WQruejaVpJ8vWBObTWbObz+TFYDOdb+dztfaViGgszGXpdNapt/P5bqu3wEFfeXOm1Z4rFzt27er/Za+3NwB8Hrz2xuWL55aXF1+9voE/7yb4dq8jALCeKg0AAAAAAAAAAAAAAJ9/q+//PzQYKMbewCcCP9vAXXHLu7hjB4pf5Ocgjds78I2nnrq4Vcwzb953enfLid1+UjbeORix/+c/6o15euvg7/T//m7Omn4QEdcx+0qyyaRPV3oD6w4T+/f+yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1/pvAAAA//9Inly9") mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x888, &(0x7f0000000000)={[{@sysvgroups}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@user_xattr}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') llistxattr(&(0x7f0000002100)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0xcb, 0x101, 0x22c5, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x10, 0xb}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) 8.167494787s ago: executing program 1 (id=2259): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40), 0xa, 0x4e4, &(0x7f0000001400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x42a00, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4010, &(0x7f0000000600)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@quota}, {@test_dummy_encryption}]}, 0xd, 0x5ef, &(0x7f00000013c0)="$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") quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x3, &(0x7f0000000340)) close(r3) syz_read_part_table(0x618, &(0x7f0000000640)="$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") 7.99128191s ago: executing program 3 (id=2261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@initdev, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@empty, @in6=@private2, 0x4e20, 0x6, 0x4e22, 0xcbab, 0x2, 0x80, 0x80, 0x2b, r4}, {0x9, 0xe1, 0x3, 0x1, 0xffffffff, 0x252c, 0x3, 0x4}, {0x7ff, 0x7, 0x1}, 0x9, 0x6e6bb9, 0x1, 0x1, 0x2, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x3503, 0x4, 0x1, 0x6c, 0x5, 0x9, 0x3}}, 0xe4) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @local}, @RTA_IIF={0x8, 0x3, r8}]}, 0x2c}}, 0x0) 7.938441404s ago: executing program 4 (id=2263): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x3, &(0x7f00000014c0)=ANY=[], 0x0}, 0x90) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) close(r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) 7.733758269s ago: executing program 4 (id=2265): openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2719, &(0x7f0000000600)=""/4, &(0x7f00000006c0)=0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @random="72c9acdd2c78"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@delqdisc={0x44, 0x25, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {0xe, 0x3}, {0x4, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x13d8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000100)=0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0x18}, 0x44) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0x4}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x3, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e23, @empty}, {0x1, @broadcast}, 0x8, {0x2, 0x4e21, @broadcast}, 'dummy0\x00'}) 7.324542449s ago: executing program 3 (id=2266): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05040500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = gettid() clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x2}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000048540)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [], 0x0, "7464fbe08eb369"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x0, [], 0x0, "75db64cf7310f9"}) 6.527477607s ago: executing program 1 (id=2268): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$eJzsmL9rFEEUx78zu7e5FRFtUthYGDCi2cvuoaQ5NIJgJULir0oPs4Z4m5xcVjAHgsHGRjsLwcbCf8AiRSoLO/8BQQsVBAuvsLCxGZmd2b1JJnGPNVa+TzF8Z9978+a9233FgSCI/5Yvn39+enJuZv4kgP2YwJh+/s0BGFOaG/4fn9878ax1/sXrD6/erhx4sLn9PBkixNYH9T/kdwG8mXWQFpmK6F9STOjNPHihL4PjuNZXwRBofRMcV7SOwXBd6zuG7kr/ILi9lMTBrW6yIMW0XEK5RHJpbr/fYJ1hQe+FEIIZ9tW1fqedJHHPEK627WCqJIpknXGrfzV4GMxytIz7yS5ee/xoXe7z3kwb/QvBEeoimmCY089nMJb3RrXEqP+wOzzfserfsVrpKg1lRdaVaP3Yk2aZ4tBUtfBJWc5Z23QQVa6BrVE1DE2yk3tbsvXqZMItfxfP6B+0Qq6Lo1bx1Afwjyo1RaUqcjE+2Hxnm76WhQtWnoKN/v7UR71z/iFW75iPfof/Tcd2u9j7DTU/xEuGY8Z8co350UiX7zZW1/pTS8vtxXgxXomi5mkGPDwVNbJBpFZr7g3ns5/Np33G+bVdfD3u4X47TXuhWj3mwUea9qJsHxmfzdxG9/sNHZbiAoCjaiPHplec6Fg5mKd8eOYr1aTtRBAEQRAEQRAEQRAEQRAEUYkjYNm/oCVElzLv3wEAAP//0Ixjlw==") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/104, 0x68) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x801010, &(0x7f00000003c0), 0x3, 0x486, &(0x7f00000004c0)="$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") socket(0x11, 0x3, 0x0) unshare(0x2040400) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) lseek(r3, 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001e40)="e82aaf7e090e273e17e16f79d8e42ca1d7e30cace95cce4d18852bf73882215b17649bc34ce794b0279acd0f88d8c9f41873c7bd512700f2d067a968d5a20d5d8b698c7755f8ed67b4e9b4447c85fdbea342ad1c8c44386c914fcf9f027a4f33373b10f22ba235236ff75d965c3a2ed9607711f1a71952e83256f608faf946eb07d6d400657610aad91a501d93e1f12748237a296891f4e1caaf70ad59f925ae30dcbc646deb2abc7b2fa0d8", 0xac) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000001dc0)=0x4, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 6.503857068s ago: executing program 4 (id=2269): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x141c80) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x59, 0x8, 0x0, 'queue0\x00', 0x3}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e00000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) openat$vcsa(0xffffffffffffff9c, 0x0, 0xecf15780a848d49a, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000480)=@broadcast, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(0x0, 0xb) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100)=0x2406, 0x4) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x3a7) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b00"/165, 0xa5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r1}, 0x10) prctl$PR_SET_VMA(0xe, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xfe87, 0x0) 6.375575358s ago: executing program 0 (id=2270): getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0xc9c0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e", 0x36}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0xdc}, {&(0x7f0000000480)="84", 0x1}], 0x3) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) 5.689296987s ago: executing program 0 (id=2272): socket$nl_xfrm(0x10, 0x3, 0x6) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240), 0x4) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x3}, 0x8) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00eeba2c08149d912cb1ec112989404084f6f04390b642095e11d48586b69c823ff30d63a9a301bc584ace1a906b73c450ae1c08205e9d88770e", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000500050000000000080004000000000005000600000000000800030001000000"], 0x34}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc602f1a35010a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@loopback, @in=@local}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000300)=0xe8) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x603, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "94b1c39a3cc2fbfd"}}, 0x48}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'macsec0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffe83, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x115, 0x819ad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 5.062262193s ago: executing program 1 (id=2274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000200)=0x2, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000004c0)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0000000003000000000000000000"], 0x14}, 0x1, 0x620b}, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0xc9c0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="84", 0x10}], 0x3) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(r3, 0x10d, 0x8f, &(0x7f0000000000), &(0x7f0000000240)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x0) ioctl$LOOP_GET_STATUS(r9, 0x4c03, 0x0) 5.056198303s ago: executing program 0 (id=2275): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x3, &(0x7f00000014c0)=ANY=[], 0x0}, 0x90) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) close(r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) 4.297595088s ago: executing program 2 (id=2276): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x98) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x2d}}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x4c}}, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') 3.983887591s ago: executing program 0 (id=2277): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0xa00010, &(0x7f0000000700)=ANY=[], 0x6, 0x641, &(0x7f00000001c0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x3, 0xff) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x302}}], 0x2, 0x0) listen(r0, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c10000000010000000000", 0x58}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r8, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 3.373288675s ago: executing program 4 (id=2278): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) syz_io_uring_setup(0x1fa4, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x80803, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) write$binfmt_script(r7, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_pidfd_open(0x0, 0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r10, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) pidfd_send_signal(r9, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfff}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 3.368295026s ago: executing program 3 (id=2279): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40), 0xa, 0x4e4, &(0x7f0000001400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x42a00, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4010, &(0x7f0000000600)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@quota}, {@test_dummy_encryption}]}, 0xd, 0x5ef, &(0x7f00000013c0)="$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") quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x3, &(0x7f0000000340)) close(r3) syz_read_part_table(0x618, &(0x7f0000000640)="$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") 2.854507383s ago: executing program 2 (id=2280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x240408c0}, 0xc0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x28, 0x0, &(0x7f0000000580)=0x5f) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000540)) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @private=0xa010102, 0x200}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x1a, &(0x7f0000000240)=ANY=[@ANYBLOB="180500f1a1d739470d0000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32, @ANYBLOB="00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000000500000010000000bf"], 0x0}, 0x90) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0xc0481273, &(0x7f0000000000)) connect$inet(r2, &(0x7f0000000300)={0x2, 0x3, @private=0xa010102}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) open(&(0x7f0000000000)='./file0\x00', 0x8c040, 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(r7, 0x0) 2.812639716s ago: executing program 4 (id=2281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000200)=0x2, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000004c0)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0000000003000000000000000000"], 0x14}, 0x1, 0x620b}, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0xc9c0) readv(r4, &(0x7f0000000080)=[{0x0}], 0x1) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="84", 0x10}], 0x3) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(r3, 0x10d, 0x8f, &(0x7f0000000000), &(0x7f0000000240)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x0) ioctl$LOOP_GET_STATUS(r9, 0x4c03, 0x0) 2.717181563s ago: executing program 2 (id=2282): getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0xc9c0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e", 0x36}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0xdc}, {&(0x7f0000000480)="84", 0x1}], 0x3) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) 2.632946399s ago: executing program 2 (id=2283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000180)=0x3, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0xffff, 0x0, 0x0, 0x0, 0xffffff7f}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "008ef14ba278887cb0baba08431799317e6324"}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[], 0x48}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) preadv2(r7, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d40)={'ip6tnl0\x00', 0x0, 0x0, 0xe9, 0x81, 0x6, 0x13, @mcast2, @local, 0x10, 0x7, 0x7f, 0x5}}) 2.496580699s ago: executing program 1 (id=2284): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x354, &(0x7f0000000780)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) futex(&(0x7f000000cffc), 0x0, 0xffffffff, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'geneve0\x00'}) close_range(r2, r2, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r6 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r6, 0x10d, 0x9e, 0x0, &(0x7f0000000000)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x7d, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000240)={&(0x7f0000001980)=[0x0], 0x0, 0x0, 0x0, '\x00', 0x1, 0x3}) 1.950399838s ago: executing program 2 (id=2285): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) msgget$private(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, 0x1f}}) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x2, 0x0, [{0x6000, 0x13, &(0x7f0000000100)=""/19}, {0x0, 0x0, 0x0}]}) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x129002) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000200)=""/201, 0xc9) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x37, @time={0x20, 0x5}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc02c5341, &(0x7f0000000080)) tkill(r5, 0x0) 1.872115585s ago: executing program 4 (id=2286): mount$nfs(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x1800098, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r8, &(0x7f0000001300)='attr/prev\x00') close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 1.682788918s ago: executing program 0 (id=2287): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', &(0x7f0000000740)=[&(0x7f0000000180)=')@:(\x00', &(0x7f0000000700)='\x00'], &(0x7f0000000880), 0x100) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r2 = fcntl$getown(0xffffffffffffffff, 0x9) mount$fuse(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x164000, &(0x7f00000008c0)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC=0xee00, @ANYBLOB="2c67726fc35e7d3f643d", @ANYRES64, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB="2c50626a5f2feed1d13d2e2f632e328d75f02e6e65742f73030000000000000142c12448c05aae08d01ef89f940d1132906cba5d96486d9c08", @ANYRESDEC, @ANYBLOB="af991443a59703df479c1c30d5463525b1edc2ba17"]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0xc942, 0x0) r3 = socket(0x40000000002, 0x3, 0x1) setsockopt(r3, 0xff, 0x1, 0x0, 0x32) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r4, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r4, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r4) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000001340)={0x2, 0x401, 0x7fffffff}) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r5, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="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", 0x1000}], 0x2, &(0x7f0000001b00)=ANY=[], 0x38, 0x4004000}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001280)="9ff3ca704f578553cd48e247b89354ed502a835aab3123b66874978cfa09599661019464493a44264c08425c6180e6317765cdf8e9ff47ef7508207f09c25a81edc0b845601cafcdc495bf732a100f46bfc31954167d1c461931a5", 0x5b}], 0x1, &(0x7f0000001240)=ANY=[], 0x48, 0x881}}, {{0x0, 0x35, &(0x7f0000001440)=[{&(0x7f0000001400)="04e753bbfa8f5b9633e07f6ea865d1bf46ef36b42b0c37c4ed", 0x19}], 0x1, 0x0, 0x0, 0x40000001}}, {{&(0x7f0000001480)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001500)="c5969ef8e773f467d37f25a9871a720469d2ae63574f543feedde6c538499485f7af5e6ef0907945df906e1a6dd11e3b1f1c39a1a6742a38f4b3be69b7616becf0b8d390f38861d7090871a926976e8acac3acfe77d1f6db186d0f1f7ac4e05ee5c1227ce7f54935521ad0c5af331cff68312a72e03079e0d4f01f", 0xfffffcb6}, {&(0x7f0000001580)="b1bbb21edaea2767700d92ffcd0f1381baa2db54e97946df2230cf0480223c1c163e30a9fe5290d1b34ec66f6cbba5c1695ffa758b412374bf627cb73a94245396b2e993d7febb4bd9f9d59a068445fc06e2baee00a0750490ef6f6f1ffa69b7e114434c11fcca8e7783229527e421e4833d15936dfec4e4be923623544e4ab9a3fb3c04702928188959c5e1a12c29ecf02a69517026182bc21ef44b1643d99c29834dfeca8efbd70e276cd00c1bd5c09323539c87d5e12f7a733869404e4c6c090abf13aaf6", 0xc6}, {&(0x7f0000001680)="7d99dee3abf7b5caed69f69310cc692d982df77c06883c83c93eb7d1e99ba00f72d7fc8dfd9677f598d74da4df025fc8b507391179bb901e44f7355dbd8c33587eeeab8a2302eee01aa3", 0x4a}, {&(0x7f0000001700)="29c2c8ffb0d08b4f8f4e1970bc560789ee89999f09ac600d9ff1a400f917", 0x1e}, {&(0x7f0000001740)="7164a48373e1668672b76258810a48957da975bdd0df9b01f8d7bfd5261e6676c95c27d348027fb0a7f287f30c30fb35424165058b151aef42212d3c95fef392988380ec3d3e5a13ccb2a1327c584df5a7546a104dac4a8736d24d5f8cf56c28aa9ca6db40f4edf2d9ef954c475a78b5d251288f2b963047c0f0e47edc5a61c2dc567cd0d2a2cc62c5f6", 0x8a}, {&(0x7f0000001800)="d44bc31747f3369fd113f4d8190cb5a5db600514d5abb3c706ffe981308f8308ee7a84c0d0001852a10420fa41ed9ced1b2839f0e0fe4fbdc2c6462bfded4735bc956f7ca5a84676547e4bdacb3d6130d60332b76b4d32ad1541856ddbd1d277", 0xfff5}, {&(0x7f0000001880)="8b99d108217ab1e7fdd8e43368557f5be564b10d19cbdad17f508ac11c9421d7d3a7b7bf53389099a3721f9483f4ea790e5e7e65dc997861b3b38addb01046cde6d6ee26a05715006a49cedcdc8676db5772116a85ad5237058152d73be88ec545e649f059f9e41c7d2cad17bdbd7cc1b509d0224ae2d19e1ee9bce0378bb0b802a47241e1c53ae9f8bca9834de7d07d45c1c198af2600e728d433308fd824ef395f7911f8b7c3", 0xa7}, {&(0x7f0000001940)="0cdbbc", 0x3}, {&(0x7f0000001980)="81a97e178aed1ccd98d4551025cf03798f6e9a8c54f430ecd9ac9ae0f32e07a647dec44c2e957aa1497e8eeb677b1700", 0x30}], 0x9, 0x0, 0x0, 0x8881}}], 0x4, 0x48080) r6 = shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) shmat(r6, &(0x7f0000235000/0x4000)=nil, 0x4000) r7 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 185.281687ms ago: executing program 1 (id=2288): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f3c"], 0x36) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000180)={[{@sb={'sb', 0x3d, 0x40}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10000}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@fowner_eq}, {@euid_lt}, {@audit}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@subj_role={'subj_role', 0x3d, '+\\'}}, {@measure}]}, 0x4, 0x76b, &(0x7f0000001400)="$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") syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, "8dd7088c06ef8b55d55cd8a0b466f33bb03e22"}) r6 = dup(r5) write$binfmt_elf32(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c464007fc0689f5ffffffffffff02003e0001800000a1010000380000008601000004000000a994200001000100fdff030000000000060000008f01000006000000ff070000ff070000ff00000003000000010100009726c62fa0535b2bde833f7ade25bf0ec70b5e89e2fa22cf2a9eb27f90f7228e11cbbaeec311dfa7b96f02a271ce5ed42b191f5de5812f40d98837b02433954c8ee432f2fc45ab391434eea02fef2a3f8fb5728126c0f2dcedbd4b24fd3cfc396b0de7a10a25809881abd55fcbdd60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/1991], 0x7c7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="cc020000", @ANYRES16=r8, @ANYBLOB="010000000077167856f48cf6d60008000300", @ANYRES32=r10], 0x2cc}}, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$UHID_INPUT(r6, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) 20.072629ms ago: executing program 2 (id=2289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x7, 0x11, r8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x800000, 0x0, 0xfffffffc}}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x28884}, 0x0) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000180)=""/94, 0x5e}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000004c0)=""/111, 0x6f}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f00000005c0)=""/64, 0x40}], 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 16.124589ms ago: executing program 3 (id=2290): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x98) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x2d}}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x4c}}, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') 0s ago: executing program 0 (id=2291): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000740)=""/73, 0x49}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) kernel console output (not intermixed with test programs): ave been left with an inconsistent configuration, please check. [ 743.214444][ T3909] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 743.464442][ T3909] usb 1-1: Using ep0 maxpacket: 32 [ 743.584638][ T3909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 743.608785][ T3909] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 743.668729][ T26] audit: type=1326 audit(1725062089.185:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11420 comm="syz.3.1574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32dc69feb9 code=0x0 [ 743.715516][T11424] tipc: Started in network mode [ 743.780887][T11424] tipc: Node identity ac1414aa, cluster identity 4711 [ 743.784710][ T3909] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 743.806075][ T3909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.818476][ T3909] usb 1-1: Product: syz [ 743.822941][ T3909] usb 1-1: Manufacturer: syz [ 743.853047][ T3909] usb 1-1: SerialNumber: syz [ 743.853050][T11424] tipc: Enabled bearer , priority 10 [ 743.869621][ T3909] usb 1-1: config 0 descriptor?? [ 744.058635][ T3909] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 744.082514][ T4492] udevd[4492]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 744.124452][ T3613] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 744.404570][ T3613] usb 5-1: Using ep0 maxpacket: 32 [ 744.464217][ T1075] usb 1-1: USB disconnect, device number 37 [ 744.534748][ T3613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.565183][ T3613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.603215][ T3613] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 744.637979][ T3613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.648060][T11444] loop3: detected capacity change from 0 to 256 [ 744.671782][ T3613] usb 5-1: config 0 descriptor?? [ 744.800241][T11444] exfat: Deprecated parameter 'namecase' [ 744.823795][T11444] exfat: Deprecated parameter 'utf8' [ 744.848279][ T3671] tipc: Node number set to 2886997162 [ 744.860678][T11450] device veth0_vlan left promiscuous mode [ 744.873101][T11444] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 745.508688][ T3613] hid-rmi 0003:0461:4E72.000B: unknown main item tag 0x0 [ 745.554433][ T3613] hid-rmi 0003:0461:4E72.000B: unknown main item tag 0x0 [ 745.574420][ T3613] hid-rmi 0003:0461:4E72.000B: unknown main item tag 0x0 [ 745.626525][ T3613] hid-rmi 0003:0461:4E72.000B: unknown main item tag 0x0 [ 745.635110][ T3613] hid-rmi 0003:0461:4E72.000B: unknown main item tag 0x0 [ 745.663949][ T3613] hid-rmi 0003:0461:4E72.000B: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.4-1/input0 [ 745.753531][ T3613] usb 5-1: USB disconnect, device number 26 [ 746.951976][T11464] loop1: detected capacity change from 0 to 512 [ 746.958467][ T26] audit: type=1326 audit(1725062092.465:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990871beb9 code=0x7fc00000 [ 746.965887][T11467] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1595'. [ 747.018032][T11466] loop3: detected capacity change from 0 to 128 [ 747.049498][ T26] audit: type=1326 audit(1725062092.475:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f990871beb9 code=0x7fc00000 [ 747.089565][T11464] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 747.211802][T11464] EXT4-fs (loop1): 1 truncate cleaned up [ 747.217953][ T1394] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.221112][T11464] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 747.225091][ T1394] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.644421][ T26] audit: type=1326 audit(1725062094.135:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990871beb9 code=0x7fc00000 [ 748.695165][T11481] netlink: 'syz.4.1589': attribute type 4 has an invalid length. [ 748.850240][ T26] audit: type=1326 audit(1725062094.135:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f990871beb9 code=0x7fc00000 [ 748.872699][ T26] audit: type=1326 audit(1725062094.135:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990871beb9 code=0x7fc00000 [ 748.896226][ T26] audit: type=1326 audit(1725062094.135:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990871beb9 code=0x7fc00000 [ 748.919975][ T26] audit: type=1326 audit(1725062094.135:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990871beb9 code=0x7fc00000 [ 748.942721][ T26] audit: type=1326 audit(1725062094.135:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990871beb9 code=0x7fc00000 [ 748.984162][ T26] audit: type=1326 audit(1725062094.135:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990871beb9 code=0x7fc00000 [ 749.068765][ T26] audit: type=1326 audit(1725062094.135:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990871beb9 code=0x7fc00000 [ 749.207515][T11490] loop1: detected capacity change from 0 to 64 [ 749.255310][ T26] audit: type=1326 audit(1725062094.135:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990871beb9 code=0x7fc00000 [ 749.909350][ T26] audit: type=1326 audit(1725062094.135:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990871beb9 code=0x7fc00000 [ 749.958114][T11490] hfs: get root inode failed [ 749.964099][T11496] loop4: detected capacity change from 0 to 256 [ 749.996926][ T26] audit: type=1326 audit(1725062094.135:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990871beb9 code=0x7fc00000 [ 750.025032][T11496] exfat: Deprecated parameter 'namecase' [ 750.034165][T11496] exfat: Deprecated parameter 'utf8' [ 750.096410][T11496] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 751.418880][T11502] fuse: Bad value for 'fd' [ 751.851364][T11518] loop4: detected capacity change from 0 to 512 [ 751.966405][T11518] EXT4-fs (loop4): Test dummy encryption mode enabled [ 752.193229][T11523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 752.219506][T11523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 752.228891][T11523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 752.258120][T11523] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 752.576820][T11518] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.1599: casefold flag without casefold feature [ 752.739532][T11518] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 752.787432][T11518] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 754.712329][T11537] loop3: detected capacity change from 0 to 2048 [ 754.953974][T11537] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 756.830902][T11570] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 757.059250][T11579] input: syz0 as /devices/virtual/input/input84 [ 757.199000][T11582] loop1: detected capacity change from 0 to 512 [ 757.199687][ T21] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 757.321323][T11582] EXT4-fs (loop1): Test dummy encryption mode enabled [ 757.342527][T11582] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.1616: casefold flag without casefold feature [ 757.368999][T11582] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 757.410899][T11582] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 757.484725][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 757.734460][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.751493][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.867813][ T21] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 758.093831][ T21] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 758.325119][ T21] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 758.402419][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 758.450891][T11589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1617'. [ 758.490136][T11591] hugetlbfs: Bad value for 'uid' [ 758.584674][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 758.596065][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.609510][ T21] usb 4-1: Product: syz [ 758.616908][ T21] usb 4-1: Manufacturer: syz [ 758.623773][ T21] usb 4-1: SerialNumber: syz [ 758.924495][ T21] cdc_ncm 4-1:1.0: bind() failure [ 758.937833][ T21] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 758.947147][ T21] cdc_ncm 4-1:1.1: bind() failure [ 758.968194][ T21] usb 4-1: USB disconnect, device number 24 [ 759.656594][T11603] IPv6: NLM_F_REPLACE set, but no existing node found! [ 760.096021][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 760.096035][ T26] audit: type=1326 audit(1725062105.615:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11602 comm="syz.3.1622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32dc69feb9 code=0x0 [ 760.722438][T11623] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 761.183941][ T3616] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 761.211574][T11631] loop1: detected capacity change from 0 to 512 [ 761.280286][T11631] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 761.291337][T11631] UDF-fs: Scanning with blocksize 512 failed [ 761.316676][T11631] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 761.331468][T11631] UDF-fs: Scanning with blocksize 1024 failed [ 761.358560][T11631] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 761.378828][T11631] UDF-fs: Scanning with blocksize 2048 failed [ 761.408930][T11631] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 761.458526][T11631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 761.654651][ T3616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 761.677539][ T3616] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 762.328725][ T3616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.361260][ T3616] usb 3-1: config 0 descriptor?? [ 762.374445][ T13] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 762.449696][ T3616] gspca_main: spca561-2.14.0 probing abcd:cdee [ 762.682507][T11639] loop4: detected capacity change from 0 to 32768 [ 762.824635][T11639] XFS (loop4): Mounting V5 Filesystem [ 762.834721][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.851284][ T13] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 762.934020][T11639] XFS (loop4): Ending clean mount [ 762.937040][T11642] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1626'. [ 763.144555][ T3616] spca561: probe of 3-1:0.0 failed with error -22 [ 763.162568][ T3616] usb 3-1: MIDIStreaming interface descriptor not found [ 763.170454][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.553273][ T8727] XFS (loop4): Unmounting Filesystem [ 763.577472][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.653460][ T13] usb 1-1: Product: syz [ 763.686872][ T13] usb 1-1: Manufacturer: syz [ 763.709278][ T13] usb 1-1: SerialNumber: syz [ 763.819203][ T3616] usb 3-1: USB disconnect, device number 19 [ 763.979933][T11637] udc-core: couldn't find an available UDC or it's busy [ 763.989759][T11637] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 764.124500][T11655] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 764.176680][T11655] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 764.224738][T11657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.297059][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 764.388808][T11657] device bridge_slave_1 left promiscuous mode [ 764.399963][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.419828][T11657] bridge1: port 1(bridge_slave_1) entered blocking state [ 764.427524][T11657] bridge1: port 1(bridge_slave_1) entered disabled state [ 764.436207][T11657] device bridge_slave_1 entered promiscuous mode [ 764.543844][T11663] loop4: detected capacity change from 0 to 1024 [ 764.564442][T11668] loop1: detected capacity change from 0 to 512 [ 764.650455][T11663] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 764.679698][T11672] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 764.790845][T11668] EXT4-fs (loop1): Test dummy encryption mode enabled [ 764.865640][T11668] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.1638: casefold flag without casefold feature [ 764.899771][T11668] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 764.919267][T11668] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 765.065362][ T13] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 765.071425][ T13] cdc_ncm 1-1:1.0: bind() failure [ 765.079353][ T13] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 765.086177][ T13] cdc_ncm 1-1:1.1: bind() failure [ 765.901439][T11682] program syz.3.1640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 765.980603][T11682] device bond0 entered promiscuous mode [ 765.986551][T11682] device bond_slave_0 entered promiscuous mode [ 765.996329][T11682] device bond_slave_1 entered promiscuous mode [ 766.450609][ T3909] usb 1-1: USB disconnect, device number 38 [ 766.944668][T11698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 766.971183][T11698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 766.980210][T11698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 767.004619][T11698] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 767.423646][T11699] QAT: failed to copy from user cfg_data. [ 767.657235][ T26] audit: type=1804 audit(1725062113.075:388): pid=11702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1646" name="/newroot/27/bus/bus" dev="overlay" ino=184 res=1 errno=0 [ 770.178348][T11717] loop3: detected capacity change from 0 to 40427 [ 770.367555][T11717] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 770.375395][T11717] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 770.869484][T11717] F2FS-fs (loop3): Found nat_bits in checkpoint [ 771.316592][T11724] loop1: detected capacity change from 0 to 512 [ 771.333314][T11717] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 771.340464][T11717] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 771.409500][T11732] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1650'. [ 771.713324][T11724] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 771.721449][T11724] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 771.745640][T11724] EXT4-fs (loop1): 1 truncate cleaned up [ 771.751303][T11724] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 771.785803][T11724] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 771.800579][T11744] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1655'. [ 772.383553][T11752] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 772.400750][T11752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 772.409791][T11752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 772.428364][T11752] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 772.984623][ C0] eth0: bad gso: type: 1, size: 1408 [ 774.085137][ T13] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 774.127517][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 774.222979][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1664'. [ 774.584869][ T3613] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 774.668326][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.685609][ T13] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 774.700174][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.720453][ T13] usb 3-1: config 0 descriptor?? [ 775.045047][ T3613] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.063648][ T3613] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 775.081525][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 775.101395][ C0] eth0: bad gso: type: 1, size: 1408 [ 775.123481][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 775.145113][ T3613] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 775.238429][ T13] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 775.283883][ T13] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000C/input/input88 [ 775.385918][ T3613] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 775.423502][ T3613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.434493][ T3613] usb 2-1: Product: syz [ 775.440362][ T3613] usb 2-1: Manufacturer: syz [ 775.450257][ T3613] usb 2-1: SerialNumber: syz [ 775.458500][ T3613] usb 2-1: config 0 descriptor?? [ 775.511931][ T3613] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 775.536548][ T3613] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 775.551097][ T3613] garmin_gps: probe of ttyUSB0 failed with error -90 [ 775.588675][ T13] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 775.740568][ T13] usb 2-1: USB disconnect, device number 16 [ 775.756522][ T13] garmin_gps 2-1:0.0: device disconnected [ 775.765831][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1669'. [ 775.791364][T11800] udc-core: couldn't find an available UDC or it's busy [ 775.791500][T11799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1669'. [ 775.806417][T11800] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 775.858832][T11799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1669'. [ 775.896061][T11800] udc-core: couldn't find an available UDC or it's busy [ 775.903116][T11800] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 776.109611][T11804] loop3: detected capacity change from 0 to 2048 [ 776.158313][T11806] futex_wake_op: syz.0.1671 tries to shift op by -1; fix this program [ 776.171180][T11804] loop3: p3 < > p4 < > [ 776.179785][T11804] loop3: partition table partially beyond EOD, truncated [ 776.204551][T11804] loop3: p3 start 4284289 is beyond EOD, truncated [ 776.337120][ T3613] usb 3-1: USB disconnect, device number 20 [ 776.618541][T11812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 776.634629][T11812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 776.643167][T11812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 776.661036][T11812] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 776.785815][ T21] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 777.240969][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 777.250237][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.260771][ T21] usb 1-1: config 0 descriptor?? [ 777.290845][ T13] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 777.316984][ T21] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input89 [ 777.519024][ T3613] usb 1-1: USB disconnect, device number 39 [ 777.563805][T11823] ubi0: detaching mtd0 [ 777.564404][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 777.600861][T11823] ubi0: mtd0 is detached [ 777.663775][T11826] loop1: detected capacity change from 0 to 512 [ 777.716943][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.742233][T11826] EXT4-fs (loop1): Test dummy encryption mode enabled [ 777.769651][T11826] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.1676: casefold flag without casefold feature [ 777.798028][T11826] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 777.813373][T11826] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 778.144424][ T13] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=9f.c0 [ 778.531140][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.625835][ T13] usb 4-1: Product: syz [ 778.631329][ T13] usb 4-1: Manufacturer: syz [ 778.771135][ T13] usb 4-1: SerialNumber: syz [ 778.787064][ T13] usb 4-1: config 0 descriptor?? [ 778.826290][ T13] usbserial_generic 4-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 779.026960][ T13] usbserial_generic 4-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 779.040172][ T13] usbserial_generic 4-1:0.0: device has no bulk endpoints [ 781.316066][T11838] loop4: detected capacity change from 0 to 512 [ 781.334613][ T3671] usb 4-1: USB disconnect, device number 25 [ 781.346975][T11848] fuse: Unknown parameter 'grou00000000000000000000' [ 781.492144][T11838] EXT4-fs (loop4): 1 orphan inode deleted [ 781.502966][T11838] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 781.527487][T11838] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038 (0x7fffffff) [ 781.669563][ T26] audit: type=1804 audit(1725062127.185:389): pid=11838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1680" name="/newroot/129/file1/bus" dev="loop4" ino=16 res=1 errno=0 [ 783.785064][ T26] audit: type=1326 audit(1725062129.295:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz.4.1686" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac8c265eb9 code=0x0 [ 784.147988][T11883] futex_wake_op: syz.1.1691 tries to shift op by -1; fix this program [ 784.712537][T11893] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 784.778878][ T26] audit: type=1326 audit(1725062130.295:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.3.1693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32dc69feb9 code=0x0 [ 784.828089][T11897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.845626][ T3611] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 784.938462][T11901] input: syz0 as /devices/virtual/input/input92 [ 785.106216][ T3613] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 785.214638][ T3611] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 785.228115][ T3611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.239282][ T3611] usb 2-1: config 0 descriptor?? [ 785.300075][ T3611] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input93 [ 785.498581][ T13] usb 2-1: USB disconnect, device number 17 [ 785.525177][ T3613] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 785.551513][ T3613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.570909][ T3613] usb 3-1: config 0 descriptor?? [ 786.267618][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1699'. [ 786.289866][T11916] batman_adv: Cannot find parent device [ 786.455488][ T3613] ath6kl: Failed to submit usb control message: -71 [ 786.465552][ T3613] ath6kl: unable to send the bmi data to the device: -71 [ 786.473755][ T3613] ath6kl: Unable to send get target info: -71 [ 786.490368][ C0] eth0: bad gso: type: 1, size: 1408 [ 786.526420][ T3613] ath6kl: Failed to init ath6kl core: -71 [ 787.149233][ T3613] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 787.166615][ T3613] usb 3-1: USB disconnect, device number 21 [ 788.317588][T11932] loop1: detected capacity change from 0 to 2048 [ 790.296606][ T3613] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 790.334222][ T3613] Bluetooth: hci4: Injecting HCI hardware error event [ 790.420639][ T3580] Bluetooth: hci4: hardware error 0x00 [ 790.919487][T11937] loop3: detected capacity change from 0 to 4096 [ 790.981563][T11949] loop4: detected capacity change from 0 to 256 [ 791.005665][T11937] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 791.034557][T11937] ntfs3: loop3: Failed to load $MFT. [ 791.055589][T11949] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 791.866624][T11937] loop3: detected capacity change from 0 to 64 [ 792.125267][T11961] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 792.314266][T11968] loop4: detected capacity change from 0 to 512 [ 792.376168][T10681] hfs: request for non-existent node 131072 in B*Tree [ 792.976499][T11968] EXT4-fs (loop4): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 793.115362][T11972] loop3: detected capacity change from 0 to 512 [ 793.243087][T11975] program syz.2.1714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 793.290513][T11975] device bond0 entered promiscuous mode [ 793.328435][T11975] device bond_slave_0 entered promiscuous mode [ 793.335191][T11975] device bond_slave_1 entered promiscuous mode [ 794.200298][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 794.232190][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1715'. [ 794.269721][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1715'. [ 794.524435][ T3671] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 794.814367][ T3671] usb 5-1: Using ep0 maxpacket: 16 [ 794.935547][ T3671] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 795.224234][ T3671] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 795.245677][ T3671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.659587][ T3671] usb 5-1: config 0 descriptor?? [ 795.736759][ T3671] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 796.526525][ T3648] usb 5-1: USB disconnect, device number 27 [ 796.984495][ T3613] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 797.394474][ T3613] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.422304][ T3613] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.545522][ T3613] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 797.572312][ T3613] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 797.604360][ T3613] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 797.653798][ T3613] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 797.693868][T12028] loop4: detected capacity change from 0 to 512 [ 797.708024][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 799.361048][T12028] EXT4-fs (loop4): Unrecognized mount option "context=staff_u" or missing value [ 799.560564][T12028] loop4: detected capacity change from 0 to 512 [ 799.611074][T12028] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 799.625958][ T3613] usb 4-1: string descriptor 0 read error: -71 [ 799.633365][ T3613] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 799.654904][T12028] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 799.673884][ T3613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.705547][ T3613] usb 4-1: can't set config #1, error -71 [ 799.732069][ T3613] usb 4-1: USB disconnect, device number 26 [ 799.746492][T12028] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 56 vs 41 free clusters [ 799.773369][T12028] Quota error (device loop4): write_blk: dquota write failed [ 799.784531][T12028] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 799.815093][T12028] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.1727: Failed to acquire dquot type 0 [ 799.850375][T12028] Quota error (device loop4): write_blk: dquota write failed [ 799.864404][T12028] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 799.881755][T12028] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.1727: Failed to acquire dquot type 0 [ 799.906872][T12028] Quota error (device loop4): write_blk: dquota write failed [ 799.918721][T12028] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 799.929662][T12028] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.1727: Failed to acquire dquot type 0 [ 800.000528][T12028] EXT4-fs (loop4): 1 orphan inode deleted [ 800.008640][T12028] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,mblk_io_submit,barrier=0x0000000000000003,norecovery,init_itable,noauto_da_alloc,noquota,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 800.162979][ C0] eth0: bad gso: type: 1, size: 1408 [ 800.246777][T12056] loop3: detected capacity change from 0 to 256 [ 800.366648][ T26] audit: type=1804 audit(1725062145.875:392): pid=12059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1732" name="/newroot/186/bus/bus" dev="overlay" ino=1070 res=1 errno=0 [ 803.417974][T12056] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 803.522935][T12063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1736'. [ 803.582667][T12070] loop4: detected capacity change from 0 to 512 [ 803.665938][T12070] EXT4-fs (loop4): Test dummy encryption mode enabled [ 803.786857][T12070] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.1738: casefold flag without casefold feature [ 803.820762][T12070] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 803.991955][T12078] loop3: detected capacity change from 0 to 256 [ 804.506350][T12070] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 804.806849][T12084] loop1: detected capacity change from 0 to 512 [ 805.522614][ T3648] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 806.132500][ T3648] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.153311][ T3648] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 806.277002][ T3648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.427918][ T3648] usb 1-1: config 0 descriptor?? [ 806.483727][T12099] loop1: detected capacity change from 0 to 2048 [ 806.540815][T12099] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 806.551495][ T3648] rndis_wlan 1-1:0.0: skipping garbage [ 806.566111][ T3648] usb 1-1: bad CDC descriptors [ 806.630045][T12102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1755'. [ 806.678210][ T3648] rndis_host 1-1:0.0: skipping garbage [ 806.719753][ T3648] usb 1-1: bad CDC descriptors [ 806.759688][T12102] delete_channel: no stack [ 806.779798][T12106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 806.814710][ T3648] usb 1-1: USB disconnect, device number 40 [ 807.250038][T12105] loop3: detected capacity change from 0 to 4096 [ 807.423882][T12105] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 807.524413][ T3613] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 807.934611][ T3613] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.609809][T12113] loop1: detected capacity change from 0 to 8192 [ 808.625835][ T3613] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.636758][ T1394] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.643083][ T1394] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.403397][T12113] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 809.421302][T12113] REISERFS (device loop1): using ordered data mode [ 809.423312][ T3613] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 809.438688][T12113] reiserfs: using flush barriers [ 809.446054][ T3613] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 809.464363][T12113] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 809.534977][T12113] REISERFS (device loop1): checking transaction log (loop1) [ 809.560724][ T3613] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 809.593041][ T3613] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 809.668407][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 809.867925][T12113] REISERFS (device loop1): Using tea hash to sort names [ 809.891935][T12113] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 809.902113][ T3613] usb 5-1: string descriptor 0 read error: -71 [ 809.922425][ T3613] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.944354][ T3613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.049611][ T3613] usb 5-1: can't set config #1, error -71 [ 810.086908][ T3613] usb 5-1: USB disconnect, device number 28 [ 810.847647][ T3616] Bluetooth: hci2: command 0x0406 tx timeout [ 810.963131][T12134] loop3: detected capacity change from 0 to 40427 [ 811.582504][T12152] netlink: 'syz.2.1758': attribute type 3 has an invalid length. [ 811.636829][T12134] F2FS-fs (loop3): Found nat_bits in checkpoint [ 811.884151][T12134] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 812.073384][T12167] loop4: detected capacity change from 0 to 256 [ 812.103610][T12134] attempt to access beyond end of device [ 812.103610][T12134] loop3: rw=2049, want=78336, limit=40427 [ 812.122194][T12134] attempt to access beyond end of device [ 812.122194][T12134] loop3: rw=2049, want=78328, limit=40427 [ 813.228482][T12167] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 813.445852][T10681] attempt to access beyond end of device [ 813.445852][T10681] loop3: rw=2049, want=45104, limit=40427 [ 813.628814][T12180] netlink: 'syz.2.1764': attribute type 1 has an invalid length. [ 813.955453][ T3648] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 814.764439][ T3648] usb 2-1: Using ep0 maxpacket: 8 [ 814.974856][T12192] loop4: detected capacity change from 0 to 256 [ 815.098847][ T3648] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 815.110423][ T3648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.122963][ T3648] usb 2-1: Product: syz [ 815.130463][ T3648] usb 2-1: Manufacturer: syz [ 815.135612][T12193] netem: change failed [ 815.138733][ T3648] usb 2-1: SerialNumber: syz [ 815.153992][ T3648] usb 2-1: config 0 descriptor?? [ 816.180881][T12199] device team_slave_0 entered promiscuous mode [ 816.187942][T12199] device team_slave_1 entered promiscuous mode [ 816.309532][T12199] device macsec1 entered promiscuous mode [ 816.334464][T12199] device team0 entered promiscuous mode [ 816.397102][ T3648] usb 2-1: USB disconnect, device number 18 [ 816.421567][T12199] team0: Device macsec1 is already an upper device of the team interface [ 816.471288][T12209] loop4: detected capacity change from 0 to 764 [ 817.114917][T12199] device team0 left promiscuous mode [ 817.147006][T12199] device team_slave_0 left promiscuous mode [ 817.153029][T12199] device team_slave_1 left promiscuous mode [ 818.334987][T12228] loop4: detected capacity change from 0 to 764 [ 818.799835][T12235] netlink: 'syz.3.1781': attribute type 7 has an invalid length. [ 818.824524][T12235] netlink: 'syz.3.1781': attribute type 39 has an invalid length. [ 818.999762][T12241] netlink: 'syz.3.1781': attribute type 7 has an invalid length. [ 819.013045][T12241] netlink: 'syz.3.1781': attribute type 39 has an invalid length. [ 820.201025][T12262] loop1: detected capacity change from 0 to 764 [ 820.679624][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 822.765291][T12269] futex_wake_op: syz.3.1791 tries to shift op by -1; fix this program [ 822.898491][ T26] audit: type=1326 audit(1725062168.415:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12278 comm="syz.2.1794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14657c6eb9 code=0x0 [ 823.074419][ T3648] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 823.226776][ T3671] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 823.904410][ T3648] usb 5-1: Using ep0 maxpacket: 16 [ 824.692121][ T3648] usb 5-1: device descriptor read/all, error -71 [ 825.999019][ T3671] usb 4-1: device not accepting address 27, error -71 [ 826.074421][ T3613] Bluetooth: hci3: command 0x0406 tx timeout [ 826.376837][T12309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1802'. [ 826.396456][T12307] netem: incorrect ge model size [ 826.401420][T12307] netem: change failed [ 826.444235][T12314] netlink: 'syz.2.1800': attribute type 4 has an invalid length. [ 827.704972][T12341] loop3: detected capacity change from 0 to 164 [ 828.303459][T12341] rock: directory entry would overflow storage [ 828.310304][T12341] rock: sig=0x5245, size=8, remaining=3 [ 828.364573][T12345] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1806'. [ 829.236134][T12350] loop3: detected capacity change from 0 to 64 [ 829.667140][T12368] 9pnet: Insufficient options for proto=fd [ 830.222112][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.301071][T12385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1818'. [ 830.513949][T12389] netlink: 'syz.2.1819': attribute type 2 has an invalid length. [ 831.316418][T12389] netlink: 'syz.2.1819': attribute type 9 has an invalid length. [ 831.661636][T12396] [U] ^C [ 832.050929][T12406] loop3: detected capacity change from 0 to 512 [ 832.853474][T12419] No such timeout policy "syz1" [ 833.024428][ T3909] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 833.091193][T12406] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 833.184529][T12406] ext4 filesystem being mounted at /73/bus supports timestamps until 2038 (0x7fffffff) [ 833.388412][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1823'. [ 833.467363][ T3909] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 833.492251][ T3909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 833.513193][ T3909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 833.529081][T12434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1828'. [ 833.540822][ T3909] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 833.552766][ T3909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.597377][T12408] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 833.623009][T12434] Invalid ELF header len 6 [ 833.645552][ T3909] hub 2-1:1.0: bad descriptor, ignoring hub [ 833.664428][ T3909] hub: probe of 2-1:1.0 failed with error -5 [ 833.681275][ T3909] cdc_wdm 2-1:1.0: skipping garbage [ 833.691008][ T3909] cdc_wdm 2-1:1.0: skipping garbage [ 833.716247][ T3909] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 833.732541][ T3909] cdc_wdm 2-1:1.0: Unknown control protocol [ 833.770430][T12440] device veth0_vlan left promiscuous mode [ 833.910608][T12434] tmpfs: Bad value for 'gid' [ 835.133967][T12451] loop4: detected capacity change from 0 to 2048 [ 835.224605][T12451] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 835.339728][T12453] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 836.521751][ T3613] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 836.934659][ T3613] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 836.990256][ T3613] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 837.010716][T12468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1836'. [ 837.033679][ T3613] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 837.071415][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.399856][T12471] loop4: detected capacity change from 0 to 4096 [ 837.440004][ C0] vkms_vblank_simulate: vblank timer overrun [ 838.533039][T12476] netlink: 'syz.2.1839': attribute type 2 has an invalid length. [ 838.541594][T12476] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 839.334708][T12488] device team_slave_0 entered promiscuous mode [ 839.340949][T12488] device team_slave_1 entered promiscuous mode [ 839.359325][ T3613] usb 4-1: string descriptor 0 read error: -71 [ 839.367659][ T3613] usb 4-1: USB disconnect, device number 29 [ 839.378049][ T1075] usb 2-1: USB disconnect, device number 19 [ 839.387827][T12488] device macsec1 entered promiscuous mode [ 839.400784][T12488] device team0 entered promiscuous mode [ 839.437620][T12488] team0: Device macsec1 is already an upper device of the team interface [ 839.561535][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1843'. [ 840.244582][T12488] device team0 left promiscuous mode [ 840.250255][T12488] device team_slave_0 left promiscuous mode [ 840.256285][T12488] device team_slave_1 left promiscuous mode [ 840.353056][T12498] netlink: 'syz.0.1846': attribute type 15 has an invalid length. [ 840.597640][T12492] loop3: detected capacity change from 0 to 256 [ 843.501404][T12524] vhci_hcd: invalid port number 0 [ 845.400484][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1857'. [ 845.710187][T12557] loop3: detected capacity change from 0 to 512 [ 845.754517][ T21] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 845.831189][T12557] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 845.844164][T12557] UDF-fs: Scanning with blocksize 512 failed [ 845.862035][T12557] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 845.881997][T12557] UDF-fs: Scanning with blocksize 1024 failed [ 845.907464][T12557] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 845.922969][T12557] UDF-fs: Scanning with blocksize 2048 failed [ 845.943834][T12557] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 845.977399][T12557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 846.107411][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 846.894456][ T21] usb 3-1: config 1 interface 0 has no altsetting 0 [ 847.182137][ T21] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.40 [ 847.506545][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.760649][ T21] usb 3-1: Product: syz [ 847.770345][ T21] usb 3-1: Manufacturer: syz [ 847.780361][ T21] usb 3-1: SerialNumber: syz [ 848.819872][T12580] loop4: detected capacity change from 0 to 8192 [ 849.145066][T12580] loop4: p1 p2 p3 [ 849.148847][T12580] loop4: partition table partially beyond EOD, truncated [ 849.158721][T12580] loop4: p2 start 16781326 is beyond EOD, truncated [ 849.193755][ T21] usbhid 3-1:1.0: can't add hid device: -71 [ 849.250339][ T21] usbhid: probe of 3-1:1.0 failed with error -71 [ 849.299270][ T21] usb 3-1: USB disconnect, device number 22 [ 850.012431][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1872'. [ 850.409525][T12610] loop3: detected capacity change from 0 to 2048 [ 850.496981][T12610] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 850.927500][ T3613] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 851.965634][T12618] 9pnet: p9_fd_create_tcp (12618): problem connecting socket to 127.0.0.1 [ 852.635219][ T3613] usb 4-1: not running at top speed; connect to a high speed hub [ 852.642548][T12620] loop1: detected capacity change from 0 to 512 [ 852.810185][ T3613] usb 4-1: config 1 interface 0 altsetting 118 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 852.824411][ T3613] usb 4-1: config 1 interface 0 has no altsetting 0 [ 853.074595][ T3613] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.40 [ 853.083944][ T3613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.092050][ T3613] usb 4-1: Product: Ðœ [ 853.100063][ T3613] usb 4-1: Manufacturer: á “ [ 853.104849][ T3613] usb 4-1: SerialNumber: 㘠[ 853.130025][T12610] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 853.257897][T12620] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 853.278928][T12620] UDF-fs: Scanning with blocksize 512 failed [ 853.286507][T12620] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 853.294044][T12620] UDF-fs: Scanning with blocksize 1024 failed [ 853.301149][T12620] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 853.360458][T12620] UDF-fs: Scanning with blocksize 2048 failed [ 853.415385][T12620] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 853.465204][T12620] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 853.894831][ T3613] usbhid 4-1:1.0: can't add hid device: -71 [ 853.906366][ T3613] usbhid: probe of 4-1:1.0 failed with error -71 [ 854.267266][ T3613] usb 4-1: USB disconnect, device number 30 [ 855.077901][T12643] fuse: blksize only supported for fuseblk [ 855.364486][ T3613] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 856.499098][ T3613] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.516373][ T3613] usb 4-1: config 0 has no interfaces? [ 856.542500][ T3613] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 856.573772][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.630864][ T3613] usb 4-1: config 0 descriptor?? [ 856.850297][T12663] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1889'. [ 857.139791][T12663] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1889'. [ 857.650465][ T3613] usb 4-1: can't set config #0, error -71 [ 857.657532][ T3613] usb 4-1: USB disconnect, device number 31 [ 857.790134][T12680] syz.2.1893[12680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 857.790217][T12680] syz.2.1893[12680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 858.154930][ T26] audit: type=1326 audit(1725062203.645:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.2.1893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14657c6eb9 code=0x0 [ 858.408106][T12688] loop4: detected capacity change from 0 to 256 [ 858.416754][T12684] syz.2.1893[12684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 858.416840][T12684] syz.2.1893[12684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 861.212084][T12688] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 864.556156][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 864.588944][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1905'. [ 864.664866][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 865.156301][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 865.204389][ T3909] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 866.064489][ T3909] usb 4-1: Using ep0 maxpacket: 8 [ 866.185158][ T3909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 866.211762][T12749] loop4: detected capacity change from 0 to 2048 [ 866.222412][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'. [ 866.239439][T12751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1911'. [ 866.245156][ T3909] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 866.263649][ T3909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.268601][T12751] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1911'. [ 866.286187][T12751] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1911'. [ 866.322972][ T3909] usb 4-1: config 0 descriptor?? [ 866.356975][T12749] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 866.376493][ T3909] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 866.578437][T12740] udc-core: couldn't find an available UDC or it's busy [ 866.598770][T12740] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 867.122740][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.288436][T12764] loop4: detected capacity change from 0 to 512 [ 867.429626][T12764] EXT4-fs (loop4): Test dummy encryption mode enabled [ 867.484062][T12764] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.1914: casefold flag without casefold feature [ 867.627397][T12764] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 867.699542][T12764] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 868.952963][ T3909] usb 4-1: USB disconnect, device number 32 [ 869.799794][T12777] loop3: detected capacity change from 0 to 256 [ 869.936387][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1918'. [ 870.001586][T12777] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 870.077935][ T1394] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.085014][ T1394] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.556857][T12786] attempt to access beyond end of device [ 870.556857][T12786] loop3: rw=524288, want=524409, limit=256 [ 870.571395][T12786] attempt to access beyond end of device [ 870.571395][T12786] loop3: rw=0, want=524409, limit=256 [ 870.754871][T12786] attempt to access beyond end of device [ 870.754871][T12786] loop3: rw=0, want=524409, limit=256 [ 870.770461][ T26] audit: type=1800 audit(1725062216.195:395): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1917" name="file1" dev="loop3" ino=1048831 res=0 errno=0 [ 872.011790][T12794] Falling back ldisc for ptm0. [ 872.084566][T10746] Bluetooth: hci5: command 0x0409 tx timeout [ 873.256315][T12804] sctp: [Deprecated]: syz.3.1922 (pid 12804) Use of int in max_burst socket option deprecated. [ 873.256315][T12804] Use struct sctp_assoc_value instead [ 873.274728][T12805] No such timeout policy "syz1" [ 874.427068][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1922'. [ 874.539120][T12817] loop4: detected capacity change from 0 to 256 [ 874.555223][T12781] chnl_net:caif_netlink_parms(): no params data found [ 874.686160][T12817] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 874.826115][ T3611] Bluetooth: hci5: command 0x041b tx timeout [ 875.383257][T12826] loop3: detected capacity change from 0 to 512 [ 875.496733][T12834] trusted_key: encrypted_key: insufficient parameters specified [ 875.604021][ T3671] hid-generic 0000:0000:0000.000D: item fetching failed at offset 0/1 [ 875.613643][ T3671] hid-generic: probe of 0000:0000:0000.000D failed with error -22 [ 875.659231][T12826] EXT4-fs (loop3): Test dummy encryption mode enabled [ 875.712798][T12781] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.722195][T12781] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.745286][T12781] device bridge_slave_0 entered promiscuous mode [ 875.767286][T12781] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.785426][T12781] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.785933][T12826] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.1930: casefold flag without casefold feature [ 875.793683][T12781] device bridge_slave_1 entered promiscuous mode [ 875.906429][T12826] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 875.915786][T12840] loop4: detected capacity change from 0 to 764 [ 875.944416][T12826] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 876.929565][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 876.999732][T12781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.173305][T12781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.276618][T12848] syz.4.1934[12848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.277097][T12848] syz.4.1934[12848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 878.300940][T12854] loop3: detected capacity change from 0 to 512 [ 878.410913][T12781] team0: Port device team_slave_0 added [ 878.438898][T12781] team0: Port device team_slave_1 added [ 878.479321][T12854] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 878.514445][T12854] UDF-fs: Scanning with blocksize 512 failed [ 878.535899][T12854] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 878.590281][T12854] UDF-fs: Scanning with blocksize 1024 failed [ 878.626854][T12858] loop4: detected capacity change from 0 to 512 [ 878.650042][T12781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.655993][T12854] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 878.687588][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.724817][T12854] UDF-fs: Scanning with blocksize 2048 failed [ 878.733401][T12854] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 878.797180][T12781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.841911][T12858] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 878.859216][T12858] ext4 filesystem being mounted at /183/bus supports timestamps until 2038 (0x7fffffff) [ 878.877667][T12854] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 878.919021][T12781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.015211][ T3611] Bluetooth: hci5: command 0x0419 tx timeout [ 879.056675][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.844581][T12781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.862817][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'. [ 880.789807][T12781] device hsr_slave_0 entered promiscuous mode [ 880.799528][T12781] device hsr_slave_1 entered promiscuous mode [ 882.051276][T12781] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.225482][T12881] loop4: detected capacity change from 0 to 256 [ 882.839098][T12884] loop3: detected capacity change from 0 to 136 [ 882.905393][T12781] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.056873][T12781] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.099511][T12888] loop4: detected capacity change from 0 to 128 [ 883.184482][ T3909] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 883.222166][T12892] loop3: detected capacity change from 0 to 1024 [ 883.247612][T12888] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 883.258929][T12888] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 883.298842][T12781] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.434550][ T3909] usb 1-1: Using ep0 maxpacket: 16 [ 883.554626][ T3909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.578546][ T3909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 884.294399][ T3909] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 884.306461][ T3909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 884.380332][ T3909] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 884.404402][ T3909] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 884.442074][T12898] loop3: detected capacity change from 0 to 512 [ 884.475028][T12781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 884.495801][ T3909] usb 1-1: string descriptor 0 read error: -71 [ 884.502021][ T3909] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 884.522473][ T3909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 884.548333][T12781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 884.560552][ T3909] usb 1-1: can't set config #1, error -71 [ 884.566899][T12898] EXT4-fs (loop3): Test dummy encryption mode enabled [ 884.602655][T12781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 884.612069][T12898] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.1945: casefold flag without casefold feature [ 884.640387][ T3909] usb 1-1: USB disconnect, device number 41 [ 884.660585][T12781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 884.674884][T12898] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 884.719520][T12898] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 887.745643][T12781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.761216][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 887.769349][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 887.786415][T12781] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.801197][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 887.811383][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 887.820665][T10235] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.827815][T10235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.891891][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 887.964169][T12781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 889.170592][T12781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 889.287263][T12922] syz.0.1950[12922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 889.290224][T12922] syz.0.1950[12922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 889.611665][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 889.642397][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 889.651873][T10235] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.659013][T10235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.667413][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 889.677045][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 889.702307][T12918] hub 6-0:1.0: USB hub found [ 889.709946][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 889.734759][T12918] hub 6-0:1.0: 1 port detected [ 889.774593][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 889.800198][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 889.823656][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 889.833721][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 889.941508][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 890.019200][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 890.032941][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 890.044641][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 890.053074][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 890.202425][T12932] loop3: detected capacity change from 0 to 512 [ 890.314172][T12918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1950'. [ 890.355733][T12932] EXT4-fs (loop3): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 891.023736][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 891.095122][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 891.196591][T12781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.738885][T12945] loop4: detected capacity change from 0 to 512 [ 891.824230][T12945] EXT4-fs (loop4): Test dummy encryption mode enabled [ 891.887780][T12945] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.1956: casefold flag without casefold feature [ 891.909217][T12945] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 891.924142][T12945] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 891.944374][ T13] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 891.991071][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 892.020921][T12952] loop3: detected capacity change from 0 to 512 [ 892.025150][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 892.194407][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 892.233947][T12952] EXT4-fs (loop3): 1 truncate cleaned up [ 892.348500][T12952] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 892.475484][ T13] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 892.532510][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.656221][T12781] device veth0_vlan entered promiscuous mode [ 892.669725][T12781] device veth1_vlan entered promiscuous mode [ 892.703875][T12781] device veth0_macvtap entered promiscuous mode [ 892.713226][ T13] usb 1-1: Product: syz [ 892.717646][ T13] usb 1-1: Manufacturer: syz [ 892.722251][ T13] usb 1-1: SerialNumber: syz [ 892.733672][ T13] usb 1-1: config 0 descriptor?? [ 892.786405][ T13] gspca_main: se401-2.14.0 probing 047d:5003 [ 892.855220][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 892.865806][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 892.898314][T12952] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1958: Directory hole found for htree leaf block 0 [ 892.942011][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 893.041754][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 893.050396][ T26] audit: type=1326 audit(1725062238.525:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12958 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14657c6eb9 code=0x7ffc0000 [ 893.098445][T12952] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1958: Directory hole found for htree leaf block 0 [ 893.264236][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 893.661368][T12964] input: syz0 as /devices/virtual/input/input96 [ 893.942546][ T26] audit: type=1326 audit(1725062238.525:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12958 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14657c6eb9 code=0x7ffc0000 [ 894.005724][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 894.016953][T12781] device veth1_macvtap entered promiscuous mode [ 894.030555][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 894.041840][T12962] binder: 12940:12962 ioctl 4018620d 0 returned -22 [ 894.051768][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 894.060663][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 894.161114][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 894.180041][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.232926][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.243233][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.883974][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.884480][ T13] gspca_se401: Wrong descriptor type [ 894.894157][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.953409][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.993985][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.033033][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.080525][T12781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.145284][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.204510][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.234710][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.430852][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.471622][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.491928][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.527792][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.548086][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.717337][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.728223][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.781494][T12781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.792758][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 895.805805][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 895.865633][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 895.916900][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 895.954126][T12781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.970469][T12781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.009598][T12781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.082333][T12781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.174439][ T3648] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 896.202155][ T3611] usb 1-1: USB disconnect, device number 42 [ 896.402023][ T4259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.414955][ T4664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.460442][ T4259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.474167][ T4664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.503461][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 896.518959][T12987] futex_wake_op: syz.2.1965 tries to shift op by -1; fix this program [ 896.533015][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 896.544496][ T3648] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 896.572976][ T3648] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 896.615506][ T3648] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 896.651374][ T3648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.723688][T12982] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 896.906574][T12991] loop4: detected capacity change from 0 to 512 [ 896.914593][ T3611] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 896.997106][T12991] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 897.014455][T12991] UDF-fs: Scanning with blocksize 512 failed [ 897.051579][ T3909] usb 4-1: USB disconnect, device number 33 [ 897.072669][T12991] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 897.110872][T12991] UDF-fs: Scanning with blocksize 1024 failed [ 897.150414][T12991] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 897.184422][T12991] UDF-fs: Scanning with blocksize 2048 failed [ 897.214731][T12991] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 898.941153][ T3611] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 898.957838][T12991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 898.958034][ T3611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.980422][T12995] binder: 12993:12995 ioctl c018620c 20000000 returned -22 [ 899.012194][ T3611] usb 3-1: config 0 descriptor?? [ 899.056925][ T3611] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input97 [ 900.130650][T13004] loop3: detected capacity change from 0 to 256 [ 901.581897][ T3909] usb 3-1: USB disconnect, device number 23 [ 903.816044][T13028] loop3: detected capacity change from 0 to 512 [ 903.861559][T13020] Dead loop on virtual device ip6_vti0, fix it urgently! [ 904.050687][T13028] EXT4-fs (loop3): Test dummy encryption mode enabled [ 904.081563][T13028] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.1976: casefold flag without casefold feature [ 904.103729][T13028] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 904.115672][T13028] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 906.431025][T13051] futex_wake_op: syz.1.1980 tries to shift op by -1; fix this program [ 906.473739][T13054] loop4: detected capacity change from 0 to 512 [ 908.613932][T13054] EXT4-fs (loop4): Test dummy encryption mode enabled [ 908.784551][T13054] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.1982: casefold flag without casefold feature [ 908.826364][T13054] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 908.857975][T13054] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 909.831853][ T3671] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 912.045518][T13089] loop4: detected capacity change from 0 to 512 [ 913.159051][T13089] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 913.159051][T13089] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 913.159051][T13089] [ 913.177546][T13089] EXT4-fs (loop4): Test dummy encryption mode enabled [ 913.204029][T13089] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.1987: inline data xattr refers to an external xattr inode [ 913.232400][T13090] futex_wake_op: syz.2.1991 tries to shift op by -1; fix this program [ 913.245440][T13089] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1987: couldn't read orphan inode 12 (err -117) [ 913.261203][T13089] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,noacl,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 913.481595][T13100] syz.4.1987 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 914.167590][ T3611] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 915.537213][T13117] loop1: detected capacity change from 0 to 512 [ 915.582216][T13119] loop4: detected capacity change from 0 to 512 [ 915.620975][T13117] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 915.737585][T13124] futex_wake_op: syz.0.1999 tries to shift op by -1; fix this program [ 915.763960][T13119] EXT4-fs (loop4): Test dummy encryption mode enabled [ 915.797374][T13117] UDF-fs: Scanning with blocksize 512 failed [ 915.824363][ T3611] usb 3-1: device not accepting address 24, error -71 [ 916.399603][T13119] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.1997: casefold flag without casefold feature [ 916.414270][T13117] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 916.421889][T13117] UDF-fs: Scanning with blocksize 1024 failed [ 916.436600][T13119] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 916.493403][T13117] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 916.504540][T13117] UDF-fs: Scanning with blocksize 2048 failed [ 916.505844][T13119] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 916.550306][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2001'. [ 916.562703][T13117] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 916.586128][T13117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.778024][T10746] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 916.815397][T13134] rdma_op ffff88801f9601f0 conn xmit_rdma 0000000000000000 [ 919.302461][ T6145] Bluetooth: hci2: command 0x0409 tx timeout [ 919.404981][T13142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 919.460088][ C0] eth0: bad gso: type: 1, size: 1408 [ 919.490823][T13144] binder: 13143:13144 ioctl 4018620d 0 returned -22 [ 919.815079][ T3611] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 920.234411][ T3611] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.271577][ T3611] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 920.414972][T13156] futex_wake_op: syz.1.2008 tries to shift op by -1; fix this program [ 920.485326][ T3611] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 920.772726][ T3611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.799260][ T3611] usb 3-1: Product: syz [ 920.803480][ T3611] usb 3-1: Manufacturer: syz [ 920.837727][ T3611] usb 3-1: SerialNumber: syz [ 920.987391][ T3611] usb 3-1: can't set config #1, error -71 [ 921.118589][ T3611] usb 3-1: USB disconnect, device number 25 [ 921.144538][ T3648] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 922.888198][T13175] loop4: detected capacity change from 0 to 512 [ 922.925749][T13177] futex_wake_op: syz.2.2015 tries to shift op by -1; fix this program [ 922.941709][T13175] EXT4-fs (loop4): Test dummy encryption mode enabled [ 922.948684][ T3648] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 922.979001][T13175] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.2014: casefold flag without casefold feature [ 923.005654][ T3648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.018689][T13175] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 923.085281][ T3648] usb 2-1: config 0 descriptor?? [ 923.095026][T13175] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 923.176604][ T3648] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input99 [ 923.341703][ T3648] usb 2-1: USB disconnect, device number 21 [ 923.433619][T10746] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 924.236337][T13186] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 926.645629][T10746] usb 3-1: device descriptor read/all, error -71 [ 926.927264][T13201] netlink: 'syz.2.2021': attribute type 2 has an invalid length. [ 926.964993][T13201] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2021'. [ 927.404217][T13211] kAFS: No cell specified [ 928.195786][T13218] bridge0: port 3(team0) entered blocking state [ 928.202674][T13218] bridge0: port 3(team0) entered disabled state [ 928.283873][T13220] loop4: detected capacity change from 0 to 2048 [ 929.065016][T13218] device team0 entered promiscuous mode [ 929.070612][T13218] device team_slave_0 entered promiscuous mode [ 929.144780][T13218] device team_slave_1 entered promiscuous mode [ 929.203444][T13218] bridge0: port 3(team0) entered blocking state [ 929.210695][T13218] bridge0: port 3(team0) entered forwarding state [ 929.289036][T13233] loop3: detected capacity change from 0 to 512 [ 929.431357][T13233] EXT4-fs (loop3): Test dummy encryption mode enabled [ 930.058491][T13233] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.2029: casefold flag without casefold feature [ 930.089849][T13233] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 930.145738][T13241] futex_wake_op: syz.0.2031 tries to shift op by -1; fix this program [ 930.163864][T13244] loop4: detected capacity change from 0 to 256 [ 930.175144][T13233] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 931.213322][T13244] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x19a2be85, utbl_chksum : 0xe619d30d) [ 931.274391][T10746] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 931.516405][ T1394] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.523014][ T1394] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.444371][T10746] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 932.474806][T10746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.542868][T10746] usb 1-1: config 0 descriptor?? [ 932.547037][T13257] loop1: detected capacity change from 0 to 512 [ 932.597060][T10746] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input101 [ 932.643256][T13257] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 932.666211][T13257] UDF-fs: Scanning with blocksize 512 failed [ 932.680860][T13257] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 932.712186][T13257] UDF-fs: Scanning with blocksize 1024 failed [ 932.767437][T13257] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 932.834769][T13257] UDF-fs: Scanning with blocksize 2048 failed [ 932.845494][T10746] usb 1-1: USB disconnect, device number 44 [ 932.882682][ T4446] udevd[4446]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 932.900434][T13257] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 932.960035][T13257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 934.278915][T13267] loop3: detected capacity change from 0 to 64 [ 938.068002][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'. [ 938.129061][T13311] xt_CT: You must specify a L4 protocol and not use inversions on it [ 938.303646][T13319] loop1: detected capacity change from 0 to 256 [ 938.399290][T13319] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x19a2be85, utbl_chksum : 0xe619d30d) [ 938.684542][ T3611] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 938.994529][ T3611] usb 3-1: device descriptor read/64, error -71 [ 939.774484][ T3611] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 939.952222][T13338] loop3: detected capacity change from 0 to 128 [ 940.014598][ T3611] usb 3-1: device descriptor read/64, error -71 [ 940.047008][T13338] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 940.077218][T13338] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038 (0x7fffffff) [ 940.154683][ T3611] usb usb3-port1: attempt power cycle [ 940.256937][T13338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 940.264166][T13338] IPv6: NLM_F_CREATE should be set when creating new route [ 940.360925][T13338] fscrypt (loop3, inode 12): Unsupported encryption flags (0x10) [ 940.627827][ T3611] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 940.753143][ T3611] usb 3-1: device descriptor read/8, error -71 [ 940.937540][T10746] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 940.954345][T10746] Bluetooth: hci3: Injecting HCI hardware error event [ 940.954618][T13348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 940.961830][T10683] Bluetooth: hci3: hardware error 0x00 [ 941.164601][ T3611] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 941.734412][ T3611] usb 3-1: device descriptor read/8, error -71 [ 942.021224][ T21] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 942.033849][ T3611] usb usb3-port1: unable to enumerate USB device [ 942.314376][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 942.486860][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 943.685262][ T21] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 943.698892][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.712894][ T21] usb 1-1: Product: syz [ 943.720534][ T21] usb 1-1: Manufacturer: syz [ 943.735779][ C0] eth0: bad gso: type: 1, size: 1408 [ 943.747535][ T21] usb 1-1: SerialNumber: syz [ 943.798636][ T21] usb 1-1: config 0 descriptor?? [ 943.814538][ T21] usb 1-1: can't set config #0, error -71 [ 943.829291][ T21] usb 1-1: USB disconnect, device number 45 [ 945.269271][T13383] loop1: detected capacity change from 0 to 2048 [ 945.346913][T13383] UDF-fs: bad mount option "uid=000000000000000000000000000000000000000018446744073709551615" or missing value [ 946.749523][ T26] audit: type=1326 audit(1725062292.265:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dc69feb9 code=0x7ffc0000 [ 946.829285][ T26] audit: type=1326 audit(1725062292.285:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f32dc69feb9 code=0x7ffc0000 [ 946.882653][ T26] audit: type=1326 audit(1725062292.285:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dc69feb9 code=0x7ffc0000 [ 947.020102][ T26] audit: type=1326 audit(1725062292.285:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dc69feb9 code=0x7ffc0000 [ 947.043084][ T26] audit: type=1326 audit(1725062292.285:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32dc69feb9 code=0x7ffc0000 [ 947.069404][ T26] audit: type=1326 audit(1725062292.285:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dc69feb9 code=0x7ffc0000 [ 947.091995][ T26] audit: type=1326 audit(1725062292.285:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dc69feb9 code=0x7ffc0000 [ 948.404534][ T26] audit: type=1326 audit(1725062292.295:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f32dc69feb9 code=0x7ffc0000 [ 948.568796][ T26] audit: type=1326 audit(1725062292.295:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dc69feb9 code=0x7ffc0000 [ 949.010072][ T26] audit: type=1326 audit(1725062292.295:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dc69feb9 code=0x7ffc0000 [ 949.610396][T13438] netlink: 'syz.2.2084': attribute type 10 has an invalid length. [ 949.695446][T13438] device wlan1 entered promiscuous mode [ 949.715675][T13442] loop1: detected capacity change from 0 to 764 [ 950.792484][T13450] netlink: 'syz.4.2087': attribute type 10 has an invalid length. [ 950.893936][T13450] team0: Port device netdevsim0 added [ 951.030266][T13458] loop4: detected capacity change from 0 to 256 [ 951.125053][ T3613] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 951.134468][T10746] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 951.169597][T13458] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 951.253217][T13463] netlink: 'syz.3.2093': attribute type 9 has an invalid length. [ 951.262085][T13463] netlink: 'syz.3.2093': attribute type 7 has an invalid length. [ 951.323113][T13463] netlink: 'syz.3.2093': attribute type 8 has an invalid length. [ 951.503575][T10746] usb 2-1: Using ep0 maxpacket: 32 [ 951.842644][T10746] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 951.928256][T10746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.960790][T10746] usb 2-1: Product: syz [ 951.964546][ T3613] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 951.969273][T10746] usb 2-1: Manufacturer: syz [ 951.978713][ T3613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.013585][T10746] usb 2-1: SerialNumber: syz [ 952.058246][ T3613] usb 3-1: config 0 descriptor?? [ 952.077141][T10746] usb 2-1: config 0 descriptor?? [ 952.121021][ T3613] cp210x 3-1:0.0: cp210x converter detected [ 952.250778][T13470] fuse: Bad value for 'fd' [ 952.270389][T13470] loop4: detected capacity change from 0 to 16 [ 952.343471][T13470] erofs: (device loop4): mounted with root inode @ nid 36. [ 952.355693][ T3611] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 952.480536][T13469] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 952.491962][T13469] attempt to access beyond end of device [ 952.491962][T13469] loop4: rw=0, want=304, limit=16 [ 952.512644][T13469] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 952.771021][ T3613] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 952.783222][ T3611] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 952.793490][ T3611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.811402][T10746] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 952.814768][ T3613] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 952.820613][ T3611] usb 4-1: config 0 descriptor?? [ 952.825822][T13475] netlink: 'syz.4.2097': attribute type 11 has an invalid length. [ 952.875508][ T3613] usb 3-1: cp210x converter now attached to ttyUSB0 [ 952.875619][ T3611] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input103 [ 952.894525][ T3613] usb 3-1: USB disconnect, device number 32 [ 952.982053][ T3613] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 953.003164][ T3613] cp210x 3-1:0.0: device disconnected [ 953.041578][ T3671] usb 2-1: USB disconnect, device number 22 [ 953.088322][ T3611] usb 4-1: USB disconnect, device number 34 [ 953.167530][T13483] loop4: detected capacity change from 0 to 8 [ 953.432022][T13483] SQUASHFS error: Failed to read block 0x63a: -5 [ 953.438552][T13483] SQUASHFS error: Unable to read metadata cache entry [638] [ 953.445940][T13483] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 953.510824][ C0] eth0: bad gso: type: 1, size: 1408 [ 953.643780][T13497] loop4: detected capacity change from 0 to 8 [ 953.891446][T13497] SQUASHFS error: zstd decompression failed, data probably corrupt [ 953.917135][T13497] SQUASHFS error: Failed to read block 0x4ec: -5 [ 953.944599][T13497] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 953.951997][T13497] SQUASHFS error: Unable to read inode 0x2011f [ 954.706147][T13516] loop3: detected capacity change from 0 to 1024 [ 954.798093][T13519] syz.4.2101 (13519): /proc/13496/oom_adj is deprecated, please use /proc/13496/oom_score_adj instead. [ 954.836778][T13519] loop4: detected capacity change from 0 to 16 [ 955.475011][T13519] erofs: Unknown parameter '00000000000000000000000 00000000000000000000000 0000000000000000erofs' [ 955.491308][T13516] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 955.544806][T13516] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 955.575954][T13516] jbd2_journal_init_inode: Cannot locate journal superblock [ 955.631734][T13516] EXT4-fs (loop3): Could not load journal inode [ 957.410883][T13534] loop3: detected capacity change from 0 to 512 [ 957.540255][T13534] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 957.564702][T13534] UDF-fs: Scanning with blocksize 512 failed [ 957.592256][T13534] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 957.616712][T13534] UDF-fs: Scanning with blocksize 1024 failed [ 957.639824][T13534] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 957.683424][T13534] UDF-fs: Scanning with blocksize 2048 failed [ 957.743755][T13534] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 957.888267][ T6145] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 958.043659][T13548] xt_socket: unknown flags 0x50 [ 958.861174][ C0] eth0: bad gso: type: 1, size: 1408 [ 959.013441][T13534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 959.158097][T13558] loop4: detected capacity change from 0 to 512 [ 959.324421][ T3671] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 959.582896][T13558] EXT4-fs (loop4): Test dummy encryption mode enabled [ 959.618676][T13558] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.2114: casefold flag without casefold feature [ 959.665185][T13558] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 959.951319][T13570] input: syz1 as /devices/virtual/input/input105 [ 960.168538][T13558] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 961.784733][ T3671] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 961.797060][ T3671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.820806][ T3671] usb 2-1: config 0 descriptor?? [ 961.944691][ T3671] usb 2-1: can't set config #0, error -71 [ 962.187804][ T3671] usb 2-1: USB disconnect, device number 23 [ 962.749631][T13611] netlink: 'syz.2.2129': attribute type 2 has an invalid length. [ 965.174374][ T3671] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 965.204774][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2129'. [ 966.637035][T13644] loop1: detected capacity change from 0 to 512 [ 966.830645][T13644] EXT4-fs (loop1): failed to initialize system zone (-117) [ 966.841063][T13644] EXT4-fs (loop1): mount failed [ 966.884448][ T3671] usb 4-1: device descriptor read/64, error -71 [ 967.164509][ T3671] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 967.249834][T13657] loop4: detected capacity change from 0 to 512 [ 967.301901][T13657] EXT4-fs (loop4): Test dummy encryption mode enabled [ 967.343454][T13657] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.2138: casefold flag without casefold feature [ 967.361026][T13657] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 967.391851][T13657] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 967.597321][T13666] loop1: detected capacity change from 0 to 1024 [ 967.735432][ T3671] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 967.752856][ T3671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.839909][ T3671] usb 4-1: config 0 descriptor?? [ 967.899615][T13666] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 967.977928][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2142'. [ 967.990449][ T3671] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input107 [ 968.209977][T13666] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #2: comm syz.1.2141: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 968.260487][T13666] EXT4-fs (loop1): get root inode failed [ 968.266762][T13666] EXT4-fs (loop1): mount failed [ 968.309462][ T3909] usb 4-1: USB disconnect, device number 36 [ 968.353979][T13677] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 968.360619][T13677] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 969.005559][T13677] vhci_hcd vhci_hcd.0: Device attached [ 969.020714][T13666] loop1: detected capacity change from 0 to 512 [ 969.036886][T13678] vhci_hcd: connection closed [ 969.037218][ T155] vhci_hcd: stop threads [ 969.046567][ T155] vhci_hcd: release socket [ 969.051075][ T155] vhci_hcd: disconnect device [ 969.117959][T13666] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 969.138348][T13686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2144'. [ 969.146303][T13666] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038 (0x7fffffff) [ 969.178420][ T3648] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 970.824480][ T3648] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 970.832496][ T3648] usb 1-1: can't read configurations, error -71 [ 970.960242][T13702] loop1: detected capacity change from 0 to 256 [ 971.047654][T13702] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 971.164595][ T21] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 971.585508][ T21] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 971.610185][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.680552][ T21] usb 4-1: config 0 descriptor?? [ 972.348092][T13710] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 972.357756][T13710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 972.365297][T13710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 972.873998][T13720] loop1: detected capacity change from 0 to 256 [ 973.164596][T13720] exfat: Deprecated parameter 'namecase' [ 973.256516][T13720] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 974.478254][ T21] usb 4-1: Cannot set autoneg [ 974.482994][ T21] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 974.597384][T13742] futex_wake_op: syz.2.2159 tries to shift op by -1; fix this program [ 974.784553][ T21] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 975.898087][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 975.903775][ T3613] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 975.915766][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.929584][ T21] usb 2-1: config 0 descriptor?? [ 975.948809][ T3616] usb 4-1: USB disconnect, device number 37 [ 975.986582][T13751] loop3: detected capacity change from 0 to 128 [ 975.997915][ T21] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input109 [ 976.056208][T13751] FAT-fs (loop3): invalid media value (0x00) [ 976.100250][T13751] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 976.144600][T13751] FAT-fs (loop3): Can't find a valid FAT filesystem [ 976.223086][ T3616] usb 2-1: USB disconnect, device number 24 [ 976.261843][T13751] loop3: detected capacity change from 0 to 256 [ 976.304496][ T3613] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 976.313825][ T3613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.326596][T13751] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 976.371393][ T3613] usb 3-1: config 0 descriptor?? [ 976.428850][ T3613] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input110 [ 976.563198][T13755] exFAT-fs (loop3): hint_cluster is invalid (17) [ 976.573599][T13755] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 976.582416][T13755] exFAT-fs (loop3): Filesystem has been set read-only [ 976.635103][ T3613] usb 3-1: USB disconnect, device number 33 [ 976.791664][T13758] loop3: detected capacity change from 0 to 256 [ 976.888732][T13758] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 978.530537][T13774] loop4: detected capacity change from 0 to 512 [ 978.808289][T13774] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 979.492838][T13781] 9pnet: Insufficient options for proto=fd [ 979.700567][T13787] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 979.710313][T13787] cramfs: wrong magic [ 979.748323][T13774] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 980.911530][T13774] EXT4-fs (loop4): 1 truncate cleaned up [ 980.995239][T13774] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 981.073587][T13792] netlink: 'syz.1.2169': attribute type 10 has an invalid length. [ 981.095227][T13792] bond0: (slave bond_slave_0): Releasing backup interface [ 983.291245][T13808] loop1: detected capacity change from 0 to 1024 [ 983.435431][T13808] hfsplus: unable to parse mount options [ 985.506846][T13820] tipc: Enabling of bearer rejected, failed to enable media [ 985.543577][T13835] loop1: detected capacity change from 0 to 8 [ 985.611758][T13837] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 985.624562][T13820] loop4: detected capacity change from 0 to 2048 [ 985.656168][T13835] SQUASHFS error: zstd decompression failed, data probably corrupt [ 985.703277][T13820] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 985.706990][T13838] loop3: detected capacity change from 0 to 256 [ 985.750524][T13835] SQUASHFS error: Failed to read block 0x4ec: -5 [ 985.803693][T13835] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 985.811273][T13835] SQUASHFS error: Unable to read inode 0x2011f [ 985.837998][T13838] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 985.851479][T13820] attempt to access beyond end of device [ 985.851479][T13820] loop4: rw=524288, want=33554432, limit=2048 [ 985.864998][T13839] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 986.262373][T13841] loop1: detected capacity change from 0 to 16 [ 986.271585][T13841] erofs: Unknown parameter '00000000000000000000000 00000000000000000000000 0000000000000000erofs' [ 986.833853][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 987.229558][T13857] loop3: detected capacity change from 0 to 256 [ 987.573203][T13857] FAT-fs (loop3): Unrecognized mount option "uni_xlate=" or missing value [ 988.290608][T13867] loop1: detected capacity change from 0 to 1024 [ 989.136653][T13865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2192'. [ 990.007818][ T3909] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 990.018119][T13880] loop1: detected capacity change from 0 to 16 [ 990.048613][T13880] erofs: Unknown parameter 'ÿÿÿÿ' [ 990.204104][T13880] loop1: detected capacity change from 0 to 16 [ 990.218827][T13880] erofs: (device loop1): mounted with root inode @ nid 36. [ 990.284640][T13889] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 990.293725][T13889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 990.301400][T13889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 991.014673][ T3909] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 991.032180][T13880] erofs: (device loop1): erofs_read_inode: unsupported i_format 36 of nid 37 [ 991.137912][T13892] input: syz0 as /devices/virtual/input/input111 [ 991.156724][T13880] erofs: (device loop1): erofs_read_inode: unsupported i_format 36 of nid 37 [ 991.176943][ T3909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.226335][T13893] futex_wake_op: syz.2.2199 tries to shift op by -1; fix this program [ 991.601350][ T3909] usb 5-1: config 0 descriptor?? [ 991.738309][T13901] loop1: detected capacity change from 0 to 512 [ 991.796241][T13901] EXT4-fs (loop1): Test dummy encryption mode enabled [ 991.821897][T13901] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.2200: casefold flag without casefold feature [ 991.914939][ T3616] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 991.929159][T13901] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 992.025364][T13901] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 992.522579][ T3909] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 992.632389][ T3909] [drm] Initialized udl on minor 2 [ 993.246710][ T1394] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.324629][ T3616] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 993.333708][ T3616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.541947][ T3616] usb 3-1: config 0 descriptor?? [ 993.584639][ T3909] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 993.613274][ T3909] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 993.642257][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 993.642271][ T26] audit: type=1326 audit(1725062339.158:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13917 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 993.693533][ T3616] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input112 [ 993.800213][ T3909] usb 5-1: USB disconnect, device number 32 [ 993.828441][ T26] audit: type=1326 audit(1725062339.198:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13917 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 993.854216][ T26] audit: type=1326 audit(1725062339.238:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13917 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 993.877453][ T26] audit: type=1326 audit(1725062339.238:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13917 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 993.906243][ T26] audit: type=1326 audit(1725062339.238:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13917 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 993.929261][ T26] audit: type=1326 audit(1725062339.248:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13917 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 993.938015][T13916] Process accounting resumed [ 993.957874][ T26] audit: type=1326 audit(1725062339.248:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13917 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 993.986707][ T3616] usb 3-1: USB disconnect, device number 34 [ 994.070862][T13920] loop4: detected capacity change from 0 to 1024 [ 994.087354][ T26] audit: type=1326 audit(1725062339.248:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13917 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 994.287441][ T26] audit: type=1326 audit(1725062339.248:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13917 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 994.501038][ T26] audit: type=1326 audit(1725062339.298:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13917 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 994.998957][T13936] loop1: detected capacity change from 0 to 2048 [ 995.043704][T13936] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 995.049495][ T4446] udevd[4446]: incorrect nilfs2 checksum on /dev/loop1 [ 995.141926][T13936] NILFS (loop1): unrecognized mount option "0xffffffffffffffff18446744073709551615" [ 995.352099][T13940] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 995.364759][T13940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 995.373921][T13940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 995.381632][T13940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 995.394398][T13940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 995.692212][ T3671] Bluetooth: hci5: command 0x0406 tx timeout [ 995.846655][T13936] netlink: 'syz.1.2209': attribute type 1 has an invalid length. [ 996.166045][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2209'. [ 996.238368][T13954] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 996.592235][T13964] loop1: detected capacity change from 0 to 512 [ 996.694745][T13964] EXT4-fs (loop1): Ignoring removed orlov option [ 996.721302][T13964] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 996.832438][ T4664] tipc: Disabling bearer [ 996.838266][ T4664] tipc: Left network mode [ 996.870207][T13964] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2216: Attempting to read directory block (0) that is past i_size (256) [ 996.950146][T13964] EXT4-fs (loop1): Remounting filesystem read-only [ 996.995185][T13964] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 997.004900][T13964] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,dioread_nolock,grpjquota=.oldalloc,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 997.247710][T13976] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 997.510538][T13980] netlink: 'syz.4.2221': attribute type 2 has an invalid length. [ 997.534459][T13976] usb 4-1: Using ep0 maxpacket: 8 [ 997.549643][T13980] netlink: 'syz.4.2221': attribute type 1 has an invalid length. [ 997.664649][T13976] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 997.694369][T13976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 997.711874][T13976] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31008, setting to 1024 [ 997.723636][T13976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 997.752062][T13976] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.765551][T13976] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 997.774798][T13976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.787055][T13977] Bluetooth: hci5: command 0x0405 tx timeout [ 998.153419][T13992] loop1: detected capacity change from 0 to 512 [ 998.177883][T13976] usb 4-1: GET_CAPABILITIES returned 0 [ 998.183401][T13976] usbtmc 4-1:16.0: can't read capabilities [ 998.296860][T13999] raw_sendmsg: syz.0.2226 forgot to set AF_INET. Fix it! [ 998.309756][T13977] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 998.637908][T13992] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 998.664363][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.673483][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.682579][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.682692][T13992] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 998.691751][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.703096][T13992] EXT4-fs (loop1): 1 truncate cleaned up [ 998.709252][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.723836][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.727472][T13992] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,usrjquota=.errors=continue,noload,data_err=ignore,grpjquota="errors=continue,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 998.732912][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.763399][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.772535][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.781616][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.790666][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.799709][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.808747][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.817788][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.826818][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.835849][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 998.935760][T14009] udc-core: couldn't find an available UDC or it's busy [ 998.942725][T14009] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 999.096912][T14013] netlink: 'syz.4.2228': attribute type 21 has an invalid length. [ 999.374807][T10746] usb 4-1: USB disconnect, device number 38 [ 999.822578][T14022] loop1: detected capacity change from 0 to 512 [ 999.829447][T13977] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 999.848896][T13977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.866353][T13977] usb 3-1: config 0 descriptor?? [ 1000.821883][T14027] batadv0: mtu less than device minimum [ 1000.853035][T14027] qnx6: unable to set blocksize [ 1000.867124][T14022] EXT4-fs (loop1): 1 orphan inode deleted [ 1000.873117][T14022] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 1000.925429][T13977] usb 3-1: can't set config #0, error -71 [ 1000.956591][T13977] usb 3-1: USB disconnect, device number 35 [ 1000.973695][T14022] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038 (0x7fffffff) [ 1002.994479][T14060] ptrace attach of "./syz-executor exec"[12781] was attempted by "./syz-executor exec"[14060] [ 1004.059722][T14068] loop3: detected capacity change from 0 to 512 [ 1004.570419][T14068] FAT-fs (loop3): bogus logical sector size 0 [ 1004.576558][T14068] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1004.607597][T14075] loop1: detected capacity change from 0 to 764 [ 1004.886368][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2244'. [ 1004.895520][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2244'. [ 1004.904591][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2244'. [ 1005.135532][T14089] loop3: detected capacity change from 0 to 512 [ 1005.143356][ T4664] device hsr_slave_0 left promiscuous mode [ 1005.152498][T14078] loop4: detected capacity change from 0 to 2048 [ 1005.164771][ T4664] device hsr_slave_1 left promiscuous mode [ 1005.212250][ T4664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.238771][T14089] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1005.256393][ T4664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.311866][T14089] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.2246: casefold flag without casefold feature [ 1005.419260][T14089] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1005.453385][T14089] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 1005.519746][T14073] loop4: detected capacity change from 0 to 512 [ 1005.520189][ T4664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.540073][ T4664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.559650][ T4664] device bridge_slave_1 left promiscuous mode [ 1005.574004][ T4664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.710596][T14073] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.2242: casefold flag without casefold feature [ 1005.745513][T14073] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1005.776891][ T4664] device veth1_macvtap left promiscuous mode [ 1005.783058][ T4664] device veth0_macvtap left promiscuous mode [ 1005.785339][T14073] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1005.789723][ T4664] device veth1_vlan left promiscuous mode [ 1005.831119][ T4664] device veth0_vlan left promiscuous mode [ 1006.046892][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'. [ 1006.619937][T14078] fscrypt (loop4, inode 18): v1 policies can't be used on casefolded directories [ 1006.866737][ T4664] team0 (unregistering): Port device team_slave_1 removed [ 1006.885023][ T4664] team0 (unregistering): Port device team_slave_0 removed [ 1006.899157][ T4664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.915369][ T4664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.994891][T14111] kernel profiling enabled (shift: 12) [ 1007.030355][ T4664] bond0 (unregistering): Released all slaves [ 1007.294591][ T3909] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1007.516146][T14119] device syz_tun entered promiscuous mode [ 1007.531167][T14119] device batadv_slave_1 entered promiscuous mode [ 1007.619962][T14125] loop1: detected capacity change from 0 to 764 [ 1007.685117][ T3909] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1007.695397][ T3909] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1007.864627][ T3909] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1007.874952][ T3909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.883101][ T3909] usb 1-1: Product: syz [ 1007.888019][ T3909] usb 1-1: Manufacturer: syz [ 1007.894427][ T3909] usb 1-1: SerialNumber: syz [ 1008.056574][ T3909] usb 1-1: config 0 descriptor?? [ 1008.084838][T14111] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1008.099121][T14111] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1008.202725][T14132] loop1: detected capacity change from 0 to 512 [ 1008.384587][ T3909] dm9601: probe of 1-1:0.0 failed with error -71 [ 1008.402453][ T3909] usb 1-1: USB disconnect, device number 48 [ 1008.444638][T14132] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1008.568349][T14132] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1008.590760][T14148] input: syz0 as /devices/virtual/input/input114 [ 1008.617989][T14132] EXT4-fs (loop1): 1 truncate cleaned up [ 1008.623675][T14132] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1009.772109][T14158] loop3: detected capacity change from 0 to 4096 [ 1009.837109][T14164] loop1: detected capacity change from 0 to 16 [ 1009.888971][T14164] erofs: (device loop1): mounted with root inode @ nid 36. [ 1010.380203][ T26] kauditd_printk_skb: 68 callbacks suppressed [ 1010.380218][ T26] audit: type=1326 audit(1725062355.898:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 1010.415501][T14158] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1010.477204][T14162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1010.514358][ T26] audit: type=1326 audit(1725062355.928:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 1010.587263][ T26] audit: type=1326 audit(1725062355.988:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 1010.780499][ T26] audit: type=1326 audit(1725062355.988:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 1010.851324][T14176] device macsec0 entered promiscuous mode [ 1010.873740][T14176] device macsec1 entered promiscuous mode [ 1010.886187][ T26] audit: type=1326 audit(1725062355.988:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 1010.912045][ T26] audit: type=1326 audit(1725062355.988:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 1010.936723][ T26] audit: type=1326 audit(1725062355.988:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 1010.960300][ T26] audit: type=1326 audit(1725062355.998:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 1011.103251][ T26] audit: type=1326 audit(1725062355.998:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 1011.134358][ T26] audit: type=1326 audit(1725062355.998:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8c265eb9 code=0x7ffc0000 [ 1012.916133][T14196] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1013.276793][T14196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1013.284644][T14196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1013.725346][T14213] loop3: detected capacity change from 0 to 512 [ 1013.829037][T14216] loop1: detected capacity change from 0 to 128 [ 1014.041268][T14213] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1014.281323][T14213] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1014.448074][T14213] EXT4-fs (loop3): 1 truncate cleaned up [ 1014.454113][T14213] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1016.045741][T14227] loop4: detected capacity change from 0 to 8192 [ 1016.053219][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 1016.053234][ T26] audit: type=1800 audit(1725062361.568:572): pid=14229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2287" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1121.444289][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1121.451270][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4664/1:b..l [ 1121.459942][ C0] (detected by 0, t=10502 jiffies, g=75945, q=12) [ 1121.466434][ C0] task:kworker/u4:14 state:R running task stack:20992 pid: 4664 ppid: 2 flags:0x00004000 [ 1121.479087][ C0] Workqueue: netns cleanup_net [ 1121.483850][ C0] Call Trace: [ 1121.487121][ C0] [ 1121.490037][ C0] __schedule+0x12c4/0x45b0 [ 1121.494557][ C0] ? mark_lock+0x98/0x340 [ 1121.498869][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1121.504840][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1121.510705][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1121.516571][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 1121.521833][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 1121.527095][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 1121.532198][ C0] ? __cond_resched+0x20/0x20 [ 1121.536848][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1121.542823][ C0] irqentry_exit+0x53/0x80 [ 1121.547302][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1121.553343][ C0] RIP: 0010:lock_acquire+0x252/0x4f0 [ 1121.558608][ C0] Code: 2b 00 74 08 4c 89 f7 e8 4c 7b 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1121.578276][ C0] RSP: 0018:ffffc900031978e0 EFLAGS: 00000206 [ 1121.584324][ C0] RAX: 0000000000000001 RBX: 1ffff92000632f28 RCX: 1ffff92000632ec8 [ 1121.592290][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b3cc0 RDI: ffffffff8ad8f7c0 [ 1121.600236][ C0] RBP: ffffc90003197a40 R08: dffffc0000000000 R09: fffffbfff20e1e19 [ 1121.608200][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000632f24 [ 1121.616147][ C0] R13: dffffc0000000000 R14: ffffc90003197940 R15: 0000000000000246 [ 1121.624131][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1121.629488][ C0] ? __might_sleep+0xc0/0xc0 [ 1121.634061][ C0] rcu_lock_acquire+0x2a/0x30 [ 1121.638713][ C0] ? rcu_lock_acquire+0x5/0x30 [ 1121.643448][ C0] inet_twsk_purge+0x129/0x9d0 [ 1121.648190][ C0] ? rcu_force_quiescent_state+0x230/0x230 [ 1121.653969][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 1121.659314][ C0] ? evict+0x56e/0x620 [ 1121.663359][ C0] ? dccp_v4_exit_net+0x80/0x80 [ 1121.668193][ C0] cleanup_net+0x763/0xb60 [ 1121.672597][ C0] ? ops_free_list+0x340/0x340 [ 1121.677403][ C0] process_one_work+0x8a1/0x10c0 [ 1121.682410][ C0] ? worker_detach_from_pool+0x260/0x260 [ 1121.688018][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1121.693666][ C0] ? kthread_data+0x4e/0xc0 [ 1121.698158][ C0] ? wq_worker_running+0x97/0x170 [ 1121.703182][ C0] worker_thread+0xaca/0x1280 [ 1121.707861][ C0] kthread+0x3f6/0x4f0 [ 1121.711927][ C0] ? rcu_lock_release+0x20/0x20 [ 1121.716755][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1121.721318][ C0] ret_from_fork+0x1f/0x30 [ 1121.725716][ C0] [ 1121.728710][ C0] rcu: rcu_preempt kthread starved for 10523 jiffies! g75945 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1121.739868][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1121.749817][ C0] rcu: RCU grace-period kthread stack dump: [ 1121.755676][ C0] task:rcu_preempt state:R running task stack:26240 pid: 15 ppid: 2 flags:0x00004000 [ 1121.766442][ C0] Call Trace: [ 1121.769697][ C0] [ 1121.772620][ C0] __schedule+0x12c4/0x45b0 [ 1121.777115][ C0] ? trace_hardirqs_on+0x30/0x80 [ 1121.782060][ C0] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 1121.788031][ C0] ? __mod_timer+0xa8e/0xeb0 [ 1121.792606][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1121.798483][ C0] ? mod_timer_pending+0x20/0x20 [ 1121.803403][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 1121.808751][ C0] schedule+0x11b/0x1f0 [ 1121.812905][ C0] schedule_timeout+0x1b9/0x300 [ 1121.817735][ C0] ? console_conditional_schedule+0x40/0x40 [ 1121.823605][ C0] ? update_process_times+0x200/0x200 [ 1121.828983][ C0] ? prepare_to_swait_event+0x321/0x340 [ 1121.834516][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 1121.839351][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1121.844532][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 1121.850683][ C0] ? rcu_gp_init+0xdae/0x1140 [ 1121.855339][ C0] ? rcu_gp_init+0x1140/0x1140 [ 1121.860077][ C0] ? finish_swait+0xc5/0x1d0 [ 1121.864640][ C0] rcu_gp_kthread+0xa4/0x360 [ 1121.869203][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1121.874042][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1121.879136][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1121.885012][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 1121.890019][ C0] kthread+0x3f6/0x4f0 [ 1121.894071][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1121.899160][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1121.903834][ C0] ret_from_fork+0x1f/0x30 [ 1121.908518][ C0] [ 1121.911630][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1121.917936][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1121.923137][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_do_entry+0x10f/0x340