last executing test programs: 4m26.516352168s ago: executing program 1 (id=2178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000012000000850000006d000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 4m25.02422644s ago: executing program 1 (id=2186): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x1000000) 4m24.708274846s ago: executing program 1 (id=2187): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000a00)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xff}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8no}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_lower}, {@utf8}, {@uni_xlate}]}, 0x80, 0x350, &(0x7f0000000580)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4m24.341922831s ago: executing program 1 (id=2189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080)={0x2}, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m23.168077838s ago: executing program 1 (id=2196): r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) 4m22.020712676s ago: executing program 1 (id=2199): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r6 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r6, &(0x7f0000ffb000/0x3000)=nil, 0x2000) read$FUSE(r5, &(0x7f0000010140)={0x2020}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x124, 0x30, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{0x110, 0x1, [@m_gact={0x74, 0xb, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x16fb, 0x2}}]}, {0x39, 0x6, "7a26c822056c1c92d4a391d4edd403e7c642c1fad2a36600ccbe7be76abd06be0c4b006715609ea9569047075943f1943d7ddf491f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x98, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x6a, 0x6, "5c284c3a3976241974df53e1d3b1cccfebd3f123dec3f372dd21566159734af29ce5d14ed6f7073420a1d585c18bbb14dabd87303b46d5802bd94ac81b53ad5bb23b64e5f966aeb3d264d2a1b41a1911920ce0a01624236b1a6243c02b4d0154443183978c1a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x124}}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5452, &(0x7f0000000000)) sendmmsg$inet(r7, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x54) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) personality(0x400000) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 4m6.217704555s ago: executing program 32 (id=2199): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r6 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r6, &(0x7f0000ffb000/0x3000)=nil, 0x2000) read$FUSE(r5, &(0x7f0000010140)={0x2020}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x124, 0x30, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{0x110, 0x1, [@m_gact={0x74, 0xb, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x16fb, 0x2}}]}, {0x39, 0x6, "7a26c822056c1c92d4a391d4edd403e7c642c1fad2a36600ccbe7be76abd06be0c4b006715609ea9569047075943f1943d7ddf491f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x98, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x6a, 0x6, "5c284c3a3976241974df53e1d3b1cccfebd3f123dec3f372dd21566159734af29ce5d14ed6f7073420a1d585c18bbb14dabd87303b46d5802bd94ac81b53ad5bb23b64e5f966aeb3d264d2a1b41a1911920ce0a01624236b1a6243c02b4d0154443183978c1a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x124}}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5452, &(0x7f0000000000)) sendmmsg$inet(r7, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x54) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) personality(0x400000) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 3m6.491680698s ago: executing program 3 (id=2371): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) r5 = socket$inet(0x2, 0x3, 0x8d) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m5.800061089s ago: executing program 3 (id=2372): r0 = epoll_create1(0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) syncfs(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000000)='pstore\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2b, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, @address_request}}}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r9, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r8}, 0x10, &(0x7f0000000880)={&(0x7f0000000180)=@can={{0x2, 0x1}, 0x6, 0x3, 0x0, 0x0, "aacda1cfd0185b43"}, 0x10}}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) 3m3.732128121s ago: executing program 3 (id=2374): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0xfffffd89) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000140)}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffffe, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa6, '\x00', 0x0, @cgroup_sock_addr=0x8, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000002c0)='vcan0\x00', 0x10) gettid() socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) 3m1.74543259s ago: executing program 3 (id=2382): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xeea41, 0x192) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, 0x0) 3m1.471746025s ago: executing program 3 (id=2383): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 2m55.648519213s ago: executing program 3 (id=2387): openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000001740)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) fstat(r0, &(0x7f0000000180)) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) socket(0x9, 0x803, 0x39) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r7, 0x20, 0x0, 0x8000) 2m40.60796008s ago: executing program 33 (id=2387): openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000001740)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) fstat(r0, &(0x7f0000000180)) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) socket(0x9, 0x803, 0x39) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r7, 0x20, 0x0, 0x8000) 1m58.98014575s ago: executing program 5 (id=2512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m58.337604659s ago: executing program 5 (id=2515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m57.00544886s ago: executing program 5 (id=2517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x40402, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f1080003400000000308"], 0xa8}}, 0x0) 1m55.420609933s ago: executing program 5 (id=2522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="a81800004800000008000c"], 0x2c}}, 0x20000000) 1m54.956734491s ago: executing program 5 (id=2525): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c71756965742c6e6f646f74732c666c7573682c756d61736b3d30303030303030303030303030303030303030303030302c646f74732c646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c747a3d5554432c646f74732c646f74732c6e6f636173652c7379735f696d6d757461626c652c646f74732c00f8a7354494367fe599abb0e9fee8f6cdbd4415cc7bc52b6352f54afc78e51de6b37ae8efbdfe1689a174697f9528b4217d017a472c4c8e00a5cdd06438f130234c66db3e61a4ea6b90f67ddc19c74c6ac93054e1668cf0ff55fdebea678f16269706271797abeebc6b043e549356dfa4c7e8b4e091a7a6cfc601e4e66e509afea6dcc9d274ab27afd6f183050075b86a3ffc8dfcd249c141fd90a5331224d62867d9b87a8e7d0cf56567584e7adde32f223d2a9bd69b39c51152b3a827f49a0f7e23d51ac4128630c7668a0b38090b5c86636aee6face102356400fbbd"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000080)}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r3, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c", 0x3f, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m51.879936597s ago: executing program 5 (id=2529): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) 1m36.947322743s ago: executing program 34 (id=2529): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) 23.944485137s ago: executing program 6 (id=2743): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) 21.922270108s ago: executing program 6 (id=2748): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)='cbc(cast6)\x00') mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000001000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19.636255793s ago: executing program 4 (id=2755): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000001100)) 16.393511311s ago: executing program 4 (id=2757): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000280)) 14.603609729s ago: executing program 6 (id=2760): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socket$inet6(0xa, 0x4, 0x4) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_clone3(&(0x7f0000000580)={0x20030400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000180), {0x19}, &(0x7f0000000300)=""/238, 0xee, &(0x7f0000000480)=""/217, &(0x7f00000001c0)=[r2, r2, r2], 0x3, {r1}}, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') unshare(0x62040600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nouid32}, {}]}, 0x1, 0x788, &(0x7f0000000800)="$eJzs3M9rXFUbAOD33maa/ki/yQcudFOFFloonSTNpl0ZN+KmUCi4rSGZhJCbTMlMahILTd0JQm02KoLo3qVbodQ/wJ0UFNwLojUuVISRmUymTToznbRJpq3PAzf3nDPn3ve8cycn90LOBPCf9VrtRxIxEBGXIiLfaE8j4mC9dChidaPf+v3rE7UtiWr18q9J7bBYr+ab50oa+6NRPyRejoi7uYgz7z8at7y8MjueZcWFRn2oMnd1qLy8cnZmbny6OF2cHxm9MHx+dPT88Oiu5Xry7QuHb3/35tra919Xbh3vO5vEWD3vaOS2a4EesvGe5GJsW/v8XgTroaSLPn37MA4AADqr3ecfaNyb5SIfB1repfVt2QEAAADPl2p/tVt/dd0TAAAAeMYk0esRAAAAAHtr8/8ANtf27tU62HZ+eSMiBlvF76uvIY44FLmIOLKebFl+kGwcBk9l9WZE3Blr8fnrZkVzZ8MPiod354zstju1+Wes1fyTNuefaDH/9G1+d8JTaj//PYh/oM38d6nLGN98/kqubfyb5aUPjreKnzTjJ23iv9Nl/FtrH95u91r1y4hTLf/+JFtidfh+iKGpmazVr1ZzuHf/Pn2vff4RR7bHTxpRk875X+0y//fWf59d7RD/9InO138jfv+W42qfiY8a40gj4nZjX6uvbYtxYu6Hbx+NnKxuxp9s8/63vv5vNfP/osv8f/qqf6nLrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCXRsRAJGmhWU7TQiHiaES8FEfSrFSunJkqLc5P1l6LGIxcOjWTFYcjIr9RT2r1kXr5Qf3ctvpoRPz/x8MbQWeyYmGilE32OnkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACajkbEQCRpISLSiPgjn6aFpNejAgAAAHbdYK8HAAAAAOw5z/8AAADw4nvS53/rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAduHTxYm2rrt+/PlGrT15bXpwtXTs7WSzPFuYWJwoTpYWrhelSaTorFiZKc487XxoRIxdicWmoUixXhsrLK1fmSovzlSszc+PTxSvF3L5kBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE4N1LckLUREWi+naaEQcSwiBiOXTM1kxeGI+F9E3Mvn+mv1kV4PGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF1XXl6ZHc+y4sLzXag+A+n8c2z/g0YS8YxcghaFTxtXpVOfZDWi50NNGwNttBxqVHd0noidBL3xmLel14VXezAXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQe+XlldnxLCsulHs9EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHor/TmJiNp2Kn9yYPurB5M/8/V9RLz72eWPl8YrlYWRWvtvzfbKJ432cw8deGM/cwAAAIAX3us76bz5nL75HA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCt8vLK7HiWFRf2sBA3e50lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwJP4NAAD//6hxtmw=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x80) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 14.49500536s ago: executing program 7 (id=2761): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 14.020200908s ago: executing program 4 (id=2762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb4, 0x8}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 13.052858062s ago: executing program 2 (id=2763): pipe(&(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200009d96d1c800000000000000008500000020000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xbd, &(0x7f0000000140)=""/189, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5b7e", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00ff07baaace6fee7300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) pselect6(0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) uname(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 11.86660845s ago: executing program 2 (id=2764): socket$inet6(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000200)=0x1, 0x4) recvmmsg$unix(r0, &(0x7f00000001c0), 0x4000000000000bd, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$inet(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 11.86618949s ago: executing program 6 (id=2765): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902121001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x60, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x20820}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x44891}, 0x48000) ioctl$int_in(r1, 0x5421, &(0x7f0000000f00)=0x3) r3 = getpgrp(0x0) syz_pidfd_open(r3, 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xbe02, 0x7, r3}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0x144, {0x0}}, 0x10) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x6, 0x30, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "335f2fc78c"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x8, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x38}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x34, 0x80, 0x6}}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prlimit64(0x0, 0x2, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000240)={0x0, 0x16, 0x4, "be1a9fa5"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x111, 0x3}}, 0x20) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) unshare(0x2000400) r6 = socket$packet(0x11, 0x2, 0x300) poll(&(0x7f0000000440)=[{r6, 0x1012}], 0x1, 0xffffffff) sendfile(r5, r5, 0x0, 0x13) 11.652766153s ago: executing program 4 (id=2766): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x26d, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) io_pgetevents(0x0, 0x0, 0x2, &(0x7f0000001080)=[{}, {}], &(0x7f00000010c0)={0x77359400}, &(0x7f0000001140)={&(0x7f0000001100)={[0x5]}, 0x8}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10.624982249s ago: executing program 7 (id=2767): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r4, 0x2008002) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendfile(r3, r4, 0x0, 0x80000001) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 10.621994499s ago: executing program 2 (id=2768): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527e", 0x44, 0x3c, 0x0, @empty, @mcast2}}}}, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x3b, 0x0, &(0x7f0000000100)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@utf8}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@time_offset={'time_offset', 0x3d, 0xe0}}, {@rodir}, {@uni_xlate}]}, 0x1, 0x27e, &(0x7f0000000240)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 8.913834855s ago: executing program 4 (id=2769): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac056242000000"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 7.689938793s ago: executing program 6 (id=2771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000640), &(0x7f0000000700)=""/109}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="1808007000d0ff000000000000d000000085110000060040001800005623b94cbe92943e2aa4809a5172fc3de546f3f0e1b4edc65dc46249ec33d90eb5148ea40c42fcffd86e57ab9bb16a0ca9a6af9955bd894c8cdb63e117649ccc6979e00724cf6a6c15cce2a3e17f2c24f7ec8ce96432441f9905d37e0e9693eb25814418bf6117b490c8804574e2bd258015c6c78ba46b087c77c262bea041ff08779ee7006654ef45a021e8be808783bff0be789fc5435aa5f0e13675aca20201413dd276813a23a67449435b50cd39409a29f2bdf64daf3e7a66df7be88be2eb0d307a879e342522ad3230c535fb9ba73cfacf341ea8c5a05432ad17b8fe637e697834e5aa", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x8000000010, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000240), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 7.557066115s ago: executing program 0 (id=2772): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000016000000b400000003"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79, 0x0, 0x0, 0x85}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.422845897s ago: executing program 7 (id=2773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, 0x0, 0xb4000003) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @local, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000002780), 0x0, 0x2140, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2$9p(0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r5}, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.455814682s ago: executing program 2 (id=2774): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000240)=ANY=[]) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c0002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.354400483s ago: executing program 0 (id=2775): pipe(&(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200009d96d1c800000000000000008500000020000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xbd, &(0x7f0000000140)=""/189, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5b7e", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00ff07baaace6fee7300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) pselect6(0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x2) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) uname(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.92107622s ago: executing program 0 (id=2776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb4, 0x8}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 3.91958715s ago: executing program 7 (id=2777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0) open(0x0, 0x141840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a0000000000000000000000000000001000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@i_version}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@data_err_ignore}, {@max_batch_time}, {@noblock_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r8, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz0\x00', {0x7, 0x9, 0x7}, 0x8004d, [0x0, 0x4000, 0x100, 0x6, 0x1, 0x8, 0x10000, 0x4, 0xe66, 0x7ac5, 0x5, 0x4, 0xd23, 0x9, 0x2, 0x2, 0xffff, 0x6, 0x7, 0x8001, 0x0, 0x29b8, 0x7ff, 0xc, 0xfffffffd, 0x2, 0x9, 0x6, 0x4, 0x80000001, 0x6, 0xffc000, 0x3, 0x6, 0xe8, 0x5, 0x8, 0x4, 0x6, 0x69, 0xffff8b81, 0x9, 0x200, 0x5, 0x10, 0x3, 0x6, 0x5522, 0x2, 0x800, 0xc, 0x5, 0x2, 0x6, 0x80, 0x3, 0xa, 0x7f, 0x45, 0x7, 0x5, 0x6, 0x3, 0x1], [0x4, 0xc5, 0x9, 0x2, 0x39df, 0x400, 0x8, 0x3, 0x3, 0x2, 0x4, 0x9, 0x6, 0x9, 0x8001, 0x0, 0x8de5, 0x3, 0x1, 0xe, 0xffff, 0xee, 0x400, 0x2, 0x2, 0x9, 0x9, 0x10000, 0xc, 0x4, 0xffffffff, 0x3, 0x7, 0x200, 0xfa, 0x6, 0x0, 0x7c, 0x8, 0x8, 0x10000, 0xa, 0x1, 0xdc30, 0xa10, 0x8000, 0x9, 0xb, 0x40, 0x8, 0x4, 0x5, 0xf68, 0x7, 0x8, 0x1000, 0x7fff, 0x0, 0x5, 0x4, 0xfffff5ed, 0xa, 0x0, 0xaf5], [0x2, 0x2, 0x78000, 0x4, 0x8, 0x8ee, 0x5, 0x4, 0xfffffff8, 0x1, 0x6, 0x8, 0x2, 0x3, 0x81, 0x7, 0x8, 0x2a1, 0x7, 0x3ff, 0x4, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, 0x3, 0x0, 0x8, 0x6, 0x9, 0x401, 0x8, 0x48000, 0x2, 0x0, 0x7, 0x0, 0x59b, 0x0, 0x97, 0xde0, 0x5, 0x1000, 0x80, 0x2, 0x6, 0x100, 0x3ff, 0xfffffffe, 0x7, 0x401, 0x8, 0xa93, 0x3e, 0x7, 0x6, 0x7ff, 0xf4, 0x81, 0x10, 0x800, 0xffff], [0x5, 0x9, 0x33fc, 0x4dd4d6fd, 0x3ff, 0x3, 0x1ff, 0x1, 0x5ff, 0xf3, 0xfffffc9f, 0x5, 0x7fffffff, 0x80000000, 0x3, 0x77c, 0x1, 0x8, 0xa, 0x3, 0x5b54, 0x40, 0xfffffff8, 0x73ce91f4, 0x1, 0x5, 0x537, 0x8, 0x407, 0xa, 0xe59, 0x8, 0x40, 0x9a15, 0xd, 0x0, 0x1, 0x9, 0xa, 0x1, 0x836, 0x6, 0x8, 0x7e, 0x800, 0xe0dffe3, 0xfffffff9, 0x2a95, 0x80000001, 0x4c6, 0x6, 0x6, 0xfff, 0x3, 0x6, 0x7fffffff, 0x4, 0x8, 0x0, 0x5, 0x78984295, 0x1ac, 0x40, 0xfff]}, 0x45c) 3.776090163s ago: executing program 4 (id=2778): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x200048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$eJzslj2v0lAYx//nlBQwGhNHFwdJ1MHSFjUuJLI4OZj4QhxMJFIJUsRAByEx6Cdwd3Nw9wuY6OqHMOiiC04615yXliOhCNwL3OQ+v4Sn/1POy9PnNP9TEARxbPn+7c8k/l39UQBwEiXk9f2f1qwPN/p/Lfx6+fnWzfqbh++/5CdOcdGccbz6+jkAn2oWonTsv6NL+noXPNX3wHFJ6zoYHK0fgeO+1gEYHmj91NA90d9xnrTDwHncC5tCuCJ4IvgiVObzm75maBr5MeP/wXDUaYRh0N+i+F/9pjWOqpGfuV8OVLauUT8PHJ7WFTDc0fo68kltVEmM5z+bm81vLX1+G9uuiEhljVFnTmVulQ1gszQAdlh7j1f6ld3mO5QhLEiR7OiOV9+BQO5IpLGG2GQvPt5QY5I78Vi1ZZ/TGRPG4xWXsLFR5VN/it8xXDD8SVnJW3nUlKPu8/JgOLrc7jZaQSt45vuVa+4V173ql6URqbjE/4rSn07M5l94JglsZuNFI4r6nopp21dxkeNy6X8cF8+rtnBTe27egqGZ/nF5ld7b+ZCZPUEQxP44ByY9WfpyIvRpAuNb9/YecyQIgiAIgiAIgiAI4mD8DQAA//80kEvd") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000003880)={0x2020}, 0xffffffe4) 3.578200395s ago: executing program 0 (id=2779): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x26d, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) io_pgetevents(0x0, 0x0, 0x2, &(0x7f0000001080)=[{}, {}], &(0x7f00000010c0)={0x77359400}, &(0x7f0000001140)={&(0x7f0000001100)={[0x5]}, 0x8}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.538906566s ago: executing program 2 (id=2780): chdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect(0x4, 0xfffffffffffffc99, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 2.297924635s ago: executing program 7 (id=2781): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/4096, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.615540225s ago: executing program 6 (id=2782): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902121001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x60, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x20820}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x44891}, 0x48000) ioctl$int_in(r1, 0x5421, &(0x7f0000000f00)=0x3) r3 = getpgrp(0x0) syz_pidfd_open(r3, 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xbe02, 0x7, r3}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0x144, {0x0}}, 0x10) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x6, 0x30, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "335f2fc78c"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x8, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x38}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x34, 0x80, 0x6}}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prlimit64(0x0, 0x2, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000240)={0x0, 0x16, 0x4, "be1a9fa5"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x111, 0x3}}, 0x20) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) unshare(0x2000400) r6 = socket$packet(0x11, 0x2, 0x300) poll(&(0x7f0000000440)=[{r6, 0x1012}], 0x1, 0xffffffff) sendfile(r5, r5, 0x0, 0x13) 1.409771988s ago: executing program 0 (id=2783): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)='cbc(cast6)\x00') mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000001000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 212.000056ms ago: executing program 2 (id=2784): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000640)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0x3, 0x89, 0xfffc, 0x3, 0x9, "00e10000000700"}) 202.799726ms ago: executing program 0 (id=2785): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@rr={0x7, 0x3, 0x1}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=2786): add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x101000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000300)='./bus\x00') r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) kernel console output (not intermixed with test programs): amed from eth0 [ 609.951782][T10970] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 609.991610][T10970] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 610.033359][T10970] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 610.120865][ T127] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 610.144241][T11028] loop0: detected capacity change from 0 to 256 [ 610.157263][T11030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2238'. [ 610.167168][T11030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2238'. [ 610.209705][T11030] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 610.218353][T11030] Cannot create hsr debugfs directory [ 610.226184][T11030] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 610.239343][T11028] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 610.258285][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 610.266817][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 610.350757][ T127] usb 5-1: Using ep0 maxpacket: 32 [ 610.358343][ T127] usb 5-1: config 0 has an invalid interface number: 141 but max is 0 [ 610.404542][ T127] usb 5-1: config 0 has no interface number 0 [ 610.409612][T10970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.430296][ T127] usb 5-1: config 0 interface 141 has no altsetting 0 [ 610.464462][ T127] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=5f.21 [ 610.479285][T10970] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.486133][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.494660][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 610.505557][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.517600][ T127] usb 5-1: Product: syz [ 610.525452][ T127] usb 5-1: Manufacturer: syz [ 610.533661][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 610.546229][ T127] usb 5-1: SerialNumber: syz [ 610.553075][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 610.568876][ T127] usb 5-1: config 0 descriptor?? [ 610.576017][ T7579] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.583213][ T7579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.607709][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 610.653524][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 610.671651][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.697405][ T7579] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.704610][ T7579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.742182][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 610.752900][ T4240] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 610.774979][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 610.784217][T10408] Bluetooth: hci2: command 0x040f tx timeout [ 610.856729][ T127] usb 5-1: Found UVC 0.00 device syz (04f2:b746) [ 610.867508][ T127] usb 5-1: No valid video chain found. [ 610.875491][ T127] usb 5-1: USB disconnect, device number 33 [ 610.968999][T10970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 610.979891][T10970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 611.003238][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.017869][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.029212][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 611.038676][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 611.473596][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 611.973118][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 612.009084][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 612.026128][ T4240] usb 4-1: config 0 has no interfaces? [ 612.031984][ T4240] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 612.041155][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.051254][ T4240] usb 4-1: config 0 descriptor?? [ 612.088982][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 612.133673][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 612.178677][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 613.112800][T11059] No such timeout policy "syz1" [ 613.119414][T10408] Bluetooth: hci2: command 0x0419 tx timeout [ 613.323094][ T127] usb 4-1: USB disconnect, device number 34 [ 614.054647][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2242'. [ 614.065423][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2242'. [ 615.525052][T11069] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2247'. [ 615.582648][T11069] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2247'. [ 615.950457][T11075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2250'. [ 615.996092][T11075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2250'. [ 616.742475][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 616.750075][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 616.831375][T10970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.864784][T11087] loop0: detected capacity change from 0 to 256 [ 616.890838][T11087] FAT-fs (loop0): Directory bread(block 64) failed [ 616.897511][T11087] FAT-fs (loop0): Directory bread(block 65) failed [ 616.904515][T11087] FAT-fs (loop0): Directory bread(block 66) failed [ 616.911309][T11087] FAT-fs (loop0): Directory bread(block 67) failed [ 616.917954][T11087] FAT-fs (loop0): Directory bread(block 68) failed [ 616.924671][T11087] FAT-fs (loop0): Directory bread(block 69) failed [ 616.932128][T11087] FAT-fs (loop0): Directory bread(block 70) failed [ 616.938707][T11087] FAT-fs (loop0): Directory bread(block 71) failed [ 616.945449][T11087] FAT-fs (loop0): Directory bread(block 72) failed [ 616.952089][T11087] FAT-fs (loop0): Directory bread(block 73) failed [ 618.520340][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 618.558419][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 618.560673][ T4298] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 618.610241][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 618.633064][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 618.663260][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 618.691910][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 618.734579][T10970] device veth0_vlan entered promiscuous mode [ 618.757605][T10970] device veth1_vlan entered promiscuous mode [ 618.802403][ T4298] usb 3-1: config 0 has no interfaces? [ 618.808087][ T4298] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 618.860089][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.885146][T10970] device veth0_macvtap entered promiscuous mode [ 618.957684][T10970] device veth1_macvtap entered promiscuous mode [ 619.001840][ T4298] usb 3-1: config 0 descriptor?? [ 619.069163][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.149200][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.177526][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.214824][ T4298] usb 3-1: USB disconnect, device number 36 [ 619.256051][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.298846][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.340316][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.409157][T10970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.471647][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.508669][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.565211][T10970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.617024][T10970] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.656156][T10970] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.696064][T10970] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.736666][T10970] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.027668][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 620.041797][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 620.088423][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 620.153247][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 620.196061][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 620.245435][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 620.282823][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 620.326271][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 620.368336][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 620.427018][T11124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2264'. [ 620.467238][T11124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2264'. [ 620.568516][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 620.598715][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.668312][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.709139][T11114] loop4: detected capacity change from 0 to 262144 [ 620.752531][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 620.827483][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.856142][T11114] F2FS-fs (loop4): Found nat_bits in checkpoint [ 620.857385][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.905656][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 620.947747][T11114] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 621.151179][T11134] loop2: detected capacity change from 0 to 512 [ 621.202114][T11134] EXT4-fs: Ignoring removed orlov option [ 621.279941][T11134] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.2268: casefold flag without casefold feature [ 621.305516][T11134] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2268: couldn't read orphan inode 15 (err -117) [ 621.880429][T11134] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 623.621699][T11168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2276'. [ 623.666821][T11168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2276'. [ 623.712442][T11168] device netdevsim0 entered promiscuous mode [ 623.729480][T11168] device netdevsim0 left promiscuous mode [ 623.809162][T11171] loop3: detected capacity change from 0 to 256 [ 623.832957][T11171] FAT-fs (loop3): Directory bread(block 64) failed [ 623.839605][T11171] FAT-fs (loop3): Directory bread(block 65) failed [ 623.847175][T11171] FAT-fs (loop3): Directory bread(block 66) failed [ 623.854133][T11171] FAT-fs (loop3): Directory bread(block 67) failed [ 623.860845][T11171] FAT-fs (loop3): Directory bread(block 68) failed [ 623.867407][T11171] FAT-fs (loop3): Directory bread(block 69) failed [ 623.874120][T11171] FAT-fs (loop3): Directory bread(block 70) failed [ 623.880852][T11171] FAT-fs (loop3): Directory bread(block 71) failed [ 623.887507][T11171] FAT-fs (loop3): Directory bread(block 72) failed [ 623.895134][T11171] FAT-fs (loop3): Directory bread(block 73) failed [ 624.184933][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 624.573424][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.587385][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.809672][T11191] loop5: detected capacity change from 0 to 256 [ 626.222100][T11192] device lo entered promiscuous mode [ 626.230193][T11192] device tunl0 entered promiscuous mode [ 626.237437][T11192] device gre0 entered promiscuous mode [ 626.244663][T11192] device gretap0 entered promiscuous mode [ 626.253107][T11192] device erspan0 entered promiscuous mode [ 626.261164][T11192] device ip_vti0 entered promiscuous mode [ 626.268380][T11192] device ip6_vti0 entered promiscuous mode [ 626.275941][T11192] device sit0 entered promiscuous mode [ 626.283045][T11192] device ip6tnl0 entered promiscuous mode [ 626.290393][T11192] device ip6gre0 entered promiscuous mode [ 626.297856][T11192] device syz_tun entered promiscuous mode [ 626.306050][T11192] device ip6gretap0 entered promiscuous mode [ 626.314528][T11192] device bridge0 entered promiscuous mode [ 626.323813][T11192] device vcan0 entered promiscuous mode [ 626.329752][T11192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 626.337495][T11192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 626.347849][T11192] device team0 entered promiscuous mode [ 626.354250][T11192] device team_slave_0 entered promiscuous mode [ 626.361012][T11192] device team_slave_1 entered promiscuous mode [ 626.370180][T11192] device dummy0 entered promiscuous mode [ 626.377385][T11192] device nlmon0 entered promiscuous mode [ 626.600809][T11192] device caif0 entered promiscuous mode [ 626.606411][T11192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 628.699263][T11198] loop2: detected capacity change from 0 to 512 [ 628.856324][T11198] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 628.871236][T11198] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 628.964159][T11198] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 629.001163][T11198] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 629.506505][T11198] EXT4-fs (loop2): 1 truncate cleaned up [ 629.770647][T11198] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 629.957072][T11210] device veth7 entered promiscuous mode [ 631.600411][T11230] device wg2 entered promiscuous mode [ 631.652801][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 631.760740][ T4240] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 633.657019][T11249] loop5: detected capacity change from 0 to 8192 [ 633.684272][T11249] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 633.794834][ T4240] usb 5-1: device not accepting address 34, error -71 [ 634.079202][ T4972] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 634.281662][ T4972] usb 4-1: config 0 has no interfaces? [ 634.306105][ T4972] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 634.487664][ T4972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.750929][ T4972] usb 4-1: config 0 descriptor?? [ 634.965417][ T4296] usb 4-1: USB disconnect, device number 35 [ 635.071449][ T4294] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 635.187964][T11268] device veth9 entered promiscuous mode [ 635.310885][ T4294] usb 6-1: Using ep0 maxpacket: 16 [ 635.343095][ T4294] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.455795][T11273] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 636.121592][ T4294] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 636.151078][ T4294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.159135][ T4294] usb 6-1: Product: syz [ 636.285347][ T4294] usb 6-1: Manufacturer: syz [ 636.290019][ T4294] usb 6-1: SerialNumber: syz [ 636.316423][T11278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2305'. [ 636.338619][ T4294] usb 6-1: config 0 descriptor?? [ 636.626597][T11284] loop4: detected capacity change from 0 to 16 [ 636.683328][T11284] erofs: (device loop4): mounted with root inode @ nid 36. [ 637.133673][T11285] syz.4.2304: attempt to access beyond end of device [ 637.133673][T11285] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 638.412253][ T4298] usb 6-1: USB disconnect, device number 2 [ 638.894869][T11292] loop0: detected capacity change from 0 to 512 [ 638.971148][T11292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 638.996363][T11292] EXT4-fs (loop0): orphan cleanup on readonly fs [ 639.009995][T11292] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2307: bg 0: block 248: padding at end of block bitmap is not set [ 639.029621][T11292] Quota error (device loop0): write_blk: dquota write failed [ 639.039066][T11292] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 639.049613][T11292] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.2307: Failed to acquire dquot type 1 [ 639.065907][T11292] EXT4-fs (loop0): 1 truncate cleaned up [ 639.074262][T11292] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 639.093156][T11292] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2307'. [ 639.103084][ T27] audit: type=1326 audit(1743406617.831:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz.0.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e5b8d169 code=0x7ffc0000 [ 639.220814][ T27] audit: type=1326 audit(1743406617.831:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz.0.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e5b8d169 code=0x7ffc0000 [ 639.325288][ T27] audit: type=1326 audit(1743406617.831:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz.0.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9e5b8d169 code=0x7ffc0000 [ 639.414692][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 639.461573][ T27] audit: type=1326 audit(1743406617.831:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz.0.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e5b8d169 code=0x7ffc0000 [ 639.587635][T11300] loop0: detected capacity change from 0 to 512 [ 639.587810][ T27] audit: type=1326 audit(1743406617.831:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz.0.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e5b8d169 code=0x7ffc0000 [ 639.630808][ T27] audit: type=1326 audit(1743406617.831:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz.0.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9e5b8d169 code=0x7ffc0000 [ 639.661268][T11300] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 639.770953][T11300] EXT4-fs (loop0): orphan cleanup on readonly fs [ 639.789817][T11300] EXT4-fs error (device loop0): ext4_quota_enable:6982: comm syz.0.2312: Bad quota inum: 2, type: 1 [ 639.807938][ T27] audit: type=1326 audit(1743406617.831:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz.0.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e5b8d169 code=0x7ffc0000 [ 639.940129][T11300] EXT4-fs warning (device loop0): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 639.957451][T11307] loop3: detected capacity change from 0 to 256 [ 639.970593][ T27] audit: type=1326 audit(1743406617.831:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz.0.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e5b8d169 code=0x7ffc0000 [ 640.019063][T11300] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 640.053410][T11300] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 640.253969][T11310] device veth5 entered promiscuous mode [ 640.422265][T11298] syz.5.2309[11298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 640.422386][T11298] syz.5.2309[11298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 640.801093][ T4298] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 641.248251][ T4298] usb 4-1: config 0 has no interfaces? [ 641.266329][ T4298] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 641.419497][T11318] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 641.428254][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.448523][T11320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2318'. [ 641.467456][ T4298] usb 4-1: config 0 descriptor?? [ 641.489299][T11320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2318'. [ 641.593279][T11321] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 641.677242][T11321] EXT4-fs warning (device loop0): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 641.718871][ T4972] usb 4-1: USB disconnect, device number 36 [ 641.883527][T11329] loop4: detected capacity change from 0 to 1024 [ 641.919287][T11329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 641.961994][T11329] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 642.206684][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 642.333826][T11334] loop2: detected capacity change from 0 to 16 [ 642.375088][T11334] erofs: (device loop2): mounted with root inode @ nid 36. [ 642.499954][T11335] syz.2.2322: attempt to access beyond end of device [ 642.499954][T11335] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 644.758822][T11351] loop0: detected capacity change from 0 to 2048 [ 644.766250][T11351] ext4: Unknown parameter 'fscontext' [ 645.519393][T11357] device veth3 entered promiscuous mode [ 645.548735][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'. [ 645.871903][T11366] loop5: detected capacity change from 0 to 512 [ 645.899848][T11366] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 645.916240][T11366] EXT4-fs (loop5): orphan cleanup on readonly fs [ 645.926922][T11366] __quota_error: 17 callbacks suppressed [ 645.926941][T11366] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 645.942880][T11366] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 645.952352][T11366] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.2331: Failed to acquire dquot type 1 [ 645.965477][T11366] EXT4-fs (loop5): 1 truncate cleaned up [ 645.977242][T11372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2332'. [ 645.980042][T11366] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 645.988622][T11372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2332'. [ 646.453238][T11381] loop4: detected capacity change from 0 to 512 [ 646.474838][T11381] EXT4-fs error (device loop4): __ext4_fill_super:5390: inode #2: comm syz.4.2336: iget: bad i_size value: -1 [ 646.487334][T11381] EXT4-fs (loop4): get root inode failed [ 646.493081][T11381] EXT4-fs (loop4): mount failed [ 646.706288][ T4756] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 646.920725][T11387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2338'. [ 646.945852][T10970] EXT4-fs (loop5): unmounting filesystem. [ 647.451765][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2340'. [ 648.317034][T11412] loop3: detected capacity change from 0 to 512 [ 648.404108][T11412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 648.587226][T11412] EXT4-fs (loop3): orphan cleanup on readonly fs [ 648.620660][T11412] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2344: bg 0: block 248: padding at end of block bitmap is not set [ 648.644350][T11412] Quota error (device loop3): write_blk: dquota write failed [ 648.652287][T11412] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 648.662584][T11412] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.2344: Failed to acquire dquot type 1 [ 648.697155][T11412] EXT4-fs (loop3): 1 truncate cleaned up [ 648.708458][T11412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 648.810740][ T27] audit: type=1326 audit(1743406627.501:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.3.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270798d169 code=0x7ffc0000 [ 649.110799][ T27] audit: type=1326 audit(1743406627.501:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.3.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270798d169 code=0x7ffc0000 [ 649.141775][ T27] audit: type=1326 audit(1743406627.501:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.3.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f270798d169 code=0x7ffc0000 [ 649.383498][ T27] audit: type=1326 audit(1743406627.501:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.3.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270798d169 code=0x7ffc0000 [ 649.553925][ T27] audit: type=1326 audit(1743406627.501:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.3.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270798d169 code=0x7ffc0000 [ 649.730193][ T27] audit: type=1326 audit(1743406627.501:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.3.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f270798d169 code=0x7ffc0000 [ 650.386425][T11416] device lo entered promiscuous mode [ 650.395802][T11416] device tunl0 entered promiscuous mode [ 650.404572][T11416] device gre0 entered promiscuous mode [ 650.413237][T11416] device gretap0 entered promiscuous mode [ 650.422322][T11416] device erspan0 entered promiscuous mode [ 650.431205][T11416] device ip_vti0 entered promiscuous mode [ 650.440096][T11416] device ip6_vti0 entered promiscuous mode [ 650.537449][T11416] device ip6tnl0 entered promiscuous mode [ 650.546261][T11416] device ip6gre0 entered promiscuous mode [ 650.554844][T11416] device syz_tun entered promiscuous mode [ 650.563737][T11416] device ip6gretap0 entered promiscuous mode [ 650.574069][T11416] device bridge0 entered promiscuous mode [ 650.586269][T11416] device vcan0 entered promiscuous mode [ 650.592757][T11416] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 650.602200][T11416] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 650.610900][T11416] device bond0 entered promiscuous mode [ 650.620140][T11416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.633044][T11416] device team0 entered promiscuous mode [ 650.644298][T11416] device dummy0 entered promiscuous mode [ 650.652619][T11416] device nlmon0 entered promiscuous mode [ 651.070699][T11416] device caif0 entered promiscuous mode [ 651.076454][T11416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 651.823878][T11417] loop2: detected capacity change from 0 to 256 [ 651.834115][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 651.885739][T11417] FAT-fs (loop2): Unrecognized mount option "nonumti_xlate=1" or missing value [ 652.387352][T11419] loop3: detected capacity change from 0 to 512 [ 652.524901][T11419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 652.630854][T11419] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.009335][T11430] bridge0: port 3(batadv_slave_1) entered disabled state [ 653.016714][T11430] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.024054][T11430] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.037565][T11430] device bridge0 left promiscuous mode [ 653.649572][T11431] bridge0: port 3(batadv_slave_1) entered disabled state [ 653.665947][T11431] device bridge_slave_1 left promiscuous mode [ 653.672616][T11431] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.681688][T11431] device bridge_slave_0 left promiscuous mode [ 653.687985][T11431] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.779264][T11435] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 654.976967][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 655.033483][T11439] loop0: detected capacity change from 0 to 256 [ 655.486120][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2353'. [ 658.175593][T11483] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 659.114404][T11485] random: crng reseeded on system resumption [ 659.565108][T11491] netem: change failed [ 661.255911][T11487] loop5: detected capacity change from 0 to 262144 [ 661.601006][T11487] F2FS-fs (loop5): Found nat_bits in checkpoint [ 661.670808][T11487] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 662.021326][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2368'. [ 664.880374][T11528] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 665.590587][ T4972] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 665.780648][ T4972] usb 4-1: Using ep0 maxpacket: 8 [ 665.788894][ T4972] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 665.817957][ T4972] usb 4-1: config 179 has no interface number 0 [ 665.838864][ T4972] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 665.873954][ T4972] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 665.931978][ T4972] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 665.963628][ T4972] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 666.000391][ T4972] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 666.031523][ T4972] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 666.050737][ T4972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.071771][T11530] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 666.097787][ T4972] xpad: probe of 4-1:179.65 failed with error -5 [ 666.314525][ T4972] usb 4-1: USB disconnect, device number 37 [ 666.593227][T11546] loop0: detected capacity change from 0 to 1024 [ 666.664333][T11546] EXT4-fs: Ignoring removed i_version option [ 666.680727][T11546] EXT4-fs: inline encryption not supported [ 666.715653][T11546] EXT4-fs (loop0): Test dummy encryption mode enabled [ 666.859509][T11546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 667.973973][T11558] loop3: detected capacity change from 0 to 512 [ 668.111492][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 668.748780][T11558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 668.836630][T11558] EXT4-fs (loop3): orphan cleanup on readonly fs [ 668.856872][T11558] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2383: bg 0: block 248: padding at end of block bitmap is not set [ 668.874736][T11558] __quota_error: 18 callbacks suppressed [ 668.874781][T11558] Quota error (device loop3): write_blk: dquota write failed [ 668.888326][T11558] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 668.898498][T11558] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.2383: Failed to acquire dquot type 1 [ 668.921450][T11558] EXT4-fs (loop3): 1 truncate cleaned up [ 668.930156][T11558] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 672.313112][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 672.761815][ T7579] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.326452][ T7579] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.416516][T11576] loop3: detected capacity change from 0 to 2048 [ 673.548478][T11576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 673.785725][ T7579] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.634346][ T7579] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.811314][T11598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2393'. [ 674.881949][T11600] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 675.416614][ T4296] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 675.553269][T11608] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 675.570399][T11608] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 675.583713][T11608] EXT4-fs (loop3): This should not happen!! Data will be lost [ 675.583713][T11608] [ 675.593739][T11608] EXT4-fs (loop3): Total free blocks count 0 [ 675.599932][T11608] EXT4-fs (loop3): Free/Dirty block details [ 675.606194][T11608] EXT4-fs (loop3): free_blocks=66060288 [ 675.612216][T11608] EXT4-fs (loop3): dirty_blocks=64 [ 675.617579][T11608] EXT4-fs (loop3): Block reservation details [ 675.670557][T11608] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 675.751655][T11608] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 675.835214][ T4296] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 677.644212][T11632] loop2: detected capacity change from 0 to 512 [ 678.025067][T11632] EXT4-fs (loop2): 1 orphan inode deleted [ 678.030927][T11632] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 678.040254][T11632] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.053045][ T9] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 678.585914][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6818: comm kworker/u4:0: Failed to release dquot type 1 [ 680.984941][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 682.126808][T11669] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2401'. [ 682.737606][T11677] loop4: detected capacity change from 0 to 512 [ 682.952216][T11677] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 682.992787][T11677] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.979705][T11692] bridge0: port 1(veth5) entered disabled state [ 684.974503][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 685.606428][T11726] loop2: detected capacity change from 0 to 256 [ 685.650686][ T4240] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 685.820761][ T4240] usb 6-1: device descriptor read/64, error -71 [ 685.902588][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.908987][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.936835][ T7579] bridge1: port 1(veth3) entered disabled state [ 685.969780][ T7579] device bond0 left promiscuous mode [ 685.991598][ T7579] device bond_slave_0 left promiscuous mode [ 685.998020][ T7579] device bond_slave_1 left promiscuous mode [ 686.033252][ T7579] bridge0: port 1(vlan2) entered disabled state [ 686.098607][ T7579] device hsr_slave_0 left promiscuous mode [ 686.110851][ T4240] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 686.130705][ T7579] device hsr_slave_1 left promiscuous mode [ 686.157761][ T7579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.188017][ T7579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.270735][ T4240] usb 6-1: device descriptor read/64, error -71 [ 686.343880][ T7579] device veth1_macvtap left promiscuous mode [ 686.371637][ T7579] device veth0_macvtap left promiscuous mode [ 686.390853][ T4240] usb usb6-port1: attempt power cycle [ 686.810563][ T4240] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 686.811590][T11749] loop4: detected capacity change from 0 to 1024 [ 686.851543][ T4240] usb 6-1: device descriptor read/8, error -71 [ 686.901084][T11749] EXT4-fs: Ignoring removed i_version option [ 686.907274][T11749] EXT4-fs: inline encryption not supported [ 686.999734][T11749] EXT4-fs (loop4): Test dummy encryption mode enabled [ 687.056699][T11749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 687.120789][ T4240] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 687.171449][ T4240] usb 6-1: device descriptor read/8, error -71 [ 687.311272][ T4240] usb usb6-port1: unable to enumerate USB device [ 688.902001][ T4259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 688.921837][ T4259] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 688.931496][ T4259] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 688.941120][ T4259] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 688.948976][ T4259] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 688.956494][ T4259] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 688.963951][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2428'. [ 689.047183][ T7579] team0 (unregistering): Port device team_slave_1 removed [ 689.074662][T11588] EXT4-fs: 7 callbacks suppressed [ 689.074680][T11588] EXT4-fs (loop3): unmounting filesystem. [ 690.221608][ T7579] team0 (unregistering): Port device team_slave_0 removed [ 690.324560][ T7579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.399685][ T7579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.001674][ T4259] Bluetooth: hci5: command 0x0409 tx timeout [ 691.138075][ T7579] bond0 (unregistering): Released all slaves [ 691.305202][T11796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2433'. [ 691.316790][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 691.342475][T11796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2433'. [ 691.837507][ T4294] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 691.995494][ T4294] usb 6-1: device descriptor read/64, error -71 [ 692.069249][T11775] chnl_net:caif_netlink_parms(): no params data found [ 692.102977][ T4240] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 692.122414][ T4240] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 692.136218][ T4240] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 692.166642][T11817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2435'. [ 692.215233][ T4240] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 692.256249][ T4294] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 692.424047][ T4294] usb 6-1: device descriptor read/64, error -71 [ 692.544330][ T4294] usb usb6-port1: attempt power cycle [ 692.609450][T11775] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.652718][T11775] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.681131][T11775] device bridge_slave_0 entered promiscuous mode [ 692.720040][T11775] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.779568][T11775] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.796964][T11775] device bridge_slave_1 entered promiscuous mode [ 692.893788][T11775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.927971][ T4259] Bluetooth: hci5: command 0x041b tx timeout [ 692.937541][ T4294] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 692.946269][T11775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.993987][ T4294] usb 6-1: device descriptor read/8, error -71 [ 693.027631][T11775] team0: Port device team_slave_0 added [ 693.048358][T11775] team0: Port device team_slave_1 added [ 693.138491][T11775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.155697][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.241225][T11775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.262880][ T4294] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 693.283830][T11775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.320027][ T4294] usb 6-1: device descriptor read/8, error -71 [ 693.336622][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.436366][T11775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.449718][ T4294] usb usb6-port1: unable to enumerate USB device [ 694.334406][T11846] tipc: Started in network mode [ 694.339622][T11846] tipc: Node identity aaaaaaaaaa3c, cluster identity 4711 [ 694.347515][T11846] tipc: Enabled bearer , priority 10 [ 694.565276][T11775] device hsr_slave_0 entered promiscuous mode [ 694.605770][T11775] device hsr_slave_1 entered promiscuous mode [ 694.624031][T11775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 694.645548][T11851] loop0: detected capacity change from 0 to 1024 [ 694.648918][T11775] Cannot create hsr debugfs directory [ 694.700399][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2446'. [ 694.762771][T11851] EXT4-fs: Ignoring removed i_version option [ 694.773608][T11851] EXT4-fs: inline encryption not supported [ 694.792846][T11851] EXT4-fs (loop0): Test dummy encryption mode enabled [ 694.803948][ T7579] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.839987][T11851] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 694.859019][T11856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2447'. [ 694.868479][ T4259] Bluetooth: hci5: command 0x040f tx timeout [ 694.874837][T11856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2447'. [ 695.139472][ T7579] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.388485][ T4296] tipc: Node number set to 9874090 [ 696.096996][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 696.132987][ T7579] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.315733][T11882] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2450'. [ 696.915452][ T4259] Bluetooth: hci5: command 0x0419 tx timeout [ 697.178123][ T7579] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.182165][T11775] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 698.267695][T11775] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 698.290697][T11775] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 698.423803][T11775] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 698.972833][T11911] tipc: Enabled bearer , priority 10 [ 699.535331][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2458'. [ 699.834718][ T7579] device ip6gretap1 left promiscuous mode [ 699.856974][ T7579] bridge1: port 1(ip6gretap1) entered disabled state [ 699.940343][T11919] loop2: detected capacity change from 0 to 1024 [ 699.947623][T11919] EXT4-fs: Ignoring removed i_version option [ 699.969522][T11919] EXT4-fs: inline encryption not supported [ 699.984634][T11919] EXT4-fs (loop2): Test dummy encryption mode enabled [ 700.028043][T11775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.036853][T11919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 700.193277][T11775] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.929953][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 700.930781][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 700.931385][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 700.932001][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 700.932466][ T4679] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.932585][ T4679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.933103][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 700.933709][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 700.943643][ T4679] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.943729][ T4679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.944329][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 701.113554][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 701.574981][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 701.679292][ T4259] Bluetooth: hci5: command 0x0405 tx timeout [ 701.735574][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 701.822223][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 702.043639][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 702.044666][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 702.045526][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 702.254298][T11940] loop2: detected capacity change from 0 to 512 [ 702.308132][T11940] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 702.437144][T11940] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #17: comm syz.2.2464: iget: bad i_size value: -6917529027641081756 [ 702.438580][T11940] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2464: couldn't read orphan inode 17 (err -117) [ 702.439601][T11940] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 705.084526][T11924] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 705.251452][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 705.294171][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 706.131919][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 706.177230][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 706.282875][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 706.331721][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 706.365096][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 706.573237][ T4294] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 707.320906][ T4294] usb 3-1: config 0 has no interfaces? [ 707.326469][ T4294] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 707.352774][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.374085][ T4294] usb 3-1: config 0 descriptor?? [ 707.433715][ T7579] bond0: (slave wlan1): Releasing backup interface [ 707.587675][ T954] usb 3-1: USB disconnect, device number 37 [ 707.799233][ T7579] bridge3: port 1(veth7) entered disabled state [ 707.855618][ T7579] device hsr_slave_0 left promiscuous mode [ 707.874284][ T7579] device hsr_slave_1 left promiscuous mode [ 707.907378][ T7579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.922917][ T7579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.171135][ T7579] device veth1_macvtap left promiscuous mode [ 708.177345][ T7579] device veth0_macvtap left promiscuous mode [ 708.183502][ T7579] device veth1_vlan left promiscuous mode [ 708.192539][ T7579] device veth0_vlan left promiscuous mode [ 709.236409][T12003] loop2: detected capacity change from 0 to 256 [ 709.274725][T12003] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 709.491545][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 709.961899][ T7579] device team_slave_1 left promiscuous mode [ 709.971802][ T7579] team0 (unregistering): Port device team_slave_1 removed [ 710.036777][ T7579] device team_slave_0 left promiscuous mode [ 710.043863][ T7579] team0 (unregistering): Port device team_slave_0 removed [ 710.106804][ T7579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.117218][ T7579] device bond_slave_1 left promiscuous mode [ 710.172834][ T7579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.182302][ T7579] device bond_slave_0 left promiscuous mode [ 710.829724][ T7579] bond0 (unregistering): Released all slaves [ 710.875178][T11775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.888517][T11990] netlink: 2088 bytes leftover after parsing attributes in process `syz.5.2473'. [ 710.915492][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 710.933963][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 711.273125][T12021] loop5: detected capacity change from 0 to 512 [ 711.367808][T12023] loop4: detected capacity change from 0 to 512 [ 711.383385][T12023] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 711.448218][T12021] EXT4-fs: Ignoring removed orlov option [ 711.691388][T12023] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #17: comm syz.4.2478: iget: bad i_size value: -6917529027641081756 [ 711.706341][T12023] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2478: couldn't read orphan inode 17 (err -117) [ 711.726258][T12023] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 711.926538][T12021] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.2477: casefold flag without casefold feature [ 712.224273][T12032] loop2: detected capacity change from 0 to 512 [ 712.232729][T12021] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2477: couldn't read orphan inode 15 (err -117) [ 712.337814][T12021] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 712.392335][T12032] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 712.454373][T12032] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 712.513265][T12021] overlayfs: missing 'lowerdir' [ 712.965326][T12041] input: syz1 as /devices/virtual/input/input21 [ 713.860433][T10970] EXT4-fs (loop5): unmounting filesystem. [ 714.392273][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 714.456009][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 714.857461][T12065] loop5: detected capacity change from 0 to 512 [ 715.696686][T12072] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 716.634278][T12065] EXT4-fs (loop5): 1 orphan inode deleted [ 716.640474][T12065] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 716.655669][T12065] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.878585][ T22] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 718.198269][ T7530] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 718.234870][ T7530] EXT4-fs error (device loop5): ext4_release_dquot:6818: comm kworker/u4:18: Failed to release dquot type 1 [ 718.304414][T12081] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.2486'. [ 718.427280][T10970] EXT4-fs (loop5): unmounting filesystem. [ 718.433986][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 718.456978][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 718.673557][T11775] device veth0_vlan entered promiscuous mode [ 718.982230][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 719.067743][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 719.326682][T11775] device veth1_vlan entered promiscuous mode [ 719.406888][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 719.480680][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 719.554915][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 719.761887][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2489'. [ 719.839660][T11775] device veth0_macvtap entered promiscuous mode [ 719.850247][T11775] device veth1_macvtap entered promiscuous mode [ 719.864873][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 719.883180][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 721.356631][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 721.421186][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 721.446900][T12108] netlink: 'syz.4.2490': attribute type 4 has an invalid length. [ 721.633101][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.678569][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.705879][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.728865][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.745540][T11775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.758631][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.795220][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.871805][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.972149][T12120] loop0: detected capacity change from 0 to 512 [ 721.986227][T12120] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 722.021385][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.339382][T12120] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #17: comm syz.0.2493: iget: bad i_size value: -6917529027641081756 [ 723.356628][T12120] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2493: couldn't read orphan inode 17 (err -117) [ 723.372940][T12120] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 723.585691][T12124] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 723.639967][T11775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.755028][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2494'. [ 724.888730][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 724.903430][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 724.918262][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 724.932030][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 724.946376][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 724.963777][T11775] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.019781][T11775] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.054266][T11775] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.069462][T11775] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.916116][ T4526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.008194][ T4526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.068941][T11997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 726.126548][T12147] device veth9 entered promiscuous mode [ 726.236239][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.258529][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.302158][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 726.341951][ T4259] Bluetooth: hci2: command 0x0406 tx timeout [ 726.752593][T12165] netlink: 'syz.0.2502': attribute type 4 has an invalid length. [ 727.459147][T12167] capability: warning: `syz.6.2425' uses 32-bit capabilities (legacy support in use) [ 727.774396][T12177] loop5: detected capacity change from 0 to 512 [ 727.797263][T12177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 727.823385][T12177] EXT4-fs (loop5): orphan cleanup on readonly fs [ 727.832312][T12177] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2505: bg 0: block 248: padding at end of block bitmap is not set [ 727.852262][T12177] Quota error (device loop5): write_blk: dquota write failed [ 727.859793][T12177] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 727.869984][T12177] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.2505: Failed to acquire dquot type 1 [ 727.885983][T12177] EXT4-fs (loop5): 1 truncate cleaned up [ 727.899134][T12177] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 727.918103][T12177] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2505'. [ 727.944505][ T27] audit: type=1326 audit(1743406709.379:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12168 comm="syz.5.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f898d169 code=0x7ffc0000 [ 728.147368][ T27] audit: type=1326 audit(1743406709.379:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12168 comm="syz.5.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f898d169 code=0x7ffc0000 [ 728.415392][T12182] xt_bpf: check failed: parse error [ 728.476874][ T27] audit: type=1326 audit(1743406709.379:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12168 comm="syz.5.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22f898d169 code=0x7ffc0000 [ 728.681998][ T27] audit: type=1326 audit(1743406709.379:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12168 comm="syz.5.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f898d169 code=0x7ffc0000 [ 728.746668][T12188] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.826613][ T27] audit: type=1326 audit(1743406709.379:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12168 comm="syz.5.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f898d169 code=0x7ffc0000 [ 728.849885][ T27] audit: type=1326 audit(1743406709.379:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12168 comm="syz.5.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22f898d169 code=0x7ffc0000 [ 728.872360][ T27] audit: type=1326 audit(1743406709.379:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12168 comm="syz.5.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f898d169 code=0x7ffc0000 [ 729.374899][ T27] audit: type=1326 audit(1743406709.379:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12168 comm="syz.5.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f898d169 code=0x7ffc0000 [ 729.679852][T10970] EXT4-fs (loop5): unmounting filesystem. [ 729.838970][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'. [ 729.975765][T12202] device veth5 entered promiscuous mode [ 730.532162][T12211] loop6: detected capacity change from 0 to 512 [ 730.994306][T12211] EXT4-fs (loop6): 1 orphan inode deleted [ 731.000254][T12211] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 731.013884][T12211] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 732.888739][ T4679] __quota_error: 25 callbacks suppressed [ 732.888761][ T4679] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 732.983770][ T4679] EXT4-fs error (device loop6): ext4_release_dquot:6818: comm kworker/u4:13: Failed to release dquot type 1 [ 733.082134][T11775] EXT4-fs (loop6): unmounting filesystem. [ 733.518477][T12242] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.849295][T12251] loop4: detected capacity change from 0 to 512 [ 733.863987][T12251] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 733.921788][T12251] EXT4-fs (loop4): orphan cleanup on readonly fs [ 733.958029][T12251] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2523: bg 0: block 248: padding at end of block bitmap is not set [ 733.982073][T12251] Quota error (device loop4): write_blk: dquota write failed [ 733.990323][T12251] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 734.000538][T12251] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.2523: Failed to acquire dquot type 1 [ 734.045560][T12251] EXT4-fs (loop4): 1 truncate cleaned up [ 734.058007][T12251] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 734.145179][T12251] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2523'. [ 734.226791][ T27] audit: type=1326 audit(1743406716.020:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.4.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c38d169 code=0x7ffc0000 [ 734.652676][T12254] loop5: detected capacity change from 0 to 256 [ 734.707715][ T27] audit: type=1326 audit(1743406716.020:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.4.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c38d169 code=0x7ffc0000 [ 735.874870][ T27] audit: type=1326 audit(1743406716.020:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.4.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3c38d169 code=0x7ffc0000 [ 735.898069][ T27] audit: type=1326 audit(1743406716.020:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.4.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c38d169 code=0x7ffc0000 [ 735.920496][ T27] audit: type=1326 audit(1743406716.020:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.4.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c38d169 code=0x7ffc0000 [ 735.967645][ T27] audit: type=1326 audit(1743406716.031:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.4.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3c38d169 code=0x7ffc0000 [ 736.067040][ T27] audit: type=1326 audit(1743406716.031:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.4.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c38d169 code=0x7ffc0000 [ 736.802094][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 737.126917][T12277] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2526'. [ 737.583428][T12281] device veth3 entered promiscuous mode [ 738.268999][T12298] loop6: detected capacity change from 0 to 512 [ 740.685783][T12298] EXT4-fs warning (device loop6): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop6. [ 741.273843][T12310] loop0: detected capacity change from 0 to 256 [ 741.311811][T12310] exfat: Deprecated parameter 'namecase' [ 741.365711][T12310] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 742.736758][T12330] loop6: detected capacity change from 0 to 256 [ 743.494510][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 743.501249][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 744.372517][T12342] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2542'. [ 744.512506][ T4294] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 744.521202][T12345] device veth3 entered promiscuous mode [ 744.732127][ T4294] usb 3-1: Using ep0 maxpacket: 16 [ 744.750547][ T4294] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 744.792788][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.816504][ T4294] usb 3-1: Product: syz [ 744.829880][ T4294] usb 3-1: Manufacturer: syz [ 744.846038][ T4294] usb 3-1: SerialNumber: syz [ 744.881963][ T4294] r8152-cfgselector 3-1: config 0 descriptor?? [ 745.029386][ T4296] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 745.188076][ T4296] usb 7-1: device descriptor read/64, error -71 [ 745.243285][T12363] loop4: detected capacity change from 0 to 128 [ 745.301904][ T4294] r8152-cfgselector 3-1: Unknown version 0x0000 [ 745.325629][ T4294] r8152-cfgselector 3-1: bad CDC descriptors [ 745.345937][T12363] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 745.367826][T12363] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 745.398604][ T4294] r8152-cfgselector 3-1: Unknown version 0x0000 [ 745.497388][ T4294] r8152-cfgselector 3-1: USB disconnect, device number 39 [ 745.595170][ T4296] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 745.764889][ T4296] usb 7-1: device descriptor read/64, error -71 [ 745.887119][ T4296] usb usb7-port1: attempt power cycle [ 746.719245][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 746.895442][ T4296] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 746.915521][T12384] loop2: detected capacity change from 0 to 512 [ 746.920288][T12384] EXT4-fs (loop2): Test dummy encryption mode enabled [ 746.920312][T12384] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 747.107274][ T4296] usb 7-1: device descriptor read/8, error -71 [ 747.128691][T12384] EXT4-fs (loop2): 1 truncate cleaned up [ 747.136201][T12384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 747.396655][ T4296] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 747.477491][ T4296] usb 7-1: device descriptor read/8, error -71 [ 748.048671][ T4296] usb usb7-port1: unable to enumerate USB device [ 748.216567][T12399] hub 6-0:1.0: USB hub found [ 748.225541][T12399] hub 6-0:1.0: 1 port detected [ 748.830547][T12397] loop6: detected capacity change from 0 to 1024 [ 748.898760][T12397] EXT4-fs: Ignoring removed i_version option [ 748.904864][T12397] EXT4-fs: inline encryption not supported [ 748.932305][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 748.994269][T12397] EXT4-fs (loop6): Test dummy encryption mode enabled [ 749.073559][T12397] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 749.811204][ T4294] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 749.999191][ T4294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 750.034780][ T4294] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 750.043887][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.111618][ T4294] usb 3-1: config 0 descriptor?? [ 751.972053][T12451] loop4: detected capacity change from 0 to 512 [ 752.026950][T12451] EXT4-fs (loop4): Test dummy encryption mode enabled [ 752.073820][T12451] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 752.125181][T12451] EXT4-fs (loop4): 1 truncate cleaned up [ 752.130945][T12451] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 752.796775][T12456] hub 6-0:1.0: USB hub found [ 752.802382][T12456] hub 6-0:1.0: 1 port detected [ 753.515406][ T4294] usbhid 3-1:0.0: can't add hid device: -71 [ 753.530836][ T4294] usbhid: probe of 3-1:0.0 failed with error -71 [ 753.539165][ T4294] usb 3-1: USB disconnect, device number 40 [ 753.597528][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 753.616847][T11775] EXT4-fs (loop6): unmounting filesystem. [ 754.076655][T10408] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 754.089363][T10408] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 754.097975][T10408] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 754.106246][T10408] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 754.119295][T10408] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 754.127136][ T4294] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 754.136960][T10408] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 754.265872][ T4296] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 754.324539][ T4294] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.344295][ T4294] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 754.354040][ T4294] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 754.363265][ T4294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.398637][ T4294] usb 7-1: config 0 descriptor?? [ 754.419479][ T4294] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 754.428556][ T4294] dvb-usb: bulk message failed: -22 (3/0) [ 754.436517][ T4294] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 754.458556][ T4294] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 754.463933][ T4296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.477364][ T4294] usb 7-1: media controller created [ 754.497160][ T4294] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 754.505168][ T4296] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 754.546915][ T4294] dvb-usb: bulk message failed: -22 (6/0) [ 754.552777][ T4294] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 754.560558][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.594391][T12471] chnl_net:caif_netlink_parms(): no params data found [ 754.609852][T12467] dvb-usb: bulk message failed: -22 (2/0) [ 754.616264][ T4296] usb 3-1: config 0 descriptor?? [ 754.634997][ T4294] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 754.670687][ T4294] dvb-usb: schedule remote query interval to 150 msecs. [ 754.724587][ T4294] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 754.777147][ T4294] usb 7-1: USB disconnect, device number 6 [ 754.839292][ T4294] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 754.922710][ T4296] usbhid 3-1:0.0: can't add hid device: -71 [ 754.932187][ T4296] usbhid: probe of 3-1:0.0 failed with error -71 [ 754.973959][ T4296] usb 3-1: USB disconnect, device number 41 [ 755.689510][T12471] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.722236][T12471] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.730663][T12471] device bridge_slave_0 entered promiscuous mode [ 755.739494][T12471] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.747095][T12471] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.774156][T12471] device bridge_slave_1 entered promiscuous mode [ 755.868069][T12497] loop6: detected capacity change from 0 to 512 [ 755.884607][T12499] loop4: detected capacity change from 0 to 16 [ 755.904747][T12471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.934429][T12499] erofs: (device loop4): mounted with root inode @ nid 36. [ 755.942933][T12471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.971351][T12502] loop2: detected capacity change from 0 to 1024 [ 756.000290][T12502] EXT4-fs: Ignoring removed i_version option [ 756.030861][T12497] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 756.093098][T10408] Bluetooth: hci1: command 0x0409 tx timeout [ 756.121411][T12497] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 756.132738][T12502] EXT4-fs: inline encryption not supported [ 756.145717][T12502] EXT4-fs (loop2): Test dummy encryption mode enabled [ 756.176643][T12502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 756.397110][T11775] EXT4-fs (loop6): unmounting filesystem. [ 756.780613][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 757.118536][ T27] audit: type=1326 audit(1743406740.343:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c38d169 code=0x7ffc0000 [ 757.381339][ T27] audit: type=1326 audit(1743406740.343:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3c38d169 code=0x7ffc0000 [ 757.429871][ T27] audit: type=1326 audit(1743406740.353:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8e3c38effc code=0x7ffc0000 [ 757.635879][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 757.729908][T12471] team0: Port device team_slave_0 added [ 757.796221][T12471] team0: Port device team_slave_1 added [ 757.981628][T12471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.007539][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.034802][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 758.275409][T12471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.345648][T12534] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2583'. [ 758.390796][T12534] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2583'. [ 758.447865][T12471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.464915][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.661011][T12471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.970230][ T4259] Bluetooth: hci1: command 0x040f tx timeout [ 760.068034][T12531] loop4: detected capacity change from 0 to 262144 [ 760.163865][T12531] F2FS-fs (loop4): Found nat_bits in checkpoint [ 760.274910][T12531] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 760.545756][T12471] device hsr_slave_0 entered promiscuous mode [ 760.655726][T12471] device hsr_slave_1 entered promiscuous mode [ 760.694305][T12471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 760.714293][T12471] Cannot create hsr debugfs directory [ 761.955692][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 763.470770][T12573] loop0: detected capacity change from 0 to 128 [ 763.634864][T12573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 763.665562][T12573] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.716423][T12471] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 763.971941][T12471] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 764.770355][T12585] loop6: detected capacity change from 0 to 1024 [ 764.800806][T12585] EXT4-fs: Ignoring removed i_version option [ 764.835843][T12585] EXT4-fs: inline encryption not supported [ 764.854610][T12585] EXT4-fs (loop6): Test dummy encryption mode enabled [ 764.911942][T12585] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 764.927242][T12471] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 764.938485][T12471] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 765.237994][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 765.435038][T12471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.507295][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 765.516000][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 765.557571][T12471] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.620356][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 765.638467][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 765.691049][ T4650] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.698289][ T4650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.822030][T12596] loop0: detected capacity change from 0 to 16 [ 765.831555][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 765.849208][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 765.890689][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 765.915321][T12596] erofs: (device loop0): mounted with root inode @ nid 36. [ 765.943199][ T4650] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.950440][ T4650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.006975][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 766.223472][T12471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 766.237671][T12471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 766.262816][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 766.288858][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 766.321002][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 766.394949][ T27] audit: type=1326 audit(1743406750.675:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e5b8d169 code=0x7ffc0000 [ 766.423506][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 766.460878][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 766.486175][ T27] audit: type=1326 audit(1743406750.675:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e5b8d169 code=0x7ffc0000 [ 766.518003][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 766.545641][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 766.615815][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 766.633817][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 766.645427][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 766.660808][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 766.669730][ T27] audit: type=1326 audit(1743406750.696:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc9e5b8effc code=0x7ffc0000 [ 766.716918][T12600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2593'. [ 766.764596][T12600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2593'. [ 767.302142][ T4419] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.502421][T12471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.510443][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 767.521839][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 767.604051][ T26] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 767.634374][ T4419] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.791927][T11775] EXT4-fs (loop6): unmounting filesystem. [ 767.800643][ T26] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 767.812334][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.831306][ T4419] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.883983][ T26] usb 3-1: config 0 has no interfaces? [ 767.923787][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.967696][ T26] usb 3-1: config 0 has no interfaces? [ 767.991042][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.021298][ T26] usb 3-1: config 0 has no interfaces? [ 768.042056][ T4419] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.043595][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.113804][ T26] usb 3-1: config 0 has no interfaces? [ 768.130138][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.156139][ T26] usb 3-1: config 0 has no interfaces? [ 768.173685][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.207192][ T26] usb 3-1: config 0 has no interfaces? [ 768.227050][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.263058][ T26] usb 3-1: config 0 has no interfaces? [ 768.282429][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.325152][ T26] usb 3-1: config 0 has no interfaces? [ 768.370928][ T26] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 768.399709][ T26] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 768.428122][ T26] usb 3-1: Product: syz [ 768.448087][ T26] usb 3-1: Manufacturer: syz [ 768.468886][ T26] usb 3-1: SerialNumber: syz [ 768.495093][ T26] usb 3-1: config 0 descriptor?? [ 768.732609][ T22] usb 3-1: USB disconnect, device number 42 [ 768.922506][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 768.946898][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 769.093102][T12471] device veth0_vlan entered promiscuous mode [ 769.110418][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 769.132166][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 769.150269][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 769.160791][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 769.253288][ T954] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 769.291266][T12471] device veth1_vlan entered promiscuous mode [ 769.434304][ T954] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 769.442841][ T954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.453561][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 769.463149][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 769.471317][ T954] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 769.505873][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 769.518389][T11787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 769.533399][ T954] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 769.542506][ T954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.552276][ T954] usb 5-1: Product: syz [ 769.554743][T12471] device veth0_macvtap entered promiscuous mode [ 769.565918][ T954] usb 5-1: Manufacturer: syz [ 769.570948][ T954] usb 5-1: SerialNumber: syz [ 769.581768][ T954] usb 5-1: config 0 descriptor?? [ 769.645833][T12471] device veth1_macvtap entered promiscuous mode [ 769.758014][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.794323][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.818473][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.829367][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.859731][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.909695][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.931427][T12471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.974391][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 769.984158][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 769.993027][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 770.006168][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 770.031176][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.060087][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.072033][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.088492][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.099784][T12471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.118822][T12471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.132647][T12471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.172323][T12648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.200327][T12648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.325548][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 770.348855][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 770.373513][T12471] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.398578][T12471] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.420491][T12471] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.436090][T12471] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.451064][ T4419] device hsr_slave_0 left promiscuous mode [ 771.482135][ T4419] device hsr_slave_1 left promiscuous mode [ 771.542861][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.561170][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.581089][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.602518][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.628204][ T4419] device bridge_slave_1 left promiscuous mode [ 771.642118][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.663419][ T4419] device bridge_slave_0 left promiscuous mode [ 771.673135][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.785129][ T4419] device veth1_macvtap left promiscuous mode [ 771.826462][ T4419] device veth0_macvtap left promiscuous mode [ 771.832641][ T4419] device veth1_vlan left promiscuous mode [ 771.853978][ T4419] device veth0_vlan left promiscuous mode [ 771.877016][T11037] usb 5-1: USB disconnect, device number 36 [ 772.387040][T12665] loop6: detected capacity change from 0 to 40427 [ 772.402377][T12665] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 772.421184][T12665] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 772.443211][T12665] F2FS-fs (loop6): invalid crc value [ 772.477403][T12665] F2FS-fs (loop6): Found nat_bits in checkpoint [ 772.559230][T12665] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 772.567028][T12665] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 773.034622][T12678] loop0: detected capacity change from 0 to 1024 [ 773.052396][T12678] EXT4-fs: Ignoring removed i_version option [ 773.059298][T12678] EXT4-fs: inline encryption not supported [ 773.080925][T12678] EXT4-fs (loop0): Test dummy encryption mode enabled [ 773.141622][T12678] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 773.267847][ T4419] team0 (unregistering): Port device team_slave_1 removed [ 773.398558][ T4419] team0 (unregistering): Port device team_slave_0 removed [ 774.063918][ T4419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.150143][ T4419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.406845][T12691] loop6: detected capacity change from 0 to 16 [ 774.422122][T12691] erofs: (device loop6): mounted with root inode @ nid 36. [ 775.438336][ T954] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 775.611296][ T954] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 775.618688][ T4419] bond0 (unregistering): Released all slaves [ 775.623179][ T954] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.635452][ T954] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 775.644657][ T954] usb 7-1: config 0 interface 0 has no altsetting 0 [ 775.653500][ T954] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.663725][ T954] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 775.673272][ T954] usb 7-1: config 0 interface 0 has no altsetting 0 [ 775.682496][ T954] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.693445][ T954] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 775.710446][ T954] usb 7-1: config 0 interface 0 has no altsetting 0 [ 775.723244][ T954] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.739663][ T954] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 775.748732][ T954] usb 7-1: config 0 interface 0 has no altsetting 0 [ 775.786104][ T954] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.788776][T12670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2603'. [ 775.805456][ T954] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 775.812493][T12670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2603'. [ 775.816870][ T954] usb 7-1: config 0 interface 0 has no altsetting 0 [ 775.842414][ T954] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.860202][ T954] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 775.870134][ T954] usb 7-1: config 0 interface 0 has no altsetting 0 [ 775.896239][ T954] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.926098][ T954] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 775.968076][ T954] usb 7-1: config 0 interface 0 has no altsetting 0 [ 776.010020][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 776.017291][ T954] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.047224][ T954] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 776.061368][T12695] loop4: detected capacity change from 0 to 2048 [ 776.070728][ T7579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.085049][ T7579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.092673][ T954] usb 7-1: config 0 interface 0 has no altsetting 0 [ 776.116732][T12695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 776.127003][ T954] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 776.138431][ T954] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 776.153630][ T954] usb 7-1: Product: syz [ 776.158039][ T954] usb 7-1: Manufacturer: syz [ 776.163348][ T954] usb 7-1: SerialNumber: syz [ 776.185219][ T954] usb 7-1: config 0 descriptor?? [ 776.192435][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 776.196513][ T954] yurex 7-1:0.0: Could not find endpoints [ 776.303924][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.324092][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.335339][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 776.412007][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 776.429098][ T954] usb 7-1: USB disconnect, device number 7 [ 777.447045][ T26] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 777.640130][ T26] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 777.653255][ T26] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 777.667181][ T26] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 777.677048][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.692749][ T26] usb 3-1: Product: syz [ 777.703348][ T26] usb 3-1: Manufacturer: syz [ 777.712755][ T26] usb 3-1: SerialNumber: syz [ 777.734405][ T26] usb 3-1: config 0 descriptor?? [ 777.846635][T12731] loop4: detected capacity change from 0 to 8192 [ 778.015397][T12734] loop7: detected capacity change from 0 to 1024 [ 778.040108][T12734] EXT4-fs: Ignoring removed i_version option [ 778.057093][T12734] EXT4-fs: inline encryption not supported [ 778.071647][T12738] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2618'. [ 778.090503][T12734] EXT4-fs (loop7): Test dummy encryption mode enabled [ 778.102106][T12738] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2618'. [ 778.138976][T12734] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 778.311789][T12743] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.319088][T12743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.362618][T12746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.372049][T12746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.092465][T12471] EXT4-fs (loop7): unmounting filesystem. [ 779.138510][T12754] loop6: detected capacity change from 0 to 1024 [ 779.191445][T12754] EXT4-fs: Ignoring removed orlov option [ 779.210521][T12754] EXT4-fs (loop6): Test dummy encryption mode enabled [ 779.267813][T12754] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 780.755288][ T7] usb 3-1: USB disconnect, device number 43 [ 781.277297][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2621'. [ 781.458348][T12795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2629'. [ 781.485228][T12795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2629'. [ 781.565555][T11037] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 781.773944][T11037] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 781.804375][T11037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.833852][T11037] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 781.862710][T11037] usb 3-1: config 0 interface 0 has no altsetting 0 [ 781.912654][T11037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.933213][T11037] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 781.973605][T11037] usb 3-1: config 0 interface 0 has no altsetting 0 [ 781.986649][T11037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.027475][T11037] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 782.056745][T11037] usb 3-1: config 0 interface 0 has no altsetting 0 [ 782.090093][T11037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.112183][T11775] EXT4-fs (loop6): unmounting filesystem. [ 782.123695][T11037] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 782.148815][T11037] usb 3-1: config 0 interface 0 has no altsetting 0 [ 782.163616][T11037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.206354][T11037] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 782.255895][T11037] usb 3-1: config 0 interface 0 has no altsetting 0 [ 782.299153][T11037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.335624][T11037] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 782.351887][T12817] loop0: detected capacity change from 0 to 256 [ 782.364942][T11037] usb 3-1: config 0 interface 0 has no altsetting 0 [ 782.393989][T11037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.399496][T12814] loop6: detected capacity change from 0 to 1024 [ 782.445303][T11037] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 782.471689][T11037] usb 3-1: config 0 interface 0 has no altsetting 0 [ 782.506088][T11037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.517433][T12814] EXT4-fs: Ignoring removed i_version option [ 782.527860][T12814] EXT4-fs: inline encryption not supported [ 782.566877][T12814] EXT4-fs (loop6): Test dummy encryption mode enabled [ 782.602846][T11037] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 782.655314][T11037] usb 3-1: config 0 interface 0 has no altsetting 0 [ 782.994896][T12814] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 783.468804][T11037] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 784.161845][T11775] EXT4-fs (loop6): unmounting filesystem. [ 784.731925][T11037] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 784.740441][T11037] usb 3-1: Product: syz [ 784.744670][T11037] usb 3-1: Manufacturer: syz [ 784.749305][T11037] usb 3-1: SerialNumber: syz [ 784.757226][T11037] usb 3-1: config 0 descriptor?? [ 784.783702][T11037] usb 3-1: can't set config #0, error -71 [ 784.794598][T11037] usb 3-1: USB disconnect, device number 44 [ 785.049283][T12842] loop7: detected capacity change from 0 to 512 [ 785.076181][T12842] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 785.098168][ T127] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 785.129187][T12842] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 785.144964][T12842] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 785.160259][T12842] System zones: 0-1, 15-15, 18-18, 34-34 [ 785.167591][T12842] EXT4-fs (loop7): orphan cleanup on readonly fs [ 785.174189][T12842] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 785.183929][T12842] EXT4-fs warning (device loop7): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 785.199545][T12842] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 785.212247][T12842] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2638: bg 0: block 40: padding at end of block bitmap is not set [ 785.238368][T12842] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 785.249508][T12842] EXT4-fs (loop7): 1 truncate cleaned up [ 785.255234][T12842] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 785.305600][ T127] usb 7-1: config index 0 descriptor too short (expected 4114, got 18) [ 785.337463][ T127] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 785.364420][ T127] usb 7-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 785.383975][ T127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.412629][ T127] usb 7-1: Product: syz [ 785.430413][ T127] usb 7-1: Manufacturer: syz [ 785.440694][ T127] usb 7-1: SerialNumber: syz [ 785.500634][ T127] usb 7-1: config 0 descriptor?? [ 785.597901][T12850] kvm: pic: non byte write [ 786.340568][T12857] loop2: detected capacity change from 0 to 512 [ 786.428930][T12857] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2639: invalid indirect mapped block 256 (level 2) [ 786.448475][T12857] EXT4-fs (loop2): 2 truncates cleaned up [ 786.454428][T12857] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 786.477008][T12471] EXT4-fs (loop7): unmounting filesystem. [ 786.620224][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 786.745801][T12868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.769654][T12869] loop2: detected capacity change from 0 to 128 [ 786.790003][T12868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.946323][T12869] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 786.968235][T12876] loop4: detected capacity change from 0 to 256 [ 786.985246][T12869] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.175347][T12877] netlink: 25 bytes leftover after parsing attributes in process `syz.7.2641'. [ 788.147197][T12877] device gretap0 entered promiscuous mode [ 788.156463][T12878] netlink: 45349 bytes leftover after parsing attributes in process `syz.7.2641'. [ 788.166127][T12878] 0ªX¹¦Dö»: renamed from gretap0 [ 789.475073][ T954] usb 7-1: USB disconnect, device number 8 [ 789.505987][T12878] device 00ªX¹¦Dö» left promiscuous mode [ 789.593399][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 789.785362][T12895] loop2: detected capacity change from 0 to 1024 [ 789.819549][T12895] EXT4-fs: Ignoring removed i_version option [ 789.845131][T12895] EXT4-fs: inline encryption not supported [ 789.867675][T12895] EXT4-fs (loop2): Test dummy encryption mode enabled [ 790.065072][T12895] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 790.117358][T12901] loop6: detected capacity change from 0 to 8192 [ 790.301701][ T954] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 791.777563][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 791.784219][ T954] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 791.810715][ T954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.880144][ T954] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 791.933338][ T954] usb 5-1: config 0 interface 0 has no altsetting 0 [ 791.993269][ T954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.085140][ T954] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 792.169243][ T954] usb 5-1: config 0 interface 0 has no altsetting 0 [ 792.203183][ T954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.247145][ T954] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 792.279680][ T954] usb 5-1: config 0 interface 0 has no altsetting 0 [ 792.334172][ T954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.381653][ T954] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 792.423853][ T954] usb 5-1: config 0 interface 0 has no altsetting 0 [ 792.461794][ T954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.538771][ T954] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 792.594330][ T954] usb 5-1: config 0 interface 0 has no altsetting 0 [ 792.660849][ T954] usb 5-1: unable to read config index 5 descriptor/start: -71 [ 792.706032][ T954] usb 5-1: can't read configurations, error -71 [ 793.057900][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2655'. [ 793.142101][ T26] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 793.169937][ T954] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 793.398991][T12936] loop0: detected capacity change from 0 to 256 [ 793.478094][ T954] usb 5-1: device descriptor read/64, error -71 [ 793.505621][ T26] usb 7-1: Using ep0 maxpacket: 16 [ 793.552269][ T26] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.566166][ T26] usb 7-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 793.566274][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.566348][ T26] usb 7-1: Product: syz [ 793.566413][ T26] usb 7-1: Manufacturer: syz [ 793.566479][ T26] usb 7-1: SerialNumber: syz [ 793.645965][ T954] usb usb5-port1: attempt power cycle [ 794.103053][ T26] usb 7-1: config 0 descriptor?? [ 794.116205][ T26] usb 7-1: Found UVC 0.00 device syz (046d:0721) [ 794.123006][ T26] usb 7-1: No valid video chain found. [ 794.148663][ T954] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 794.189456][ T954] usb 5-1: device descriptor read/8, error -71 [ 794.424105][ T7] usb 7-1: USB disconnect, device number 9 [ 794.567910][ T954] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 794.636864][ T954] usb 5-1: device descriptor read/8, error -71 [ 794.758791][ T954] usb usb5-port1: unable to enumerate USB device [ 795.407355][T11037] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 795.512360][T12958] loop7: detected capacity change from 0 to 1024 [ 795.543217][T12958] EXT4-fs: Ignoring removed i_version option [ 795.593910][T12958] EXT4-fs: inline encryption not supported [ 795.603937][T12958] EXT4-fs (loop7): Test dummy encryption mode enabled [ 795.619690][T11037] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 795.647015][T11037] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 795.693941][T12958] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 795.756080][T11037] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 795.821946][T11037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.855518][T11037] usb 3-1: Product: syz [ 795.859756][T11037] usb 3-1: Manufacturer: syz [ 795.893478][T11037] usb 3-1: SerialNumber: syz [ 795.920490][T11037] usb 3-1: config 0 descriptor?? [ 796.674926][T12471] EXT4-fs (loop7): unmounting filesystem. [ 796.806654][T12984] loop6: detected capacity change from 0 to 128 [ 796.814778][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.843423][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.093201][T12966] loop4: detected capacity change from 0 to 40427 [ 797.884530][T12966] F2FS-fs (loop4): Found nat_bits in checkpoint [ 798.012514][T11037] usb 3-1: USB disconnect, device number 45 [ 798.024662][T12966] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 798.103578][T12966] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 798.723080][T13010] loop2: detected capacity change from 0 to 256 [ 798.960713][T13011] loop7: detected capacity change from 0 to 16 [ 799.071724][T13011] erofs: (device loop7): mounted with root inode @ nid 36. [ 800.431156][ T7] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 800.616832][ T7] usb 7-1: device descriptor read/64, error -71 [ 800.759376][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 800.765744][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 800.888561][ T7] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 801.146302][ T7] usb 7-1: device descriptor read/64, error -71 [ 801.260750][ T7] usb usb7-port1: attempt power cycle [ 801.273704][ T4296] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 801.467029][ T4296] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 801.489820][ T4296] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 801.519480][ T4296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.538637][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2683'. [ 801.547744][ T4296] usb 3-1: Product: syz [ 801.547769][ T4296] usb 3-1: Manufacturer: syz [ 801.547785][ T4296] usb 3-1: SerialNumber: syz [ 801.565280][ T4296] usb 3-1: config 0 descriptor?? [ 801.669915][ T7] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 801.717893][ T7] usb 7-1: device descriptor read/8, error -71 [ 801.740111][T13059] device veth11 entered promiscuous mode [ 801.780133][ T4296] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 801.801860][T13047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.803862][ T4296] asix: probe of 3-1:0.0 failed with error -32 [ 801.838257][T13047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.977615][ T7] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 802.028505][ T7] usb 7-1: device descriptor read/8, error -71 [ 802.038723][T13066] loop0: detected capacity change from 0 to 1024 [ 802.099575][T13066] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 802.146151][ T7] usb usb7-port1: unable to enumerate USB device [ 803.555687][T13085] loop4: detected capacity change from 0 to 256 [ 804.439287][ T22] usb 3-1: USB disconnect, device number 46 [ 806.803310][T13100] loop0: detected capacity change from 0 to 512 [ 806.873517][T13100] EXT4-fs: failed to create workqueue [ 806.879045][T13100] EXT4-fs (loop0): mount failed [ 808.006029][ T9559] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 808.204351][T11037] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 808.362810][T11037] usb 7-1: device descriptor read/64, error -71 [ 808.577119][T10408] Bluetooth: hci5: command 0x0406 tx timeout [ 808.780313][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2698'. [ 809.417578][T11037] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 809.504040][T13150] loop7: detected capacity change from 0 to 256 [ 809.528177][T13150] exfat: Unknown parameter 'ÿÿ00000000000000000000' [ 809.610776][T13129] loop0: detected capacity change from 0 to 40427 [ 809.654222][T13129] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 809.681732][T13129] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 809.697530][T13129] F2FS-fs (loop0): invalid crc value [ 809.742118][ T7] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 809.766828][T13129] F2FS-fs (loop0): Found nat_bits in checkpoint [ 809.855626][T13155] loop6: detected capacity change from 0 to 512 [ 809.958173][T13155] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 810.675502][T13155] EXT4-fs (loop6): 1 truncate cleaned up [ 810.697830][ T4294] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 810.713333][T13155] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 810.731830][ T7] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 810.750915][ T7] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 810.780562][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.841483][ T7] usb 5-1: Product: syz [ 810.845707][ T7] usb 5-1: Manufacturer: syz [ 810.862185][T13129] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 810.887732][ T7] usb 5-1: SerialNumber: syz [ 810.893628][ T4294] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 810.921058][T13129] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 810.929497][ T4294] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.958531][ T7] usb 5-1: config 0 descriptor?? [ 810.970331][ T4294] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 810.982186][ T4294] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 811.035069][ T4294] usb 3-1: config 0 interface 0 has no altsetting 0 [ 811.053123][ T4294] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.107294][ T4294] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 811.201909][ T7] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 811.228864][ T7] asix: probe of 5-1:0.0 failed with error -32 [ 811.238459][ T4294] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 811.261327][T13148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.363370][T13148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.953609][ T4294] usb 3-1: config 0 interface 0 has no altsetting 0 [ 812.016094][ T4294] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.068846][ T4294] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 812.131138][ T4294] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.170251][ T4294] usb 3-1: config 0 interface 0 has no altsetting 0 [ 812.196571][ T4294] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.246658][ T4294] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 812.257671][ T4294] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.303111][ T4294] usb 3-1: config 0 interface 0 has no altsetting 0 [ 812.324527][ T4294] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.389810][ T4294] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 812.443728][ T4294] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 813.265268][ T4294] usb 3-1: config 0 interface 0 has no altsetting 0 [ 813.284315][ T4294] usb 3-1: unable to read config index 5 descriptor/start: -71 [ 813.291946][ T4294] usb 3-1: can't read configurations, error -71 [ 813.313608][ T22] usb 5-1: USB disconnect, device number 41 [ 813.331839][T13187] loop0: detected capacity change from 0 to 512 [ 813.373736][T13187] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 813.448367][T13187] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 813.698472][T13187] EXT4-fs (loop0): 1 truncate cleaned up [ 813.710997][T13187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 814.660714][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 814.673717][T11775] EXT4-fs (loop6): unmounting filesystem. [ 814.942552][ T7] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 815.195665][T13217] netlink: 'syz.6.2715': attribute type 4 has an invalid length. [ 815.874214][ T7] usb 5-1: no configurations [ 815.882963][ T7] usb 5-1: can't read configurations, error -22 [ 816.080226][ T7] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 816.239733][T13198] loop2: detected capacity change from 0 to 40427 [ 816.291977][T13198] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7 [ 816.320477][ T7] usb 5-1: no configurations [ 816.325199][ T7] usb 5-1: can't read configurations, error -22 [ 816.349310][T13198] F2FS-fs (loop2): Unrecognized mount option "barrier" or missing value [ 816.358352][ T7] usb usb5-port1: attempt power cycle [ 817.532914][ T7] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 817.602678][ T7] usb 5-1: device descriptor read/8, error -71 [ 817.641609][T13241] device bridge0 entered promiscuous mode [ 817.667605][T13241] bridge0: port 3(macsec1) entered blocking state [ 817.698991][T13241] bridge0: port 3(macsec1) entered disabled state [ 817.739486][T13241] device bridge0 left promiscuous mode [ 817.798166][ T26] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 817.807937][T13251] loop4: detected capacity change from 0 to 128 [ 817.905960][T13251] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 817.934688][T13251] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.997021][ T26] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 818.026787][ T26] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 818.222120][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.231309][ T26] usb 3-1: Product: syz [ 818.235893][ T26] usb 3-1: Manufacturer: syz [ 818.240620][ T26] usb 3-1: SerialNumber: syz [ 818.261990][ T26] usb 3-1: config 0 descriptor?? [ 818.718191][ T26] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 818.731626][ T26] asix: probe of 3-1:0.0 failed with error -32 [ 818.805560][T13267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.873369][T13267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.219209][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 819.998996][T13289] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 820.020452][T13289] FAT-fs (loop9): unable to read boot sector [ 820.979998][ T7] usb 3-1: USB disconnect, device number 49 [ 823.707868][T13315] loop4: detected capacity change from 0 to 128 [ 823.729248][T13315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 823.739263][T13315] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 823.768175][T13319] fuse: Unknown parameter '' [ 823.936721][T13319] loop0: detected capacity change from 0 to 512 [ 823.955487][ T7] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 824.777450][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 824.784467][T13319] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.2739: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 824.810623][ T7] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 824.819929][T13319] EXT4-fs error (device loop0): ext4_quota_enable:6989: comm syz.0.2739: Bad quota inode: 3, type: 0 [ 824.860174][T13319] EXT4-fs warning (device loop0): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 824.869197][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 824.895644][ T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 824.905645][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 824.925092][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 824.934110][ T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 824.955039][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 824.959381][T13319] EXT4-fs (loop0): mount failed [ 824.969840][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 825.019932][ T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 825.039216][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 825.060261][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 825.083183][ T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 825.121011][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 825.131153][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 825.163819][ T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 825.213565][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 825.234255][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 825.256965][ T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 825.284453][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 825.288673][ T954] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 825.303347][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 825.335921][ T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 825.687047][T13345] loop7: detected capacity change from 0 to 2048 [ 825.734842][ T954] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 825.811815][ T954] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 825.933604][ T954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.049353][ T954] usb 5-1: Product: syz [ 826.091348][ T954] usb 5-1: Manufacturer: syz [ 826.137215][ T954] usb 5-1: SerialNumber: syz [ 826.388457][ T954] usb 5-1: config 0 descriptor?? [ 826.462843][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 826.476342][T13345] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1125899906842627)! [ 826.489457][T13345] EXT4-fs (loop7): group descriptors corrupted! [ 826.639333][ T7] usb 3-1: unable to read config index 7 descriptor/start: -71 [ 826.657531][ T954] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 826.667802][ T954] asix: probe of 5-1:0.0 failed with error -32 [ 826.709172][ T7] usb 3-1: can't read configurations, error -71 [ 826.743509][T13339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.789151][T13339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.938217][ T22] usb 5-1: USB disconnect, device number 46 [ 829.077962][T13375] syz.0.2753[13375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 829.078683][T13375] syz.0.2753[13375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 829.138061][T13375] loop0: detected capacity change from 0 to 16 [ 829.260852][T13375] erofs: (device loop0): mounted with root inode @ nid 36. [ 829.410116][T13376] syz.0.2753: attempt to access beyond end of device [ 829.410116][T13376] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 833.278558][T13393] loop0: detected capacity change from 0 to 256 [ 833.355864][T13393] exfat: Deprecated parameter 'namecase' [ 833.394047][T13393] exfat: Bad value for 'uid' [ 835.504252][ T14] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 837.102802][T13424] loop4: detected capacity change from 0 to 128 [ 837.188393][T13425] netlink: 'syz.2.2764': attribute type 4 has an invalid length. [ 837.914283][T13424] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 837.974824][T13424] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.805641][T13430] loop2: detected capacity change from 0 to 2048 [ 839.743091][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 839.771798][T13430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 842.165146][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 842.290025][ T4294] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 842.485826][ T4294] usb 5-1: no configurations [ 842.490498][ T4294] usb 5-1: can't read configurations, error -22 [ 842.501794][T13458] loop7: detected capacity change from 0 to 16384 [ 842.707219][ T4294] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 844.794142][T13458] bridge0: port 3(vlan2) entered disabled state [ 844.796952][ T4294] usb 5-1: device descriptor read/all, error -71 [ 844.800661][T13458] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.814103][T13458] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.816028][ T4294] usb usb5-port1: attempt power cycle [ 844.966438][T13471] loop7: detected capacity change from 0 to 1024 [ 844.977252][T13471] EXT4-fs: Ignoring removed i_version option [ 844.988132][T13471] EXT4-fs: inline encryption not supported [ 844.996497][T13471] EXT4-fs (loop7): Test dummy encryption mode enabled [ 845.049089][T13475] loop4: detected capacity change from 0 to 16 [ 845.105619][T13471] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 845.355275][T13475] erofs: (device loop4): mounted with root inode @ nid 36. [ 845.374512][T13480] loop0: detected capacity change from 0 to 128 [ 845.464902][T13480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 845.520637][T13480] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.220540][T13484] device vlan3 entered promiscuous mode [ 846.226337][T13484] device veth1_to_batadv entered promiscuous mode [ 847.256316][T13484] device veth1_to_batadv left promiscuous mode [ 847.269910][T12471] EXT4-fs (loop7): unmounting filesystem. [ 847.292447][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 848.672509][T13502] [ 848.674892][T13502] ====================================================== [ 848.681921][T13502] WARNING: possible circular locking dependency detected [ 848.688958][T13502] 6.1.132-syzkaller #0 Not tainted [ 848.694073][T13502] ------------------------------------------------------ [ 848.701100][T13502] syz.0.2785/13502 is trying to acquire lock: [ 848.707178][T13502] ffff888030b053d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 848.716875][T13502] [ 848.716875][T13502] but task is already holding lock: [ 848.724241][T13502] ffff88807dd6a870 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 848.735146][T13502] [ 848.735146][T13502] which lock already depends on the new lock. [ 848.735146][T13502] [ 848.745551][T13502] [ 848.745551][T13502] the existing dependency chain (in reverse order) is: [ 848.754568][T13502] [ 848.754568][T13502] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 848.763274][T13502] lock_acquire+0x1f8/0x5a0 [ 848.768324][T13502] down_write+0x36/0x60 [ 848.773014][T13502] process_measurement+0x446/0x21b0 [ 848.778745][T13502] ima_file_mmap+0x121/0x1c0 [ 848.783861][T13502] __se_sys_remap_file_pages+0x67a/0x8b0 [ 848.790114][T13502] do_syscall_64+0x3b/0xb0 [ 848.795085][T13502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.801511][T13502] [ 848.801511][T13502] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 848.809080][T13502] validate_chain+0x1661/0x5950 [ 848.814457][T13502] __lock_acquire+0x125b/0x1f80 [ 848.819844][T13502] lock_acquire+0x1f8/0x5a0 [ 848.824883][T13502] down_read_killable+0xc6/0xd10 [ 848.830361][T13502] mmap_read_lock_killable+0x1d/0x60 [ 848.836181][T13502] lock_mm_and_find_vma+0x2a7/0x2e0 [ 848.841910][T13502] exc_page_fault+0x169/0x620 [ 848.847123][T13502] asm_exc_page_fault+0x22/0x30 [ 848.852502][T13502] fault_in_readable+0x1c8/0x340 [ 848.857995][T13502] fault_in_iov_iter_readable+0xdb/0x270 [ 848.864162][T13502] generic_perform_write+0x207/0x5e0 [ 848.869975][T13502] __generic_file_write_iter+0x176/0x400 [ 848.876139][T13502] generic_file_write_iter+0xab/0x310 [ 848.882043][T13502] vfs_write+0x857/0xbc0 [ 848.886821][T13502] ksys_write+0x19c/0x2c0 [ 848.891706][T13502] do_syscall_64+0x3b/0xb0 [ 848.896654][T13502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.903085][T13502] [ 848.903085][T13502] other info that might help us debug this: [ 848.903085][T13502] [ 848.913330][T13502] Possible unsafe locking scenario: [ 848.913330][T13502] [ 848.920780][T13502] CPU0 CPU1 [ 848.926144][T13502] ---- ---- [ 848.931508][T13502] lock(&sb->s_type->i_mutex_key#12); [ 848.936982][T13502] lock(&mm->mmap_lock); [ 848.943839][T13502] lock(&sb->s_type->i_mutex_key#12); [ 848.951853][T13502] lock(&mm->mmap_lock); [ 848.956188][T13502] [ 848.956188][T13502] *** DEADLOCK *** [ 848.956188][T13502] [ 848.964341][T13502] 3 locks held by syz.0.2785/13502: [ 848.969537][T13502] #0: ffff888067fabc68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360 [ 848.979044][T13502] #1: ffff88807939a460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 848.987954][T13502] #2: ffff88807dd6a870 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 848.999310][T13502] [ 848.999310][T13502] stack backtrace: [ 849.005215][T13502] CPU: 1 PID: 13502 Comm: syz.0.2785 Not tainted 6.1.132-syzkaller #0 [ 849.013393][T13502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 849.023490][T13502] Call Trace: [ 849.026780][T13502] [ 849.029718][T13502] dump_stack_lvl+0x1e3/0x2cb [ 849.034428][T13502] ? nf_tcp_handle_invalid+0x647/0x647 [ 849.039897][T13502] ? print_circular_bug+0x12b/0x1a0 [ 849.045100][T13502] check_noncircular+0x2fa/0x3b0 [ 849.050044][T13502] ? add_chain_block+0x850/0x850 [ 849.054986][T13502] ? lockdep_lock+0x11f/0x2a0 [ 849.059680][T13502] ? _find_first_zero_bit+0xd0/0x100 [ 849.064981][T13502] validate_chain+0x1661/0x5950 [ 849.069848][T13502] ? __lock_acquire+0x125b/0x1f80 [ 849.074886][T13502] ? reacquire_held_locks+0x660/0x660 [ 849.080292][T13502] ? mark_lock+0x9a/0x340 [ 849.084639][T13502] ? mark_lock+0x9a/0x340 [ 849.088988][T13502] __lock_acquire+0x125b/0x1f80 [ 849.093893][T13502] lock_acquire+0x1f8/0x5a0 [ 849.098413][T13502] ? mmap_read_lock_killable+0x1d/0x60 [ 849.103888][T13502] ? read_lock_is_recursive+0x10/0x10 [ 849.109279][T13502] ? __might_sleep+0xb0/0xb0 [ 849.113877][T13502] ? release_firmware_map_entry+0x18b/0x18b [ 849.119788][T13502] down_read_killable+0xc6/0xd10 [ 849.124743][T13502] ? mmap_read_lock_killable+0x1d/0x60 [ 849.130214][T13502] ? mark_lock+0x9a/0x340 [ 849.134562][T13502] ? cmp_ex_search+0x70/0x90 [ 849.139161][T13502] ? mmap_read_lock_killable+0x1d/0x60 [ 849.144632][T13502] ? bsearch+0x8e/0xb0 [ 849.148715][T13502] ? down_read_interruptible+0xc40/0xc40 [ 849.154367][T13502] ? search_extable+0xaf/0xf0 [ 849.159051][T13502] ? trim_init_extable+0x3c0/0x3c0 [ 849.164170][T13502] ? fault_in_readable+0x1c8/0x340 [ 849.169294][T13502] ? __init_rwsem+0x160/0x160 [ 849.173983][T13502] mmap_read_lock_killable+0x1d/0x60 [ 849.179284][T13502] lock_mm_and_find_vma+0x2a7/0x2e0 [ 849.184499][T13502] exc_page_fault+0x169/0x620 [ 849.189191][T13502] asm_exc_page_fault+0x22/0x30 [ 849.194053][T13502] RIP: 0010:fault_in_readable+0x1c8/0x340 [ 849.199779][T13502] Code: 24 08 4c 8d b0 ff 0f 00 00 48 89 c3 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 70 e8 32 da bf ff 4c 39 f3 74 73 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 849.219396][T13502] RSP: 0018:ffffc9000d03f9e0 EFLAGS: 00050287 [ 849.225474][T13502] RAX: ffffffff81cad01e RBX: 00002000000c6000 RCX: 0000000000080000 [ 849.233454][T13502] RDX: ffffc900057b9000 RSI: 000000000001490c RDI: 000000000001490d [ 849.241440][T13502] RBP: ffffc9000d03fa98 R08: ffffffff81cacfb6 R09: ffffffff8441a0e5 [ 849.249420][T13502] R10: 0000000000000002 R11: ffff88802627bb80 R12: 0000000000001000 [ 849.257399][T13502] R13: dffffc0000000000 R14: 00002000000c7000 R15: 1ffff92001a07f44 [ 849.265471][T13502] ? fault_in_iov_iter_readable+0x45/0x270 [ 849.271297][T13502] ? fault_in_readable+0x156/0x340 [ 849.276415][T13502] ? fault_in_readable+0x1be/0x340 [ 849.281541][T13502] ? fault_in_safe_writeable+0x250/0x250 [ 849.287185][T13502] ? inode_to_bdi+0x65/0xd0 [ 849.291710][T13502] fault_in_iov_iter_readable+0xdb/0x270 [ 849.297368][T13502] generic_perform_write+0x207/0x5e0 [ 849.302678][T13502] ? generic_file_direct_write+0x460/0x460 [ 849.308502][T13502] ? __file_remove_privs+0x640/0x640 [ 849.313798][T13502] ? generic_write_checks+0x15c/0x1c0 [ 849.319185][T13502] ? clear_nonspinnable+0x60/0x60 [ 849.324224][T13502] __generic_file_write_iter+0x176/0x400 [ 849.329873][T13502] generic_file_write_iter+0xab/0x310 [ 849.335260][T13502] vfs_write+0x857/0xbc0 [ 849.339537][T13502] ? file_end_write+0x250/0x250 [ 849.344404][T13502] ? __fget_files+0x28/0x4a0 [ 849.349008][T13502] ? __fget_files+0x435/0x4a0 [ 849.353699][T13502] ? __fdget_pos+0x2ba/0x360 [ 849.358300][T13502] ? ksys_write+0x77/0x2c0 [ 849.362731][T13502] ksys_write+0x19c/0x2c0 [ 849.367071][T13502] ? print_irqtrace_events+0x210/0x210 [ 849.372544][T13502] ? __ia32_sys_read+0x80/0x80 [ 849.377335][T13502] ? syscall_enter_from_user_mode+0x2e/0x230 [ 849.383331][T13502] ? lockdep_hardirqs_on+0x94/0x130 [ 849.388542][T13502] ? syscall_enter_from_user_mode+0x2e/0x230 [ 849.394548][T13502] do_syscall_64+0x3b/0xb0 [ 849.398992][T13502] ? clear_bhb_loop+0x45/0xa0 [ 849.403688][T13502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 849.409609][T13502] RIP: 0033:0x7fc9e5b8d169 [ 849.414057][T13502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.433684][T13502] RSP: 002b:00007fc9e6abf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 849.442111][T13502] RAX: ffffffffffffffda RBX: 00007fc9e5da5fa0 RCX: 00007fc9e5b8d169 [ 849.450089][T13502] RDX: 000000000208e24b RSI: 0000200000000240 RDI: 0000000000000005 [ 849.458069][T13502] RBP: 00007fc9e5c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 849.466047][T13502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.474023][T13502] R13: 0000000000000000 R14: 00007fc9e5da5fa0 R15: 00007ffc9bd580b8 [ 849.482018][T13502] [ 849.550254][T13508] loop7: detected capacity change from 0 to 512 [ 849.574437][T13508] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 849.591114][T13508] EXT4-fs (loop7): 1 truncate cleaned up [ 849.597258][T13508] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 849.612679][T13508] syz.7.2786 (pid 13508) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 849.653004][T12471] EXT4-fs (loop7): unmounting filesystem. [ 849.660760][T13502] kvm: emulating exchange as write [ 858.014853][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 858.021189][ T1277] ieee802154 phy1 wpan1: encryption failed: -22