last executing test programs: 12m51.594563502s ago: executing program 32 (id=1969): r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="7697a81a00f202aee6d30e2af70358009fcb91ede8efc8b83b0fb71a508794e425370d95e82f4b48d91efbe5ffe651974a2f41cbc40f24f1da6785e411e80da40456e6fc4d9d10b5c1f1cf5bcfc00f9e8c16b586649ba618", @ANYRES32=r3, @ANYBLOB="00020800da2c8f80"], 0x20}, 0x1, 0xf000, 0x0, 0x200008c1}, 0x30040) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r5, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8040) accept(r3, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x45, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x1066, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040), &(0x7f0000000280)) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="08003e17063801000000000073797a310022a4"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x24004855) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 12m48.115971646s ago: executing program 33 (id=1976): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmmsg$alg(r0, &(0x7f00000028c0), 0x0, 0x40000) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@netrom, @bcast, @netrom, @remote, @null, @remote, @null, @null]}, 0x0, 0x0) io_uring_setup(0x807f7d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0xf00, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xe2a98880c93ed02, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x400}, 0xd, 0x2, 0x9, 0x0, 0xd, 'syz1\x00', "38d998f600009dc23647762940cbbb5d4cbc57c1013a0630c3a388dfd4ec544c", "26b300dfd788990e79f068efcdd6e1ad8457b4e2c4f155d90caaeda4309e61fb", [{0x5, 0x2, {0x3, 0x4}}, {0x4, 0x8, {0x1, 0x5}}, {0x800, 0x81}, {0x5, 0x4, {0x1, 0x7}}, {0x7ffe, 0x11, {0x1}}, {0x3, 0x9, {0x1, 0x3ff}}, {0x8, 0x6, {0x1, 0x2}}, {0xffff, 0xfff, {0x3, 0x8}}, {0x13, 0x7f, {0x1, 0x10000}}, {0x6984, 0x2, {0x0, 0x3000000}}, {0xe, 0x6, {0x3, 0x2}}, {0x2, 0xf7d, {0x0, 0x2}}, {0x8, 0xc, {0x0, 0x400}}, {0x800, 0x400, {0x3, 0x678}}, {0x5, 0xf0, {0x0, 0xa614}}, {0x7, 0x71, {0x1, 0x1}}, {0x7, 0x1, {0x0, 0x10000}}, {0xfff7, 0x7, {0x2, 0x5}}, {0x3, 0x3, {0x3, 0x2}}, {0x9, 0x2, {0x3, 0x7d7}}, {0x1e, 0x9, {0x0, 0x800}}, {0x8000, 0x6, {0x2, 0x3}}, {0x1ff, 0x3, {0x1, 0x2}}, {0xfffe, 0x3ff, {0x0, 0x83180000}}, {0x8, 0xcb53, {0x0, 0x9}}, {0xf, 0x0, {0x0, 0x3ff}}, {0x4, 0x5, {0x1, 0xe}}, {0x2, 0x0, {0x2, 0x6}}, {0x3ff, 0x0, {0x1, 0x67984d01}}, {0x3ff, 0x3, {0x3, 0x6}}, {0x4, 0x7f, {0x2, 0x8001}}, {0x81, 0x615b, {0x2}}, {0x3, 0x6, {0x1, 0x7}}, {0x8, 0x2, {0x0, 0x101}}, {0x5, 0x9, {0x2, 0x8}}, {0x7, 0x0, {0x2, 0xffffffff}}, {0x7, 0x4, {0x3, 0x8}}, {0x203, 0x22a, {0x2, 0x7}}, {0x6, 0xb04, {0x1, 0x8}}, {0x8800, 0xfff, {0x1, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20}, 0x40) 11m12.126721008s ago: executing program 5 (id=2226): r0 = memfd_secret(0x0) prctl$PR_GET_THP_DISABLE(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e73011951"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000001080)={0x1, 0x0, 0x20, 0x20, 0x0, 0x0}) fcntl$setlease(r0, 0x400, 0x0) fremovexattr(r0, 0x0) 11m10.29668844s ago: executing program 5 (id=2230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000480)={@val={0x0, 0x884c}, @val={0x6, 0x80, 0x7800, 0xc5, 0x40, 0xc}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0}}, 0x42) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x6) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x0) 11m9.038522509s ago: executing program 5 (id=2232): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00"], 0xffdd) 11m2.412172435s ago: executing program 5 (id=2247): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1}, 0x20) 11m2.184761606s ago: executing program 5 (id=2249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) write(r1, &(0x7f0000000000)='W', 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r3) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0xa}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 11m0.11201817s ago: executing program 5 (id=2254): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 10m44.909458726s ago: executing program 34 (id=2254): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 8m28.917727989s ago: executing program 6 (id=2621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e40806"], 0xfdef) 8m27.596037198s ago: executing program 6 (id=2623): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xfffe, [0x200000, 0xffdfffff], 0x1}, 0x10) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000480)=""/254, 0xfe}, 0x53b}], 0x1, 0x40010100, &(0x7f0000000580)) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r2 = accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000080)=0xfffffffffffffeda) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000140)=0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$TCFLSH(r3, 0x400455c8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xffffffff) 8m24.64736345s ago: executing program 6 (id=2641): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 8m23.559449128s ago: executing program 6 (id=2645): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_init1(0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/39, 0x27}, {0x0}], 0x2}, 0x40000002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x29}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8m22.285533717s ago: executing program 6 (id=2650): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000180)) 8m21.384916434s ago: executing program 6 (id=2652): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00"], 0xffdd) 8m4.408457958s ago: executing program 35 (id=2652): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00"], 0xffdd) 5m10.172683412s ago: executing program 3 (id=3047): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setgid(0xee00) r2 = syz_clone(0x2000000, 0x0, 0xfffffe4b, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x10, 0x11, 0x1, @private1, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x75, 0x100, @val=0x80}}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) r4 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$inet(r0, 0x0, 0x4002000) 5m8.99560636s ago: executing program 3 (id=3050): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xc, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x52, r0, 0x4002000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @broadcast, r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x1, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 5m5.365774046s ago: executing program 3 (id=3058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060500000000000000eafffffffefc0500010007000000050005000200000005000400020000001800078005"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32, @ANYBLOB="000010000000000020"], 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x5, 0x0, 0x0, 0x615, 0x3, 0x4, 0x3e, 0xa, '\x00', 0x7, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m4.87630123s ago: executing program 3 (id=3062): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f00000002c0)={[{@debug}, {@debug}, {@abort}, {@nolazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@noinit_itable}]}, 0xfc, 0x57f, &(0x7f0000000cc0)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$GIO_UNIMAP(r1, 0x4b66, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) 5m3.101403703s ago: executing program 3 (id=3068): r0 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x2c, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 5m1.565778274s ago: executing program 3 (id=3074): syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000007600090700000000fcdbdf2507020000", @ANYRES32=0x0, @ANYBLOB="0c000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000100)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) 5m1.286344776s ago: executing program 36 (id=3074): syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000007600090700000000fcdbdf2507020000", @ANYRES32=0x0, @ANYBLOB="0c000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000100)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) 3m22.239555623s ago: executing program 1 (id=3273): syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000007600090700000000fcdbdf2507020000", @ANYRES32=0x0, @ANYBLOB="0c000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x9, 0x0, 0x0) 3m19.37257778s ago: executing program 1 (id=3281): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000200000000000000100000073016800000000ff95"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) write$binfmt_script(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) 3m18.94323486s ago: executing program 1 (id=3284): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3m18.567632132s ago: executing program 1 (id=3287): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 3m17.605504485s ago: executing program 1 (id=3293): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)={'c', ' *:* ', 'rwm\x00'}, 0xa) 3m16.85604774s ago: executing program 1 (id=3297): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x85, 0x4f, 0xbe, 0x10, 0x50d, 0x2102, 0x70d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000600)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x84, 0x1, 'D'}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000240)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) waitid(0x1, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x22000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB="69bf73f92e234554ec87ee5e75fbb975163e06e442e05c723ce6"], 0x81, 0x14f5, &(0x7f0000001580)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) fcntl$getown(0xffffffffffffffff, 0x9) syz_clone3(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 3m16.437214035s ago: executing program 37 (id=3297): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x85, 0x4f, 0xbe, 0x10, 0x50d, 0x2102, 0x70d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000600)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x84, 0x1, 'D'}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000240)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) waitid(0x1, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x22000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB="69bf73f92e234554ec87ee5e75fbb975163e06e442e05c723ce6"], 0x81, 0x14f5, &(0x7f0000001580)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) fcntl$getown(0xffffffffffffffff, 0x9) syz_clone3(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 2m28.675915572s ago: executing program 4 (id=3436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) getpriority(0x2, 0x0) 2m27.189427813s ago: executing program 4 (id=3440): syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000007600090700000000fcdbdf2507020000", @ANYRES32=0x0, @ANYBLOB="0c000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x9, 0x0, 0x0) 2m23.789478638s ago: executing program 4 (id=3449): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1328, 0xffffffff, 0x11a8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x1290, 0x1290, 0x1290, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100002}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xf, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13ad) 2m22.619387557s ago: executing program 4 (id=3454): r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2c8, &(0x7f0000000280)="$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") statx(r0, &(0x7f0000000100)='./bus\x00', 0x1000, 0x7ff, &(0x7f0000000580)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", 0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000700)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) syz_open_dev$vcsa(0x0, 0x1, 0x0) ptrace$pokeuser(0x6, r5, 0x358, 0x800000000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, 0x0) read$FUSE(r1, &(0x7f000000e280)={0x2020}, 0x2020) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r6, 0x545c, &(0x7f0000000180)={0x0, 0x0, 0x10000000, 0x1000000, 0x80, "43e6323cce1954ffdfe6fd5c3a000052a70300"}) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 2m21.416204295s ago: executing program 4 (id=3456): r0 = socket(0x15, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = creat(0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000180)={0x60, 0x17, 0x7, 0x8, 0x37, 0x1, &(0x7f0000000240)="20a1d1edba0dfe35f267e657ff649698522b307e39dde58578341619936741640ac67db3b29c7103af3a4a98597f2f81fba20bb09440c5"}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x43500, 0x4) 2m19.715521668s ago: executing program 4 (id=3461): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) memfd_secret(0x0) 2m18.104755839s ago: executing program 38 (id=3461): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) memfd_secret(0x0) 27.22294398s ago: executing program 2 (id=3827): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 22.608460204s ago: executing program 2 (id=3841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x0, 0x1, [0xe3]}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0x8f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109027d0003010000040904000004010100000a24010400000201021324060500060800000000000000000000000009047a900001020000"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x3}, 0x8) 18.419538835s ago: executing program 2 (id=3850): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000000100000d000000000000000004000000000000000200000d000000000000000000eafffffbffffff00000000000000000000000d0000000000000000010000840000000000000000040008"], &(0x7f00000002c0)=""/43, 0x6e, 0x2b, 0x1, 0x6, 0x0, @void, @value}, 0x28) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810c12, &(0x7f0000000400)=ANY=[], 0x2, 0x1e3, &(0x7f0000000b40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x4800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(r2, 0xaa1f, 0x1a958, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") listxattr(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000063019b00000000009500000000000000423e21eaa034893d57699d7e3e10004d910f6d8e16ce3006b486ecdd290370a3844716eeb5378d0705c68511a89ef3f26db95ff827dc71b523165e55df0ec54c105f91c97295e56516381e5f94e58d1f2f8ff22e29c5e7b64019317f5e555ac3f0dfd5f51c028ac09a02eefe1c561cccda6d4dbe7fffe6a766c2edbf0fb1b9d8732686417253f30bfaaffe187b0d427dc284f08c3aed"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 17.082599014s ago: executing program 2 (id=3856): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$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") chdir(&(0x7f0000004340)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000002940)=ANY=[], 0x73bd) mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 15.502485686s ago: executing program 2 (id=3861): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000001a00)) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)="25d876551bc42244971a816aa8a0c4aadf17eda02370a41a7710ac8cf5aeddb2908ae76310f3dc4e2102d0dff789c8ddfbfa39a4d544fb88e29bfadb83461e499c53bef50d25a57e5da96079d17e166a51c3793970ad2fca18ca3114481c5387078af562573874df737cc81c9d1a186ac946fdbadde75740a146af4d0f76db64c65e617a00e9bdb8eec3c2a59af615aa3cd59b032bf8d7a755f5396f9f1832af8b6c914aabcaf8cfbc1170ea871de2b648f79381296ba90ba06543036662eacdf60fe05174fbd428378c17da00bef650552ada8c09a40ef30f9c6ae2a1e0c0d06fd474db698bb1bf093b7ebb89531e0062f8229660efcce0fc63fe6b5268ccf64aa0f756a91c8e06e768ec6bcfa077cd2503fcc069edd4eebdf0b8e8dbdc3efbae90d70f79edd3ed48f24bc7f7f1570dc6fd312ed17b82a28aa2a9b5905890c384f6f1a343648d0f364a6df49bbaf163b436585f13595c0053548cefc79c360b1c9fa6bfed582ace02c692c740ff38a233d306d8dd134e050921eb1187ab2863712494fb083eb6c0392860222ec8605eebfcf9765f3c6cb3b1c196e412bc13b595e0923a22a325c121df5806cac6f3037daa3a2042bdb4df77a432ab11b6469f2764327691137d2f27c9cee48fa2ca530a9eea59c1ba2038ad50ebb824e767db5640baf875616968950b4b8de4db6baa946c96a78fed4705d23df43f537891b85efd0172f9b702a8d69d4ca1472c55b704a2b788a75a02081abc4a1f7e84e6a36b2444f841ec04273500e4067d51c8fa01c94d14d031339388c52062f1f229ee129d67c78ad5567938a0b3eb3674904ccdccc2dee04886efc95b37ca8aea97163c2a8c7323359ef41bd5be34908c4715220a40ca309172a1dfaf5287751eb2c82c1a3717cbba626f07da00e39b5088245eabc86a3f04c7995c3404e3694c11fdb2aaf1079b05bbca5d113a6863292665790f1a02e8526e3e8c52f4a1231d4dfa8d730c9258b69c285c3fc0d0c52a200fe6241e0f5ee9531f75d716dd5b6a0790b26c19eb437e720ffc70f585ae3a92a3b1f143e5f14d09be5ece7beaa5178af61625b7427287bd031742287b5d352edaaff17f2bdea2c2a20d19a0b20332fa4cc7e4f32b837c82399531964ade75d53bce46b14d9d50df13c3a0e285e73d2138ce75a5b69f81f13cce0781a9b610f28ce73433c7b657b652dc370b0654036bdaedc4236cfb6e4e6d57b5c6076b02b8bd1a39ebf561f8235be5d3bd9a10ce88f5a5fa19bab7037fba932b774979cd2b78c65d4908924e5cec12b190913b2b130c1b4f4e0bcecd14fde3c928a09e5ab0c6340b090561f8050f1ee9010205993543051fcf085a132071041f1a34a05bbf81ce944beaa6a7bca64a4851477bee8e92337a1f274e14aa8d47d5f944a6bcc9f28cace37828b03224d092550841c2f02784432c6689160f2a9eb7d545b0981a07a15146faff266735a84aee3a32a3d5563ee268103e5cd1ea6bdcfe2f54ce8605ebb23eb5e5a4b5308980e9bb3246512b7c883e26af06b8741f0f2dc66052e7b5a5651c34a4e687c37ac246d42148c85089e8a72c7eb8ff8cf028d85333aaba6f7da44dcac6fd77692aa2d5458c51a624e15e322ce26520595cc9d93bebd8c889bff30ee9eceb960780b48e683ca2bb3d162d24d3dde8c7958cc69dc606cc78e1d9de2e2f5454bcdd591b94b38b3571ecf1c17f2d3affec21e4dd1e918f4caf584d46eaff99cdb4002057a690525324ec9c05ab16a40816c3804a2bec970413ec3efce45e2c15ae06c24cb96291b8ba7b9d7eb37f7de47a8f350bfbb831672869379f4615b8f7549c7d9258f862fe93a87aaee49eb19b4fc375681ab36453b2bb7a5df2c6fa927b46c182ba5a9a5b5e3871049d813358b3b1a17f0598f6c4ea021dc06e2f74b8c417439af9d2deea48feda5ca78ebb62ea9e06a33ea30950227842091386cf415b0da690dadb852df6825371d0d14748360d9ac0edb3bb618d746b92accf7dc179e4f93e4ec1790c1097ff64aaad6add27650e015e44782f2ea2724af4db2a933ba4cc98ccf1c971a766a5fc4a299ea3c21492202300b543f28b25dcb6e0265e5bd2f4a2772e60174154526600a2031988482c97a01f5d7eccea49e50d3e6400f5287511dc6618ab112e3b8d08b32c401392d0eaec58bd417eee86a784147883f39979360e005267aa2d8906a7a028d96859bb97c6f954217f613cc6988a456d41990bc6af96a2f2e5e635998440dba41fc31cbbc76016634eebe4557cc531657d8444f687475ae6ec6e464a26f74683e363ce18dfa96bf8f2ea502157a6b5229792e8f4dd7046dea7605aaa1a52e2a02bc7e9a5c02faa0b32e1349126b576fc79c08e847c20fa0c8c09fdaab95cd6353698f32605af1360c2b6fc1b984e94f1a0a22855d5808c4080b88b1a7773932a202bcca4ebff9b84e0240af3c71026160cecb76766af515b68d4ea5709994646b7b79bcedd620729a100476050ec8d9a2108fdbaffddc219bce2176eb9eb272c9582ee12d7e332908cea0d6abc5c08e81d6dad649e778d2f2d6faf05d4be1365a4d87697c89d4d01bff8737306416eddda88b06128194c790e1c67e8dc3d925c31c2e436b3479ab5de24e21af8b05689aae10fd61e5818d1deec6a97d4faaaacf5b2903faeb9af824f240d8c5fdfee9a1f60f5261142a8ffa06d9834bf084105e50cfa03a842c3f99921bd4c7014e45ee7ed4aa4ff5a8b0843a4e6d113590e2aae1a3f941c72e4e40faac96bd92d149a4c7a33ecf8e3995c5f9d12a3aa53b17f90a74567f8dfd1afb9c2c29ea046b5ef37c7bca780702d92063496dac50e595d23a7ada51b2110dfd0d3669626865abf2ab0f6ea8f566f18c0a065f10ebbcab5002f095bfe770cf1bb2e2c0c49e37e63d0621abb04a154d9f732e657935a00cafdb08dd16453bb80bb534c66e6fb1d6f37997aeec629b58f55125e74150a5af625061f51818598186457017527413e8885a6d3c19dcbf3abe41ab1eace24f1691b7accfc2edb9a96bf6593eeac4c7e9d456fe99e4001205ab0d82ab42d88b957f3daf7bc2066642860dd3331be0575839ef1d3aa994a35a9dfcfbb428d4cb8032204a8110416bed9f428f9639744bf8baef211c6db7758d15255f4f06320b0f7fd1a93139664dc8c46b0be6a495f764811799b23d83ebd780f136ddcf183e6e0b6216c7dd62a7c60743bc6bc903b0bd31eb12b29c5152e9de9cd7d1ff2fcbb91571ed6fb99a2b731cebdbcfd40a2ac6b572985dfdc8bb88ca94649a380dd0e9f8f9c0605bb9f2535fe0126ad67ba700db7b417f380b6af2354a5aa55ff2c41d427d2675751cd52568f9d72ae61a2a47bff22c01f2e439e54fa7bc6ba604e6dd40b73b9aba4d05c8096f1846d47d60d0ed6c9df6a73bb0bc7066f6b68adc0b12275bc06b23c8d02e052244c31f59b6593dfa33c1fd56cdf7244c8c60f6e5162a745832886f134ff14cdc1eab3f3e3d563e532dac66a1ce79cc65fc0ce5d41f0b43e3f32c0808afaa8f560e253d051bad058f341a4553e637cf9dfe47e728b645c550c7c43659c37579acd60def0d5e2cecd01c56cd86233c0045b0cd9169f65baee5d45479baaf93e47b339574d0797080b8b0acfde33fe16cee1606651f2223d129d907dbeae3a714f6be5eae935cc45664b448776e8322c6994dcebbcc11894b4645a331491967ff7ba3bd1db5aec6c851dbcf7adc0e513f6f58f81692b57a5ab087ebf973a345a8327880f9edfb13e36252fbd4cf9aa53b37c4818c847a00abe649a44bd2e3cc61b52d55163ca2fe9bcf0aacddbf11c58f2b098613b50928a99fff4bda56d8543ca463ded51addae74d1944c652e5e0e32e7eacb8d8e44df1ddb12e08a204b3a702594d6c1bdcdf362427de72c1a0e4aa8120150fdc89a9aeaa4faf610bb967c45a2c10a384e70e034e28b6168d9a4517275510ed2aa9d905d27612c983963b28e8febea41dd62b14adff2421bff47b4c943ba39c77fdff95239f9ea133babf45c78c4baac6c73a33b6aec068bc7c264a85bc48d66ed0168367d3c91bb1f249a76730516d27c8943646df8e1f48432e7f4c75da2ece97ec438b5c18569a65f2b3d0b2f2d0241697afce30e85b4a4fc7dea0ccca08ecac7e40db3c2bea5d712ea855d92ab0d2395458bfd6571bfb6c52906bc5a8d47ea59f56bb2448fb9a2d47acf6655ff903e0cc91ad591f230143c280bf90009d3bbf81e55b06c4e996af6576d4b3ecf38ee6f324bbbd1ca1c4adccba166dc1fb2dccfe55f22ada1a00c38137cecd510baa411c8852e76f85ceeb2cab8c203c7ff4e68e548776afa84a8dae13d8110904d0ff0cbf37ad3c7ce66b330287a9cc1be60e8b6953dfbfa4abb99c71ad768f73ee32ce57896544f3e09637b924ab0abd362b24904033f22605f4d3c117e59a38ac519ee3842c40a17de5b24d027409680d8c8282948b272ac94281763285cd2735669ff7ce952bf789997cc195311943c24654a94c5eaea60984c1164a86b7b43db9f2e58c1fc4a1d38f9d983d32c5e671eacd09bd19096cac91ec494ba797832f6a122473781bf6bc80413ea186e6c9255b85779a2b18b65d359e45a7489f9f7dedfdb70a8ac410e2400318f21dccb43b2ff1b2885501dad00174e70decbf25c55cb5bb469cf7b50b1c1c73e8672e8d5b3dccb68847a415f3532ff6f1c90d8e2ccfcddc6dcb3c028d2a71dd9285cae2e91ef1ea7165b6de819a12355bd415e7f7c644af913152804590631d92c2856cfd97e179a738c64fad475a91e5354e8ea5442f72b9f7497fc14a0bfb1628d2c4e28556715a97f6c438b90d9a4cc018273e39a02f81b9ace61e458e15b2d622442534fcc3966d365eb248de434de0dbdf0bfd7a0b570dc76a2230ce46d2925d2585533d5ab9553a75931c3705c88fa0ecaf062113e84b3952b0da1138bf25d5661a1bae9d818ccfb55bae3411f193560be0bc0a53a88286630625143f1272518c4cfc2ed8f43675218110e958f21dce9eee9087b088e071fd472291dfadb5c13dcb65b371df8e9892e353c912d84761326d28cf7910a76aa659b5d4ef86f267484dadb429e331b5d3b1f3a146917e7858c8dc42aca78d077b8c4d5529a21dcf42b4f61b37d96b4b5244c6c732eae3ce30ad1a20336017be953bd9f3e6b122b543753498b6e969a0940d705ee40d202ca3c4ee448d1e9614dd2f6bbb944319dcff36c9a3f40f415d58a0bab73b8b414a1077f38c8528da6016f5e90103ee589d110b308dba3e4934cd5ff6f1e62b6dcb09762437c286faf7b75a466a3a79d2f7ae793189b59f10760294315043be8c4d0accba137d33ac83584fd76fc9420ad71951346656b2562990e8c73b5ec5c9278e463fe1baf7b8d749b11fa9278bb7034089bb9945ca924c1d8f336cdd864438f0a8dd8a27eafb84541224916a99bf11868df29f69a5295dc8dbf7fa7b372691e5364a65bfb4a7419714b40b94635d33b488b98fcb02a967d77c003462156143959f6ab261d4d121576f613aaf9919712a6e79d0a87b052cb1e96ad0e4b0bfb0e11243100682266b2dbf7e4ef069d70215c2b6d8b5f3d475957842a016695901d4c57a79342662c2a3e903d849fe11ae47a8586c33beef2a0d5e4f7be7383de742563aa247b188c9f5176af2070ffe32ad8ecd9591597dbe2f7067e1b6fa92f936e71a610a6e4cf694482247031ae0d1733fc87daaea6a0b35a12d1abda91e", 0xff0}, {&(0x7f0000000440)="83999b0f322e6b66e82471b62ba4b346aacf829004e4fcf8a06c2b035caa530b577a0bb3b9b1df02463583feefcbf143974548ec2c8c63edef360cee88b2dde1642359f529c8c3a8fd0dfeb132fc21440f6a18ab73a6aef90ee0e117d69f0efb53dc91f06c6404ab387413f7fb4bde523df3e04fe6ab8566bd5a56d71808fe8fc76cf43737f91d2160c4df6fe22fcaf204628043fa4f02e3cd6b4334389cb5cbe1b153a071b5066ab136", 0xaa}], 0x2}}, {{&(0x7f0000001580)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000016c0)=[{&(0x7f00000015c0)}], 0x1, &(0x7f0000001700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa09}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001800)}, {&(0x7f0000001880)="b758cb277c49edc812c0ee7dfc932b2a0e0dfff4b95f5a0c7b2da9ac38a13c1b94d59a06f4446810f5cc48d7a0e7a09c7e769e1b8678395ccc5fa68914da3fd1ea7529274e0e612da14a881915403086c79557c75b007520439b8a22a9f3d5da33e0e9d9a4058e8d1ad40ef841d085ecb756f4c16de54b46b8269a6120ea4ef9499163fcd12b728e304f0a98c38b555edb4500c66fcdc370e370e9b980a42dc972b2f94b2a9314c2d5f23536c8eaa984a5078a9e774d89911cf2ec400823d3ba79493e2a47b1f273144965933e0b35ced74e7705bb206f5e0ed8a980", 0xdc}], 0x2, &(0x7f0000001a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @rand_addr=0x2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x68, 0x0, 0x7, {[@rr={0x7, 0x7, 0x95, [@private=0xa010101]}, @timestamp_addr={0x44, 0x2c, 0xa7, 0x1, 0x3, [{@loopback, 0x10001}, {@rand_addr=0x64010100, 0xf3}, {@broadcast, 0xe}, {@broadcast, 0x3}, {@multicast1, 0x3}]}, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}, @generic={0x7, 0xe, "7b8c350af0bb1296562e8410"}]}}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c80)="2b6a22164ae4308cfd0c8055d31ef8a0a1bd23df14a4a899ec7520ea9f8ac2c0c74b340cec6beee50cc76084036795eb1595706c873c16a63487", 0x3a}], 0x1, &(0x7f0000001d40)=[@ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x3e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local]}, @timestamp_prespec={0x44, 0x4, 0xf7, 0x3, 0x4}, @timestamp_addr={0x44, 0x14, 0x9b, 0x1, 0x3, [{@remote, 0x1}, {@multicast1, 0x4}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x50}}, {{&(0x7f0000001e00)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001fc0), 0x0, &(0x7f0000002000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x90}}], 0x5, 0x240048c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000002240)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, @rc={0x1f, @none, 0x2}, @sco={0x1f, @none}, 0x5, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002200)='caif0\x00', 0x3, 0x401, 0x2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='rcu_utilization\x00', r3, 0x0, 0x1}, 0x18) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000340)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002340)={'wlan0\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lblc\x00', 0x4, 0x8, 0x77}, {@local, 0x4e21, 0x2, 0x400000cd, 0x12d5f, 0x3}}, 0x44) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) 14.120057846s ago: executing program 2 (id=3865): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) 12.700505037s ago: executing program 39 (id=3865): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) 12.692027747s ago: executing program 0 (id=3871): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x1a0, 0x10, 0x1, 0x100000, 0x25dfdbff, {{@in6=@remote, @in6=@loopback}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, {}, {0x0, 0x24000000}, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2a, 0x400000}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x42, 0x300, 0x0, 0x0, {0x80, 0x2}}, 0x14}}, 0x4000010) fsopen(&(0x7f0000000080)='pipefs\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001d40)={{0x12, 0x1, 0x0, 0x43, 0xed, 0xb9, 0x10, 0x1235, 0x10, 0xa738, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x18, 0xad, 0x63}}]}}]}}, 0x0) 12.413508339s ago: executing program 9 (id=3873): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = io_uring_setup(0x38dc, &(0x7f0000000600)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000000c0), 0x4f) 9.960138137s ago: executing program 9 (id=3877): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file6\x00', 0x840, &(0x7f0000000000), 0x1, 0x4d3, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) 9.507477511s ago: executing program 8 (id=3881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000240)={0xb3589e53b4ecd357, 0x0, &(0x7f0000370000/0x2000)=nil}) 8.432348358s ago: executing program 9 (id=3883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2010000, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c726f6469722c696f636861727365743d63703934392c73686f72746e616d653d77696e39352c74696d655f6f66667365743d3078303030303030303030303030303537652c756e695f786c6174653d302c7379735f696d6d757461626c652c756e695f786c6174653d312c6e6f6e756d7461696c3d302c636f6465706167653d313235312c73686f72746e616d653d77696e39350010000072746e616d6d3d77696e39352c0051f13ec7b08d013ced5842c442822583"], 0x5, 0x32a, &(0x7f0000000200)="$eJzs3U1oI2UYB/AnO2lTC2t6EBY9RW+ClG3Fg55alhUWe/CD4NfF4Hb9aOJCg4F6aDYn8ah4EfTkbQ963LN4EPHmwasryKp4cW8LuziSzDSZNKnbiml1+f0O5eF533/mnenQTKF989pabF2ci0s3b96IhYVSlNfOrcWtUizFqUgicyUAgHvJrTSNP9LM3Wd/tHgcawIAZmvw/v/G6VGjcpKrAQCOwyF//392avfyzJYFAMzQxPv/I2PD8+Ozy8O/CQAA/r9eePmVZ9Y3Ip6v1RYiWu936p16PDUaX78Ub0UzNuNsVONORPagkD0t9L8+fWHj/Nla3y9LUe8nOvWIVrdTz54U1pNBvhIrUY2lPJ8O80k/vzLI1yLiSndw/GiVOvW5WMyP/+NibMZqVOOBiXzEhY3zq7X8BeqtvXw3ohcLeyfRX/9yVOP71+NyNONi9LOj9e+u1Grn0o2xfOdqZTAPAAAAAAAAAAAAAAAAAAAAAABmYbk2tDTc/yYd7d+zvDxlfLC/T5bP9wfqZfsDpZW93Xk+SPbvDzS+P0+nXo5TJ3vqAAAAAAAAAAAAAAAAAAAA8J/R3pmPRrO5ud3eeW+rWHQLnXe+/eLr+2L/nLeTUSfK2cuNzcl7UUglMYynw3iajM3JiyRiNPnqteGKi3Mqw7OYiPeLysRQKV9To9k8/fDPn05L/TnqJDFxWcaLUn78wlDr/qz1N6mDi9W7zLmepulB8d1PJlNRiihPfOP+jeKbG28++Hj7zBODzlf5pg+PPlZ98frHn/+21WhGfmmazfnt9p30Hx8rKdw/pfw6l6bcCdOL3qjT227vNJIffn/poQ+/2zc5mX7/pMXOuwcf68v9nfms6C/zMGc6N+Xmn168ent49x79Yp75bK1xbfenXw+bKvyQsFEHAAAAAAAAAAAAAAAAAAAci8L/ih/Bk8/NbkUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcPxGn/9fKHoTncMUt7sxOVTZ3G6f9DkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBfAQAA//9uCXiL") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0xfff7fffd, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3ffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298900000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24490a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1fcff7a1ef3282837771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969cc1595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d400000000000004011c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0890700eef552fcde2981f48c482bde8a168c3f5db2eaa6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000100000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed90868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c83ae45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422636f949e2ab8f162d7e3f855e378f4a1f40bc96fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df775e411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8605000000000000003fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373eaea36546791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf00000000f3ffffffffffff12a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca0000000000000000000090044ed83fec890f693d54e1c0adf7b3fe6cfcf3b9873cecd116826f1be38a8d61d866516197c199d5a3721a378de95d5c25b3887a271db57518e630dd132a518a3b2490b3a9ac177d286502aa73eb67275de3523ce65e50b67a3820faaab5e7b22850c8265b44085a0d2d3c734712591007e15d7f0b2cd7eb796e8f4318d2eb8343c5176056000000000000000000000007444a9a2b71016c9cf336078fa3fcfbdf4dcfc2f5acc09ad13dda373957ab7ed731565049f1d18b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) listen(r7, 0x0) connect$unix(r6, 0x0, 0x0) 8.328425419s ago: executing program 8 (id=3884): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.405887173s ago: executing program 9 (id=3887): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8201a0016000100010302000000044f"], 0x1f) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) 6.152125835s ago: executing program 0 (id=3889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004000, 0x0, 0x0) 6.146716045s ago: executing program 9 (id=3890): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2810000, &(0x7f0000000380), 0x0, 0x576, &(0x7f0000000e80)="$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") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000100)='./file1\x00', 0xd931d3864d39dcca) 5.903999757s ago: executing program 0 (id=3892): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map, 0x5, 0x1, 0xd76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x6) syz_clone(0xc000000, &(0x7f0000000200)="48534bf23059f9eb9beb274051dac98d21b96d8fa1a83ff77acdb18b7bbfb3802836c03f", 0x24, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000500)="13ef99f6ebaf376bd48bbff903c128f83e79e70847a5fc9048b9e7726ea8ae3e8bfb965e4c482aa1479f9e9b5f83d7ad29625a10d37e49c57e52535d83c109cf440c0e4f1a0c8f386c50c448a4b3f03a2213331551ef9dad99f03053368295c3fe2a5663e54ea7c1e6288f70dcc732c0bd69c3dd59a4ae0b2d4a27a9d94b426a8b78aab02848e3dfa09a600cbe0ac188e30c180f28fdbd98ce3081ac6aacce6289fa80d0c075ba18b0f681765b13c41efd8efd6f98") 4.772319165s ago: executing program 0 (id=3893): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') write$input_event(r0, 0x0, 0x0) 4.769054955s ago: executing program 9 (id=3894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x404e081}, 0x8000) r1 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1801000000000a0000000000f300000085000000a200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=""/143, &(0x7f0000000100)=""/63, &(0x7f0000000180)=""/39, 0x1}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10122, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10022, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x1, 0x6a4, &(0x7f0000000cc0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f00000018c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) mmap(&(0x7f0000941000/0x1000)=nil, 0x1000, 0x4, 0x10, r7, 0xffffc000) fdatasync(r7) 4.713033046s ago: executing program 7 (id=3895): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3.361952265s ago: executing program 7 (id=3896): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) 2.67208998s ago: executing program 0 (id=3897): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x60c40) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@test_dummy_encryption}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x460, &(0x7f00000008c0)="$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") r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000300)=""/104, 0x68) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setreuid(0xee01, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r3, &(0x7f0000000080)="04", 0x1, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f00000000c0)=""/182, 0xb6, 0x12100, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ee", 0x1}], 0x1, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) mount$bpf(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x810, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x8}}]}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x8011) 2.601763571s ago: executing program 7 (id=3898): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000000100000d000000000000000004000000000000000200000d000000000000000000eafffffbffffff00000000000000000000000d0000000000000000010000840000000000000000040008"], &(0x7f00000002c0)=""/43, 0x6e, 0x2b, 0x1, 0x6, 0x0, @void, @value}, 0x28) r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810c12, &(0x7f0000000400)=ANY=[], 0x2, 0x1e3, &(0x7f0000000b40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x4800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(r1, 0xaa1f, 0x1a958, 0x3) 2.452515662s ago: executing program 8 (id=3899): unshare(0x22020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 1.635986088s ago: executing program 8 (id=3900): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[], 0x1, 0x1f4, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r0, 0x1000) 1.533347259s ago: executing program 7 (id=3901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001400)='./file0\x00', 0x421e, &(0x7f0000000f00)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRESHEX, @ANYRES8], 0x6, 0x340, &(0x7f0000000900)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r1, 0x1, 0x1) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 1.34479605s ago: executing program 0 (id=3902): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000006940)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@nombcache}, {@quota}, {@nombcache}, {@abort}, {@errors_remount}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) utime(&(0x7f0000006a80)='./file1\x00', 0x0) timer_create(0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 1.31274724s ago: executing program 8 (id=3903): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map, 0x5, 0x1, 0xd76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x6) syz_clone(0xc000000, &(0x7f0000000200)="48534bf23059f9eb9beb274051dac98d21b96d8fa1a83ff77acdb18b7bbfb3802836c03f", 0x24, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000500)="13ef99f6ebaf376bd48bbff903c128f83e79e70847a5fc9048b9e7726ea8ae3e8bfb965e4c482aa1479f9e9b5f83d7ad29625a10d37e49c57e52535d83c109cf440c0e4f1a0c8f386c50c448a4b3f03a2213331551ef9dad99f03053368295c3fe2a5663e54ea7c1e6288f70dcc732c0bd69c3dd59a4ae0b2d4a27a9d94b426a8b78aab02848e3dfa09a600cbe0ac188e30c180f28fdbd98ce3081ac6aacce6289fa80d0c075ba18b0f681765b13c41efd8efd6f98") 1.31204085s ago: executing program 7 (id=3904): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) unshare(0x400) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001980), 0x0, 0x12140, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0x4e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x3, 0x0) vmsplice(r1, &(0x7f0000000680)=[{&(0x7f0000000000)='*', 0x1}], 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x891d, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x17, 0x0, 0x1) 1.098735442s ago: executing program 8 (id=3905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4}}}]}, 0x38}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0xffe0, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x3f}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 7 (id=3906): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) kernel console output (not intermixed with test programs): 4: unknown main item tag 0x0 [ 1404.619188][T10938] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1404.628391][T10938] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1404.636396][T10938] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1404.644357][T10938] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1404.654095][T10938] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1404.661909][T10938] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1404.670733][T10938] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1404.679021][T10938] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1404.686949][T10938] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1404.694760][T10938] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1404.759274][T10938] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 1404.972402][T10938] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1405.030615][T10938] usb 3-1: USB disconnect, device number 30 [ 1405.071717][T12436] Bluetooth: hci2: command 0x0409 tx timeout [ 1405.793934][T15977] siw: device registration error -23 [ 1407.122452][T15974] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3083'. [ 1407.152660][T12436] Bluetooth: hci2: command 0x041b tx timeout [ 1407.263884][ T4765] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.297176][T15957] wlan0 speed is unknown, defaulting to 1000 [ 1407.418133][T15987] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3085'. [ 1407.454175][ T4765] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.868160][ T4357] Bluetooth: hci4: Frame reassembly failed (-84) [ 1409.238481][T10785] Bluetooth: hci2: command 0x040f tx timeout [ 1409.264525][T15957] chnl_net:caif_netlink_parms(): no params data found [ 1409.707173][T15957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.727066][T15957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.816235][T15957] device bridge_slave_0 entered promiscuous mode [ 1409.848886][T15957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.858057][T15957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.887917][T15957] device bridge_slave_1 entered promiscuous mode [ 1410.237071][T16037] netlink: 'syz.2.3092': attribute type 32 has an invalid length. [ 1410.296617][T15957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.395598][T15957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.912308][T12436] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1410.919039][T10785] Bluetooth: hci4: command 0x1003 tx timeout [ 1411.015976][T15957] team0: Port device team_slave_0 added [ 1411.078246][T15957] team0: Port device team_slave_1 added [ 1411.501644][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 1413.281208][T16072] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3099'. [ 1413.994904][T16052] device syzkaller0 entered promiscuous mode [ 1415.245560][T16105] netlink: 'syz.8.3104': attribute type 32 has an invalid length. [ 1415.257922][T16109] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3105'. [ 1418.516932][T15957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.524017][T15957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.550420][T15957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.565423][T16116] netlink: 'syz.7.3105': attribute type 8 has an invalid length. [ 1418.714579][ T4765] device hsr_slave_0 left promiscuous mode [ 1418.733122][ T4765] device hsr_slave_1 left promiscuous mode [ 1418.750203][ T4765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1418.758622][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1418.777270][ T4765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1418.793945][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.812663][ T4765] device bridge_slave_1 left promiscuous mode [ 1418.818954][ T4765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.837407][ T4765] device bridge_slave_0 left promiscuous mode [ 1418.844154][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.917366][ T4765] device veth1_macvtap left promiscuous mode [ 1419.140602][ T4765] device veth0_macvtap left promiscuous mode [ 1419.162626][ T4765] device veth1_vlan left promiscuous mode [ 1419.184794][ T4765] device veth0_vlan left promiscuous mode [ 1419.192330][T16136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3111'. [ 1421.926660][T16156] netlink: 'syz.7.3116': attribute type 32 has an invalid length. [ 1422.196409][T16162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3118'. [ 1422.415794][ T4765] team0 (unregistering): Port device team_slave_1 removed [ 1422.673215][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.684190][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.777567][ T4765] team0 (unregistering): Port device team_slave_0 removed [ 1423.096843][ T4765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1423.112533][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1423.127943][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1423.199861][ T4765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1423.347320][T16158] ceph: No mds server is up or the cluster is laggy [ 1423.425627][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1423.431993][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1424.136192][ T4765] bond0 (unregistering): Released all slaves [ 1424.348371][T15957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.361003][T15957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.396861][T15957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.502347][T16165] netlink: 'syz.1.3118': attribute type 8 has an invalid length. [ 1424.667920][T16184] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3122'. [ 1425.226141][ T4269] Bluetooth: hci2: command 0x0405 tx timeout [ 1425.358996][T15957] device hsr_slave_0 entered promiscuous mode [ 1425.457201][T15957] device hsr_slave_1 entered promiscuous mode [ 1425.523681][T16189] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3124'. [ 1427.228915][T16216] device syzkaller0 entered promiscuous mode [ 1427.777477][T16232] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3134'. [ 1428.558592][T16234] Cannot find add_set index 0 as target [ 1430.896815][T15957] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1430.964654][T15957] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1431.012574][T15957] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1431.058742][T15957] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1431.204543][T16254] loop8: detected capacity change from 0 to 128 [ 1431.212483][T16254] EXT4-fs: Ignoring removed nobh option [ 1431.225723][T16254] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1431.257784][T16254] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1431.527725][T15957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1431.574520][T14180] EXT4-fs (loop8): unmounting filesystem. [ 1431.639984][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1431.658582][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1432.221399][T15957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.256785][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1432.280079][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1432.522395][ T9120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.529553][ T9120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1432.575631][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1432.653577][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1432.674624][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1432.706901][ T9120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.714134][ T9120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1432.783071][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1432.830486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1432.878698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1432.950173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1433.018924][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1433.066932][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1433.121937][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1433.131216][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1433.139854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1433.232013][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1433.272214][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1433.613139][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3146'. [ 1434.943673][T16303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3149'. [ 1435.081622][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1435.099370][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1435.146825][T15957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.198722][T16331] netlink: 'syz.8.3155': attribute type 1 has an invalid length. [ 1436.243201][T16331] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3155'. [ 1437.191663][T16335] netlink: 'syz.7.3153': attribute type 32 has an invalid length. [ 1437.402092][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3156'. [ 1438.671952][ T128] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 1438.883648][ T128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.915151][ T128] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1438.947513][ T128] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1439.015543][ T128] usb 2-1: string descriptor 0 read error: -22 [ 1439.033025][ T128] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1439.051512][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.110264][ T128] usb 2-1: 0:2 : does not exist [ 1439.116567][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1439.127460][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1439.487733][T16359] loop8: detected capacity change from 0 to 2048 [ 1439.658310][T16359] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1440.796202][ T5078] usb 2-1: USB disconnect, device number 37 [ 1440.798582][T15957] device veth0_vlan entered promiscuous mode [ 1440.877205][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1441.016883][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1441.045828][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1441.061873][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1441.085737][T15957] device veth1_vlan entered promiscuous mode [ 1441.385382][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1441.432852][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1441.477215][T15957] device veth0_macvtap entered promiscuous mode [ 1441.508259][T15957] device veth1_macvtap entered promiscuous mode [ 1441.618606][T16375] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3162'. [ 1441.685602][T15957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.736994][T15957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.781807][T15957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.812806][T15957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.921369][T15957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.946418][T16380] siw: device registration error -23 [ 1441.991898][T15957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.057213][T15957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.145587][T15957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.221707][T15957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.310750][T15957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.385514][T15957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1442.438729][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1442.468390][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1442.490335][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1442.542542][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1442.629557][T15957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.668972][T15957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.700094][T15957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.896077][T15957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.115632][T15957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.128663][T15957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.166407][T15957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.211573][T15957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.231680][T15957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.252297][T15957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.343060][T15957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1443.371794][T14521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1443.404480][T14521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1443.486549][T15957] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.531514][T15957] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.581557][T15957] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.601155][T15957] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.992795][T16395] netlink: 'syz.1.3166': attribute type 32 has an invalid length. [ 1444.480734][T16396] loop2: detected capacity change from 0 to 128 [ 1444.510152][T16396] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1444.639595][T16396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1444.693347][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.741695][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.775341][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1444.852876][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.898574][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.952283][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1445.071814][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 1445.263709][T16404] loop1: detected capacity change from 0 to 512 [ 1445.903197][T16404] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.3168: iget: bad extended attribute block 1 [ 1445.916474][T16404] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3168: couldn't read orphan inode 15 (err -117) [ 1445.928814][T16404] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1446.222521][T15128] EXT4-fs (loop1): unmounting filesystem. [ 1446.594560][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3075'. [ 1447.414774][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3169'. [ 1448.071741][ T4303] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 1448.071787][ T26] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 1448.290800][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.364590][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1448.414404][ T26] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1448.433529][ T4303] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.444890][T16424] loop1: detected capacity change from 0 to 512 [ 1448.461675][ T4303] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1448.491387][ T4303] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1448.506612][T16424] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3170: bg 0: block 35: padding at end of block bitmap is not set [ 1448.541916][T16424] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1448.561627][T16424] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3170: invalid indirect mapped block 4294967295 (level 1) [ 1448.577838][T16424] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3170: invalid indirect mapped block 4294967295 (level 2) [ 1448.604594][T16424] EXT4-fs (loop1): 1 truncate cleaned up [ 1448.610372][T16424] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1448.620376][ T4303] usb 10-1: string descriptor 0 read error: -22 [ 1448.671658][ T4303] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1448.704929][ T4303] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.742148][ T4303] usb 10-1: cannot find UAC_HEADER [ 1448.801285][ T4303] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 1448.883595][T16243] udevd[16243]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1448.922501][T15128] EXT4-fs (loop1): unmounting filesystem. [ 1449.135788][ T26] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1449.147985][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.172695][ T26] usb 3-1: can't set config #1, error -71 [ 1449.180359][ T26] usb 3-1: USB disconnect, device number 31 [ 1450.117709][ T26] usb 10-1: USB disconnect, device number 2 [ 1450.357263][T16444] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3175'. [ 1450.667100][T16445] wlan0 speed is unknown, defaulting to 1000 [ 1450.829878][T16447] loop8: detected capacity change from 0 to 164 [ 1450.912817][T16449] siw: device registration error -23 [ 1451.312211][T16447] Unable to read rock-ridge attributes [ 1451.455340][T16458] netlink: 'syz.2.3177': attribute type 32 has an invalid length. [ 1452.004878][T16448] Unable to read rock-ridge attributes [ 1459.183272][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3185'. [ 1460.143259][ T6913] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 1461.948130][T16513] Bluetooth: MGMT ver 1.22 [ 1462.141972][T16515] netlink: 'syz.8.3189': attribute type 32 has an invalid length. [ 1462.568161][T16520] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3191'. [ 1462.682666][T16523] loop9: detected capacity change from 0 to 764 [ 1462.764464][T16523] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1462.857514][T16527] siw: device registration error -23 [ 1463.394947][T16528] wlan0 speed is unknown, defaulting to 1000 [ 1463.820645][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3196'. [ 1464.831532][ T126] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 1465.044366][ T126] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.058229][T16549] loop1: detected capacity change from 0 to 2048 [ 1465.232467][T16549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1465.242669][ T126] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1465.252062][ T126] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1465.306825][ T27] audit: type=1800 audit(1741593136.657:304): pid=16549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3198" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1465.513090][T16529] wlan0 speed is unknown, defaulting to 1000 [ 1465.655321][T15128] EXT4-fs (loop1): unmounting filesystem. [ 1465.923181][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3200'. [ 1466.211641][ T6913] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 1466.397077][ T6913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.433115][ T6913] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1466.594218][ T6913] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1466.687569][ T126] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1466.702031][ T6913] usb 3-1: string descriptor 0 read error: -22 [ 1466.725434][ T126] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.766248][ T6913] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1466.812286][ T126] usb 10-1: can't set config #1, error -71 [ 1466.839004][ T126] usb 10-1: USB disconnect, device number 4 [ 1466.878800][ T6913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.326752][ T6913] usb 3-1: 0:2 : does not exist [ 1467.913237][T16584] netlink: 'syz.9.3204': attribute type 32 has an invalid length. [ 1468.604196][T16588] loop8: detected capacity change from 0 to 16 [ 1468.695246][ T4359] usb 3-1: USB disconnect, device number 32 [ 1468.764051][T16588] erofs: (device loop8): mounted with root inode @ nid 36. [ 1468.875146][T16598] loop2: detected capacity change from 0 to 16 [ 1468.892282][ T27] audit: type=1326 audit(1741593140.247:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd558d169 code=0x7ffc0000 [ 1468.937843][T16598] erofs: (device loop2): mounted with root inode @ nid 36. [ 1469.012923][ T27] audit: type=1326 audit(1741593140.247:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcd558d169 code=0x7ffc0000 [ 1469.092199][T16598] syz.2.3208: attempt to access beyond end of device [ 1469.092199][T16598] loop2: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 1469.128898][ T27] audit: type=1326 audit(1741593140.247:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd558d169 code=0x7ffc0000 [ 1469.235331][ T27] audit: type=1326 audit(1741593140.247:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd558d169 code=0x7ffc0000 [ 1469.510349][ T27] audit: type=1326 audit(1741593140.247:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fdcd558d169 code=0x7ffc0000 [ 1469.715654][ T27] audit: type=1326 audit(1741593140.247:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd558d169 code=0x7ffc0000 [ 1469.851539][ T27] audit: type=1326 audit(1741593140.247:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd558d169 code=0x7ffc0000 [ 1470.167246][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3214'. [ 1471.327951][ T126] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 1471.544885][T16639] netlink: 'syz.7.3217': attribute type 32 has an invalid length. [ 1471.563072][ T126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.693992][ T126] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1471.906316][ T126] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1473.494057][ T126] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1473.538742][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.649433][ T126] usb 2-1: can't set config #1, error -71 [ 1473.682759][ T126] usb 2-1: USB disconnect, device number 38 [ 1473.905935][T16660] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3223'. [ 1474.883384][T16660] netlink: 'syz.8.3223': attribute type 8 has an invalid length. [ 1477.115748][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3232'. [ 1477.411689][ T4359] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 1477.616941][ T4359] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.660250][ T4359] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1477.741374][ T4359] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1478.693270][T16719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3237'. [ 1479.019279][T16724] netlink: 'syz.1.3237': attribute type 8 has an invalid length. [ 1479.838134][T16722] loop2: detected capacity change from 0 to 1024 [ 1479.913606][ T4359] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1479.927243][ T4359] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.943082][ T4359] usb 9-1: can't set config #1, error -71 [ 1479.991935][ T4359] usb 9-1: USB disconnect, device number 10 [ 1480.617873][T16744] loop1: detected capacity change from 0 to 512 [ 1481.398989][T16722] hfsplus: xattr searching failed [ 1481.593390][T16722] ptrace attach of "./syz-executor exec"[15547] was attempted by "? pP(H1wy-MT;}nl_Hjʗ?gΞCy=gձ+\x1b/ޜZXlϴNNv[4nvkƙn|{'\x5czݲ##c\x1bEkݐFx\x22NFgԊ\x22v.ou`Չᑪ#bq{\x22FOfm-@fReZSb{=;3:-ӈ\x22ΧX{w}QD-R|ZQ/UwnG}\x07e;\x1b}#p(HOĵ|5_xFYbxwZ&Ar덯\x5c)۽|]w|8%~oGꎿ7; #Qg\x22Gոƥ0;fOYX*mL<0p4գ?\x1b VO#\x0bH;x{FJtgVܿ9\x1b͜9r.\x5cɹ3\x5c?g3DΥ9WrC~fΉK9s\x5c\x5c?g3DΥ9Wr2w/ 㤈\x22ޏZ͈Jn [ 1484.747065][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.877550][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.598241][T16777] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3251'. [ 1485.905625][T16786] netlink: 'syz.9.3251': attribute type 8 has an invalid length. [ 1487.054155][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3250'. [ 1491.471632][ T4269] Bluetooth: hci5: command 0x0406 tx timeout [ 1494.460665][T16837] loop8: detected capacity change from 0 to 2048 [ 1496.822539][T16837] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1496.941480][ T27] audit: type=1800 audit(1741593168.257:312): pid=16837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3264" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1496.988577][T16837] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1497.065215][ T27] audit: type=1800 audit(1741593168.267:313): pid=16837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3264" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1497.193169][T14180] EXT4-fs (loop8): unmounting filesystem. [ 1498.024046][T16871] loop8: detected capacity change from 0 to 128 [ 1502.122931][T16913] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3277'. [ 1504.406934][T16940] loop1: detected capacity change from 0 to 512 [ 1504.422147][T16937] loop2: detected capacity change from 0 to 1764 [ 1504.446541][T16940] EXT4-fs: Ignoring removed oldalloc option [ 1504.504549][T16940] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1504.643722][T16940] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1504.743840][T16940] EXT4-fs (loop1): 1 truncate cleaned up [ 1504.801845][T16940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1505.721719][T15128] EXT4-fs (loop1): unmounting filesystem. [ 1505.962778][ T4419] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.126198][ T4419] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.366239][ T4419] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.660165][ T4419] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.942494][T16998] loop8: detected capacity change from 0 to 8 [ 1506.982467][T16998] squashfs: Unknown parameter '"T' [ 1507.362787][T12436] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1507.378496][T12436] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1507.398464][T12436] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1507.409177][T12436] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1507.417295][T12436] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1507.431666][T12436] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1508.206304][T17004] wlan0 speed is unknown, defaulting to 1000 [ 1508.571682][T13356] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1508.841658][T13356] usb 9-1: Using ep0 maxpacket: 16 [ 1509.473414][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 1509.846555][T13356] usb 9-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1509.861931][T13356] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1509.872959][T13356] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 1509.898547][T17004] chnl_net:caif_netlink_parms(): no params data found [ 1509.912863][T13356] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1509.955390][T13356] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1510.051461][T13356] usb 9-1: SerialNumber: syz [ 1510.266366][T13356] usb-storage 9-1:1.0: USB Mass Storage device detected [ 1510.311830][T13356] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1510.464087][T17004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.477032][T17004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.488128][T17004] device bridge_slave_0 entered promiscuous mode [ 1510.505959][T17004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.524340][T17004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.582636][T13356] usb 9-1: USB disconnect, device number 11 [ 1510.597724][T17004] device bridge_slave_1 entered promiscuous mode [ 1510.634035][T17059] loop2: detected capacity change from 0 to 764 [ 1510.661329][T17059] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1510.740893][T17004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1510.761543][T17059] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3315'. [ 1510.770296][T17004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1511.138962][T17004] team0: Port device team_slave_0 added [ 1511.155827][T17004] team0: Port device team_slave_1 added [ 1511.551662][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 1511.558715][T17077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1511.565977][T17077] IPv6: NLM_F_CREATE should be set when creating new route [ 1511.573241][T17077] IPv6: NLM_F_CREATE should be set when creating new route [ 1511.617421][T17086] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1511.640666][T17004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.654384][T17004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.685713][T17089] loop9: detected capacity change from 0 to 8 [ 1511.776802][T17004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1511.787813][ T4382] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1511.810232][T17004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1511.819878][T17051] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1511.835424][T17004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.862273][T17004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1511.952645][ T4382] usb 3-1: device descriptor read/64, error -71 [ 1512.071523][ T4419] device hsr_slave_0 left promiscuous mode [ 1512.104910][ T4419] device hsr_slave_1 left promiscuous mode [ 1512.235744][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1512.241488][ T4382] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1512.350386][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.411618][ T4382] usb 3-1: device descriptor read/64, error -71 [ 1512.618747][ T4382] usb usb3-port1: attempt power cycle [ 1512.664957][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1512.703225][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.725688][ T4419] device bridge_slave_1 left promiscuous mode [ 1512.749352][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.783130][ T4419] device bridge_slave_0 left promiscuous mode [ 1512.798152][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.883255][ T4419] device veth1_macvtap left promiscuous mode [ 1512.890554][ T4419] device veth0_macvtap left promiscuous mode [ 1512.897848][ T4419] device veth1_vlan left promiscuous mode [ 1512.904051][ T4419] device veth0_vlan left promiscuous mode [ 1513.091578][ T4382] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1513.132241][ T4382] usb 3-1: device descriptor read/8, error -71 [ 1513.411926][ T4382] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1513.462203][ T4382] usb 3-1: device descriptor read/8, error -71 [ 1513.589752][ T4382] usb usb3-port1: unable to enumerate USB device [ 1513.633940][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 1515.419853][ T4419] team0 (unregistering): Port device team_slave_1 removed [ 1515.629674][ T4419] team0 (unregistering): Port device team_slave_0 removed [ 1515.711539][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 1515.836875][ T4419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1516.192850][ T4419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1516.303466][T17146] loop8: detected capacity change from 0 to 256 [ 1516.330141][T17146] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1516.395909][T17146] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1516.447522][T17146] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1516.793909][T17146] exFAT-fs (loop8): hint_cluster is invalid (17) [ 1516.832060][T17146] exFAT-fs (loop8): error, invalid access to FAT (entry 0xffffffff) [ 1516.876092][T17146] exFAT-fs (loop8): Filesystem has been set read-only [ 1516.891689][T17146] exFAT-fs (loop8): error, invalid access to FAT (entry 0xffffffff) [ 1518.463875][ T4419] bond0 (unregistering): Released all slaves [ 1518.673644][ T9223] Bluetooth: hci4: Frame reassembly failed (-84) [ 1518.743530][T17004] device hsr_slave_0 entered promiscuous mode [ 1518.812177][T17004] device hsr_slave_1 entered promiscuous mode [ 1518.821859][T17004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1518.844454][T17004] Cannot create hsr debugfs directory [ 1519.119733][T17165] loop8: detected capacity change from 0 to 512 [ 1519.254517][T17165] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1519.281941][T17165] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1519.498318][T14180] EXT4-fs (loop8): unmounting filesystem. [ 1520.747880][ T4269] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1521.647022][T17004] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1521.664912][T17004] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1521.691825][T17004] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1521.749111][T17004] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1521.839981][T17004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.857025][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1522.072094][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1522.106187][T17004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.121247][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1522.157022][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1522.275458][T12712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.282702][T12712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.614581][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1522.856291][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1522.912625][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1522.946542][T12712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.953771][T12712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1523.029880][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1523.053700][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1523.079178][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1523.130651][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1523.168676][T17004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1523.209037][T17004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1523.255809][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1523.279518][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1523.295148][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1523.344156][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1523.372328][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1523.392943][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1523.413648][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1523.438602][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1523.442325][T17248] loop8: detected capacity change from 0 to 512 [ 1523.692471][T17248] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1523.819411][T17255] loop9: detected capacity change from 0 to 2048 [ 1523.983382][T17248] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1524.938544][T17255] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1525.384162][T14180] EXT4-fs (loop8): unmounting filesystem. [ 1526.143094][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1526.150615][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1526.197393][T17004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1526.735621][T17289] loop8: detected capacity change from 0 to 256 [ 1526.782615][T17289] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1526.829921][T17289] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1526.875125][T17289] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1526.992818][T12436] Bluetooth: hci2: command 0x0406 tx timeout [ 1527.455364][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1527.482243][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1527.518814][T17004] device veth0_vlan entered promiscuous mode [ 1527.534432][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1527.546720][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1527.572816][T17004] device veth1_vlan entered promiscuous mode [ 1527.589589][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1527.600949][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1527.618108][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1527.651927][T10938] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1527.689656][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1527.703829][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1527.723673][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1527.746716][T17004] device veth0_macvtap entered promiscuous mode [ 1527.769232][T17004] device veth1_macvtap entered promiscuous mode [ 1527.834185][T17004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1527.851556][T10938] usb 10-1: Using ep0 maxpacket: 32 [ 1527.861371][T10938] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1527.868771][T17004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.890945][T10938] usb 10-1: config 1 has an invalid interface number: 69 but max is 0 [ 1527.900727][T17004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1527.920038][T10938] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.937686][T17004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.950773][T10938] usb 10-1: config 1 has no interface number 0 [ 1527.959802][T17004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1527.982314][T17004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.001696][T10938] usb 10-1: config 1 interface 69 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1528.002870][T17004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.048656][T10938] usb 10-1: config 1 interface 69 has no altsetting 0 [ 1528.067053][T17004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.091459][T10938] usb 10-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=66.65 [ 1528.094022][T17004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.100621][T10938] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.100648][T10938] usb 10-1: Product: syz [ 1528.100665][T10938] usb 10-1: Manufacturer: syz [ 1528.100682][T10938] usb 10-1: SerialNumber: syz [ 1528.205371][T17004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.236894][T17004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1528.261675][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1528.277042][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1528.445368][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1528.456674][T17303] loop9: detected capacity change from 0 to 128 [ 1528.463023][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1528.535261][T17004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.458160][T17004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.507600][T17004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.574028][T17004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.635042][T17004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.693625][T17004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.751137][T17004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.806246][T17004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.881768][T17004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.927798][T17004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.337018][T17004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.570371][T17004] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.617964][T17004] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.669557][T17004] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.701739][T17052] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1530.759295][T17004] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.776058][T10938] usbserial_generic 10-1:1.69: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1530.840100][T10938] usbserial_generic 10-1:1.69: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1530.888306][T10938] usbserial_generic 10-1:1.69: device has no bulk endpoints [ 1530.900063][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1530.916683][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1530.951500][T10938] usb 10-1: USB disconnect, device number 5 [ 1530.974358][ T9120] Bluetooth: hci4: Frame reassembly failed (-84) [ 1531.766024][T10257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.089117][T10257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.464961][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1532.619973][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.648514][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.688284][T17351] loop9: detected capacity change from 0 to 512 [ 1532.714427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1532.732110][T17351] EXT4-fs: Ignoring removed orlov option [ 1532.828546][T17351] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.3381: inode #1: comm syz.9.3381: iget: illegal inode # [ 1532.991782][T12436] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1533.002046][T17351] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.3381: error while reading EA inode 1 err=-117 [ 1533.087044][T17351] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.3381: inode #1: comm syz.9.3381: iget: illegal inode # [ 1533.091309][T17361] loop4: detected capacity change from 0 to 256 [ 1533.129101][T17361] FAT-fs (loop4): Unrecognized mount option "nonmtail=0" or missing value [ 1533.175871][T17351] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.3381: error while reading EA inode 1 err=-117 [ 1533.227999][T17351] EXT4-fs (loop9): 1 orphan inode deleted [ 1533.241744][T17351] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1533.292145][T17051] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1533.555841][T17367] loop8: detected capacity change from 0 to 16 [ 1533.582600][T17367] erofs: (device loop8): mounted with root inode @ nid 36. [ 1533.690625][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1535.264349][T17384] loop4: detected capacity change from 0 to 2048 [ 1535.353743][T17384] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1536.151566][T17389] loop9: detected capacity change from 0 to 512 [ 1536.245350][T17389] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1536.312005][T17389] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1538.046880][T17397] loop2: detected capacity change from 0 to 2048 [ 1538.294653][T17397] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1538.555621][T17397] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1538.602710][T17412] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3388'. [ 1539.263785][T17389] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1539.498987][T17420] loop2: detected capacity change from 0 to 512 [ 1539.532504][T17420] EXT4-fs: Ignoring removed nobh option [ 1539.653094][T17420] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1539.698409][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1539.732612][T17420] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3395: invalid indirect mapped block 2683928664 (level 1) [ 1539.842907][T17420] EXT4-fs (loop2): 1 truncate cleaned up [ 1539.848690][T17420] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1539.998488][T17433] loop9: detected capacity change from 0 to 512 [ 1540.022363][T17433] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 1540.096063][T15547] EXT4-fs (loop2): unmounting filesystem. [ 1540.376101][T17433] loop9: detected capacity change from 0 to 4096 [ 1540.442787][T17428] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1540.469600][T17433] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1540.800955][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1540.811297][T17450] user requested TSC rate below hardware speed [ 1540.950299][T17456] loop4: detected capacity change from 0 to 1024 [ 1542.774328][T17479] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1543.505460][T17480] loop4: detected capacity change from 0 to 2048 [ 1543.573262][T17480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1544.138540][T17499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3412'. [ 1544.384066][T17505] netlink: 'syz.4.3412': attribute type 8 has an invalid length. [ 1545.413472][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.419945][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.354442][T17514] loop9: detected capacity change from 0 to 2048 [ 1547.404328][T17514] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1547.745371][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1552.367653][T17562] netlink: 'syz.7.3427': attribute type 8 has an invalid length. [ 1552.992068][ T4382] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1553.214357][ T4382] usb 10-1: Using ep0 maxpacket: 16 [ 1553.283449][ T4382] usb 10-1: config 0 has an invalid interface number: 29 but max is 0 [ 1553.479789][ T4382] usb 10-1: config 0 has no interface number 0 [ 1553.699737][ T4382] usb 10-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 1553.799295][ T4382] usb 10-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 1553.882469][ T4382] usb 10-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1553.937017][ T4382] usb 10-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1553.953184][T17585] loop2: detected capacity change from 0 to 512 [ 1554.002887][ T4382] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.021553][ T4382] usb 10-1: Product: syz [ 1554.033842][ T4382] usb 10-1: Manufacturer: syz [ 1554.038620][ T4382] usb 10-1: SerialNumber: syz [ 1554.067123][ T4382] usb 10-1: config 0 descriptor?? [ 1554.088245][T17564] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1554.100054][T17564] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1554.387503][T17585] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.3434: corrupted inode contents [ 1554.496354][T17585] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #16: comm syz.2.3434: mark_inode_dirty error [ 1554.655694][T17585] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.3434: corrupted inode contents [ 1554.710155][T17585] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.3434: mark_inode_dirty error [ 1554.764195][T17585] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.3434: corrupted inode contents [ 1554.841533][T17585] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 1554.888025][T17585] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.3434: corrupted inode contents [ 1554.903670][T17585] EXT4-fs error (device loop2): ext4_truncate:4311: inode #16: comm syz.2.3434: mark_inode_dirty error [ 1555.001928][T17603] loop8: detected capacity change from 0 to 512 [ 1555.085763][T17585] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 1555.187067][T17603] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.3437: iget: bad extended attribute block 1 [ 1555.205470][T17603] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.3437: couldn't read orphan inode 15 (err -117) [ 1555.219335][T17603] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1555.537723][T17585] EXT4-fs (loop2): 1 truncate cleaned up [ 1555.556752][T10257] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1555.608019][T17585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1555.612111][T10257] EXT4-fs error (device loop2): ext4_release_dquot:6818: comm kworker/u4:20: Failed to release dquot type 1 [ 1555.617181][T17585] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1555.682536][T14180] EXT4-fs (loop8): unmounting filesystem. [ 1555.919421][ T27] audit: type=1800 audit(1741593227.267:314): pid=17585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3434" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1556.044991][T17585] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1556.081471][T17585] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1556.113743][T17585] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.3434: Failed to acquire dquot type 1 [ 1556.295934][T15547] EXT4-fs (loop2): unmounting filesystem. [ 1556.364914][T17617] loop9: detected capacity change from 0 to 256 [ 1556.461723][T17632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3443'. [ 1556.497199][T17617] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1556.821042][T17637] netlink: 'syz.2.3443': attribute type 8 has an invalid length. [ 1557.400374][T17604] usb 10-1: USB disconnect, device number 6 [ 1558.191624][ T4269] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1558.204049][T12436] Bluetooth: hci4: command 0x1003 tx timeout [ 1559.794591][T17676] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1560.240362][T17686] loop4: detected capacity change from 0 to 128 [ 1561.288589][T17004] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000074f) [ 1561.311508][T17004] FAT-fs (loop4): Filesystem has been set read-only [ 1561.339386][T17004] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000074f) [ 1563.545873][T12712] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.557755][T12712] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.753373][T12712] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.953637][T12712] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.131756][T12051] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1565.451456][T12051] usb 9-1: Using ep0 maxpacket: 32 [ 1565.458339][T12051] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1565.503373][T12051] usb 9-1: config 0 has no interface number 0 [ 1565.510021][T12051] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1565.730059][T12051] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1565.964025][T12051] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1566.187023][T12051] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.226259][ T4269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1566.236363][ T4269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1566.247618][ T4269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1566.250375][T12051] usb 9-1: Product: syz [ 1566.261791][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1566.269336][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1566.276895][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1566.340875][T12051] usb 9-1: Manufacturer: syz [ 1566.391871][T12051] usb 9-1: SerialNumber: syz [ 1566.436141][T12051] usb 9-1: config 0 descriptor?? [ 1566.578179][T17755] wlan0 speed is unknown, defaulting to 1000 [ 1566.674557][T12051] appletouch 9-1:0.85: Failed to read mode from device. [ 1566.696387][T12051] appletouch: probe of 9-1:0.85 failed with error -5 [ 1567.538761][T17776] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3472'. [ 1568.056680][T17755] chnl_net:caif_netlink_parms(): no params data found [ 1568.071496][T17782] loop2: detected capacity change from 0 to 2048 [ 1568.287893][T17782] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1568.353279][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 1568.917470][T17782] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3474: bg 0: block 234: padding at end of block bitmap is not set [ 1569.059772][T17782] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1569.062800][T12051] usb 9-1: USB disconnect, device number 12 [ 1569.093526][T17782] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1569.093526][T17782] [ 1569.198853][T17808] loop8: detected capacity change from 0 to 256 [ 1569.206196][T17808] exfat: Deprecated parameter 'namecase' [ 1569.212578][T17808] exfat: Deprecated parameter 'utf8' [ 1569.218617][T17808] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1569.234989][T17808] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1569.292741][T17782] EXT4-fs (loop2): Total free blocks count 0 [ 1569.298790][T17782] EXT4-fs (loop2): Free/Dirty block details [ 1569.305322][T17782] EXT4-fs (loop2): free_blocks=0 [ 1569.310311][T17782] EXT4-fs (loop2): dirty_blocks=16 [ 1569.316492][T17782] EXT4-fs (loop2): Block reservation details [ 1569.338765][T17782] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 1570.112605][T17755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.135947][T17755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.201214][T15547] EXT4-fs (loop2): unmounting filesystem. [ 1570.202385][T17755] device bridge_slave_0 entered promiscuous mode [ 1570.417726][T17755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.425701][T17755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.435302][T17755] device bridge_slave_1 entered promiscuous mode [ 1570.440903][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 1571.107314][T17755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.499427][T17755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.642207][T17755] team0: Port device team_slave_0 added [ 1572.567742][T17846] loop9: detected capacity change from 0 to 1024 [ 1572.668996][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 1572.681702][T17846] EXT4-fs: Ignoring removed orlov option [ 1572.687412][T17846] EXT4-fs: Ignoring removed bh option [ 1572.692898][T17846] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 1572.732977][T17755] team0: Port device team_slave_1 added [ 1573.078314][T17051] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1573.367115][T17856] loop2: detected capacity change from 0 to 512 [ 1573.385491][T17856] EXT4-fs: Ignoring removed orlov option [ 1573.486509][T17856] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3489: inode #1: comm syz.2.3489: iget: illegal inode # [ 1573.532863][T17856] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3489: error while reading EA inode 1 err=-117 [ 1573.558600][T17856] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3489: inode #1: comm syz.2.3489: iget: illegal inode # [ 1573.572521][T17856] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3489: error while reading EA inode 1 err=-117 [ 1573.593959][T17755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1573.608775][T17856] EXT4-fs (loop2): 1 orphan inode deleted [ 1573.615013][T17755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1573.615040][T17755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1573.624329][T17755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1573.734532][T17755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1573.740457][T17856] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1573.859671][T17755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1573.954733][T12712] device hsr_slave_0 left promiscuous mode [ 1573.972366][T12712] device hsr_slave_1 left promiscuous mode [ 1574.013106][T12712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1574.041371][T12712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1574.070416][T12712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1574.106867][T12712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1574.241708][T15547] EXT4-fs (loop2): unmounting filesystem. [ 1574.344917][T12712] device bridge_slave_1 left promiscuous mode [ 1574.372017][T12712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.544677][T17881] netlink: 'syz.7.3494': attribute type 32 has an invalid length. [ 1574.750825][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 1574.836861][T12712] device bridge_slave_0 left promiscuous mode [ 1575.072521][T12712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.430907][T12712] device veth1_macvtap left promiscuous mode [ 1575.437048][T12712] device veth0_macvtap left promiscuous mode [ 1575.518602][T12712] device veth1_vlan left promiscuous mode [ 1575.541384][T12712] device veth0_vlan left promiscuous mode [ 1581.491212][T17942] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3507'. [ 1582.858666][T12712] team0 (unregistering): Port device team_slave_1 removed [ 1582.960851][T12712] team0 (unregistering): Port device team_slave_0 removed [ 1583.110286][T12712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1583.205128][T12712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1583.656405][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3516'. [ 1584.169103][ T4258] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 1584.393211][ T4258] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.453675][ T4258] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1584.499651][ T4258] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1585.255199][T12712] bond0 (unregistering): Released all slaves [ 1585.473150][T17947] netlink: 'syz.7.3507': attribute type 8 has an invalid length. [ 1585.657807][T17755] device hsr_slave_0 entered promiscuous mode [ 1585.687047][T17992] loop2: detected capacity change from 0 to 1024 [ 1585.695198][T17755] device hsr_slave_1 entered promiscuous mode [ 1585.718789][T17755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1585.761526][T17755] Cannot create hsr debugfs directory [ 1585.924406][T17992] hfsplus: xattr searching failed [ 1585.947506][ T27] audit: type=1800 audit(1742117545.294:315): pid=17992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3519" name="file0" dev="loop2" ino=4 res=0 errno=0 [ 1586.437551][ T4258] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1586.593103][ T4258] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.757998][T14529] hfsplus: b-tree write err: -5, ino 3 [ 1586.776309][ T4258] usb 10-1: can't set config #1, error -71 [ 1586.815588][ T4258] usb 10-1: USB disconnect, device number 7 [ 1586.869963][T15547] hfsplus: node 4:3 still has 2 user(s)! [ 1587.411991][T18022] loop2: detected capacity change from 0 to 512 [ 1587.472918][ T4501] Bluetooth: hci4: Frame reassembly failed (-84) [ 1587.489153][ T4501] Bluetooth: hci4: Frame reassembly failed (-84) [ 1587.560137][T18022] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.3524: iget: bad extended attribute block 1 [ 1587.578584][T18022] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3524: couldn't read orphan inode 15 (err -117) [ 1587.598024][T18022] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1588.062366][T15547] EXT4-fs (loop2): unmounting filesystem. [ 1588.228204][T18031] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3529'. [ 1588.709639][T17755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.081739][T18040] netlink: 'syz.9.3529': attribute type 8 has an invalid length. [ 1589.468441][T12436] Bluetooth: hci4: command 0x1003 tx timeout [ 1589.477520][ T4269] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1589.594386][T17755] device netdevsim2 left promiscuous mode [ 1589.667470][T18050] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3532'. [ 1589.773943][T17755] bridge0: port 2(netdevsim2) entered disabled state [ 1589.958296][ T4303] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 1590.125394][T17755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.215866][ T4303] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.310150][ T4303] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1590.398126][ T4303] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1590.485185][T17755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.665931][T18065] loop8: detected capacity change from 0 to 1024 [ 1590.921182][T18065] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1590.997560][T17755] bond0: (slave netdevsim0): Releasing backup interface [ 1591.258055][T17755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.302512][T18065] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1592.170496][T18082] xt_CONNSECMARK: invalid mode: 0 [ 1592.514722][ T4303] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1592.557861][ T4303] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.661752][ T4303] usb 10-1: can't set config #1, error -71 [ 1592.714565][T14180] EXT4-fs (loop8): unmounting filesystem. [ 1592.739918][ T4303] usb 10-1: USB disconnect, device number 8 [ 1592.904876][T18093] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3541'. [ 1593.096240][T17755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1593.127207][T17755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1593.162278][T17755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1594.121967][T18099] netlink: 'syz.8.3541': attribute type 8 has an invalid length. [ 1594.235008][T17755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1594.261845][ T27] audit: type=1326 audit(1742117553.615:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18114 comm="syz.2.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f493df84127 code=0x7ffc0000 [ 1594.383104][ T27] audit: type=1326 audit(1742117553.645:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18114 comm="syz.2.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f493df29359 code=0x7ffc0000 [ 1594.485982][ T27] audit: type=1326 audit(1742117553.645:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18114 comm="syz.2.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493df8d169 code=0x7ffc0000 [ 1595.025609][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3550'. [ 1595.454958][ T27] audit: type=1326 audit(1742117553.675:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18114 comm="syz.2.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f493df84127 code=0x7ffc0000 [ 1596.019387][ T27] audit: type=1326 audit(1742117553.675:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18114 comm="syz.2.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f493df29359 code=0x7ffc0000 [ 1596.080038][ T27] audit: type=1326 audit(1742117553.675:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18114 comm="syz.2.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f493df8d169 code=0x7ffc0000 [ 1596.110111][ T27] audit: type=1326 audit(1742117553.675:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18114 comm="syz.2.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f493df84127 code=0x7ffc0000 [ 1596.363723][ T27] audit: type=1326 audit(1742117553.675:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18114 comm="syz.2.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f493df29359 code=0x7ffc0000 [ 1596.463288][ T27] audit: type=1326 audit(1742117553.675:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18114 comm="syz.2.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493df8d169 code=0x7ffc0000 [ 1596.555462][T17755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.628765][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1596.645281][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1596.701437][T17755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1596.954591][T18140] loop9: detected capacity change from 0 to 512 [ 1597.759635][T18140] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.3553: iget: bad extended attribute block 1 [ 1597.772493][T18140] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.3553: couldn't read orphan inode 15 (err -117) [ 1597.784656][T18140] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1597.802597][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1597.832352][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1597.857595][T18146] loop8: detected capacity change from 0 to 512 [ 1597.875076][ T9223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.882237][ T9223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1597.907849][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1597.986696][T18155] loop2: detected capacity change from 0 to 256 [ 1598.007937][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1598.019420][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1598.023668][ T9223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.032342][ T9223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1598.045950][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1598.054718][T18155] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 1598.068657][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1598.111243][T18146] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1598.138448][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1598.167125][T18146] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1598.178299][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1598.210406][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1598.245408][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1598.288400][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1598.298324][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1598.318992][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1598.354151][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1598.394219][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1598.413383][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1598.450601][T17755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1598.536633][T14180] EXT4-fs (loop8): unmounting filesystem. [ 1599.469750][T18180] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3564'. [ 1600.083900][T18197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3565'. [ 1601.911993][T18199] loop8: detected capacity change from 0 to 512 [ 1601.931559][T18199] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1601.966643][T18199] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #16: comm syz.8.3567: invalid indirect mapped block 4294967295 (level 0) [ 1602.032778][T18199] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #16: comm syz.8.3567: invalid indirect mapped block 4294967295 (level 1) [ 1602.076558][T15978] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1602.095287][T18199] EXT4-fs (loop8): 1 orphan inode deleted [ 1602.106758][T18199] EXT4-fs (loop8): 1 truncate cleaned up [ 1602.112466][T18199] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1602.162370][T17755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1602.177547][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1602.187012][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1602.230285][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1602.242458][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1602.266538][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1602.276113][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1602.288605][T15978] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.313554][T15978] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1602.332920][T17755] device veth0_vlan entered promiscuous mode [ 1602.347357][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1602.360303][T15978] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1602.376764][T12712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1602.395392][T14180] EXT4-fs (loop8): unmounting filesystem. [ 1602.397568][T17755] device veth1_vlan entered promiscuous mode [ 1602.476561][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1602.485741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1602.505858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1602.527999][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1602.541361][T18222] loop8: detected capacity change from 0 to 1024 [ 1602.561219][T17755] device veth0_macvtap entered promiscuous mode [ 1602.574116][T17755] device veth1_macvtap entered promiscuous mode [ 1602.615749][T18222] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1602.644259][T17755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.657578][T17755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.667568][T17755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.678195][T17755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.688095][T17755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.698651][T17755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.716150][T17755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.734146][T17755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.744668][T17755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.762477][T17755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.777193][T15978] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1602.788744][T17755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1602.806617][T17755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.817374][T17755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.828426][T17755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.839270][T17755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.851148][T17755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.856528][T15978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.866453][T18222] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1602.896406][T17755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.917271][T18222] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1602.924366][T17755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.932094][T15978] usb 3-1: can't set config #1, error -71 [ 1602.967690][T15978] usb 3-1: USB disconnect, device number 37 [ 1602.971271][T17755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.985697][T17755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.002680][T17755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.015080][T17755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.024821][T18222] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1603.024821][T18222] [ 1603.035036][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1603.056862][T18222] EXT4-fs (loop8): Total free blocks count 0 [ 1603.064204][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1603.078037][T18222] EXT4-fs (loop8): Free/Dirty block details [ 1603.089899][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1603.105768][T18222] EXT4-fs (loop8): free_blocks=68451041280 [ 1603.137809][T18222] EXT4-fs (loop8): dirty_blocks=16 [ 1603.144845][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1603.162361][T18222] EXT4-fs (loop8): Block reservation details [ 1603.174328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1603.183739][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1603.192812][T18222] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 1603.204126][T17755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.228776][T17755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.631162][T17755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.936329][T17755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.019076][T14180] EXT4-fs (loop8): unmounting filesystem. [ 1604.106335][T10785] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1604.212380][T18249] loop8: detected capacity change from 0 to 128 [ 1604.243774][T18249] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1604.338208][T18249] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1604.390976][T18249] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1604.431166][T12712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.496181][T12712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.541875][T18258] loop9: detected capacity change from 0 to 128 [ 1604.551940][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1604.695279][T18258] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1604.768301][T12712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.782540][T18258] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1604.799094][T14180] EXT4-fs (loop8): unmounting filesystem. [ 1604.844551][T12712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.006546][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1607.350770][ T27] audit: type=1326 audit(1742117565.787:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff347b8d169 code=0x7ffc0000 [ 1607.432158][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.438549][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.465191][ T27] audit: type=1326 audit(1742117565.787:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff347b8d169 code=0x7ffc0000 [ 1607.604523][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1607.619016][ T27] audit: type=1326 audit(1742117565.887:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7ff347b8d169 code=0x7ffc0000 [ 1607.685629][ T27] audit: type=1326 audit(1742117565.887:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff347b8d169 code=0x7ffc0000 [ 1607.934592][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3583'. [ 1607.974777][ T27] audit: type=1326 audit(1742117565.887:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff347b8d169 code=0x7ffc0000 [ 1608.684089][ T27] audit: type=1326 audit(1742117565.987:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff347b8d169 code=0x7ffc0000 [ 1608.863591][ T27] audit: type=1326 audit(1742117565.987:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff347b8d169 code=0x7ffc0000 [ 1608.924734][T18290] wlan0 speed is unknown, defaulting to 1000 [ 1608.945871][ T27] audit: type=1326 audit(1742117565.987:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff347b8d169 code=0x7ffc0000 [ 1609.377530][ T27] audit: type=1326 audit(1742117566.187:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff347b8d169 code=0x7ffc0000 [ 1609.630449][ T27] audit: type=1326 audit(1742117566.187:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff347b8d169 code=0x7ffc0000 [ 1609.931037][T18307] loop9: detected capacity change from 0 to 512 [ 1610.152026][T18307] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #16: comm syz.9.3588: corrupted inode contents [ 1610.297751][T18307] EXT4-fs error (device loop9): ext4_dirty_inode:6089: inode #16: comm syz.9.3588: mark_inode_dirty error [ 1610.451511][T18307] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #16: comm syz.9.3588: corrupted inode contents [ 1610.873665][T18321] loop2: detected capacity change from 0 to 512 [ 1610.880708][T18307] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #16: comm syz.9.3588: mark_inode_dirty error [ 1610.965944][T18307] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #16: comm syz.9.3588: corrupted inode contents [ 1611.004831][T18321] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1611.046421][T18307] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 1611.050660][T18321] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1611.089009][T18307] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #16: comm syz.9.3588: corrupted inode contents [ 1611.151854][T18307] EXT4-fs error (device loop9): ext4_truncate:4311: inode #16: comm syz.9.3588: mark_inode_dirty error [ 1611.296071][T18307] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 1611.487079][T18307] EXT4-fs (loop9): 1 truncate cleaned up [ 1611.501166][T14529] EXT4-fs error (device loop9): ext4_release_dquot:6818: comm kworker/u4:23: Failed to release dquot type 1 [ 1611.508418][T18307] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1611.644637][T18307] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1611.733813][T15547] EXT4-fs (loop2): unmounting filesystem. [ 1611.875772][T18307] syz.9.3588 (18307) used greatest stack depth: 18456 bytes left [ 1612.048554][T18338] loop0: detected capacity change from 0 to 1024 [ 1612.273362][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1612.649293][T18351] loop9: detected capacity change from 0 to 128 [ 1613.134068][T18354] loop2: detected capacity change from 0 to 8 [ 1613.331927][ T9] hfsplus: b-tree write err: -5, ino 4 [ 1613.340863][T18354] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1613.349889][T18354] SQUASHFS error: Failed to read block 0x91: -5 [ 1613.356181][T18354] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1613.363385][T18354] SQUASHFS error: Unable to read inode 0x11f [ 1614.157576][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3602'. [ 1615.601837][T18385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1618.652810][T18397] loop2: detected capacity change from 0 to 16 [ 1618.670727][T18397] erofs: (device loop2): mounted with root inode @ nid 36. [ 1620.397889][T18406] loop9: detected capacity change from 0 to 512 [ 1620.505649][T18406] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #16: comm syz.9.3610: corrupted inode contents [ 1620.521199][T18406] EXT4-fs error (device loop9): ext4_dirty_inode:6089: inode #16: comm syz.9.3610: mark_inode_dirty error [ 1620.547001][T18418] input: syz1 as /devices/virtual/input/input22 [ 1620.571758][T18406] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #16: comm syz.9.3610: corrupted inode contents [ 1620.654808][T18406] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #16: comm syz.9.3610: mark_inode_dirty error [ 1620.682727][T18406] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #16: comm syz.9.3610: corrupted inode contents [ 1620.710356][T18406] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 1620.734615][T18406] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #16: comm syz.9.3610: corrupted inode contents [ 1620.753636][T18420] loop8: detected capacity change from 0 to 128 [ 1620.771811][T18406] EXT4-fs error (device loop9): ext4_truncate:4311: inode #16: comm syz.9.3610: mark_inode_dirty error [ 1620.790118][T18406] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 1620.815184][T18406] EXT4-fs (loop9): 1 truncate cleaned up [ 1620.822085][T18406] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1620.938337][T12712] __quota_error: 24 callbacks suppressed [ 1620.938355][T12712] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1620.971541][T18406] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1621.064590][T12712] EXT4-fs error (device loop9): ext4_release_dquot:6818: comm kworker/u4:21: Failed to release dquot type 1 [ 1621.197289][T18430] netlink: 'syz.7.3614': attribute type 32 has an invalid length. [ 1622.165037][T18437] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1622.324135][T18444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3615'. [ 1623.151271][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1623.473025][T18456] loop9: detected capacity change from 0 to 512 [ 1623.612362][T18456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 1623.651964][T18456] System zones: 1-12 [ 1623.798807][T18456] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 33619980: comm syz.9.3617: invalid block [ 1623.937296][T18456] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3617: invalid indirect mapped block 1819239214 (level 1) [ 1624.067243][T18456] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3617: bg 0: block 361: padding at end of block bitmap is not set [ 1624.140116][T18456] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1624.202005][T18456] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #13: comm syz.9.3617: attempt to clear invalid blocks 33619980 len 1 [ 1624.317609][T18474] loop0: detected capacity change from 0 to 256 [ 1624.360743][T18456] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3617: invalid indirect mapped block 1819239214 (level 0) [ 1624.433628][T18474] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1624.477558][T18456] EXT4-fs (loop9): 1 truncate cleaned up [ 1624.490112][T18456] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1624.511494][T18474] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1624.600043][T18474] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1625.396856][T18482] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.3617: Directory hole found for htree index block 0 [ 1625.413987][T18482] EXT4-fs error (device loop9): dx_probe:823: inode #2: comm syz.9.3617: Directory hole found for htree index block 0 [ 1625.434716][T18482] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1625.590147][T18488] loop2: detected capacity change from 0 to 2048 [ 1625.609226][T18488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1626.639663][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1627.574834][T18533] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3640'. [ 1628.473840][T18533] netlink: 'syz.9.3640': attribute type 8 has an invalid length. [ 1628.510970][T18543] loop0: detected capacity change from 0 to 2048 [ 1628.530099][T18543] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1630.292626][ T126] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1630.590389][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 1630.597340][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.614331][ T126] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1630.634798][ T126] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1630.653956][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.669176][ T126] usb 3-1: Product: syz [ 1630.675519][ T126] usb 3-1: Manufacturer: syz [ 1630.682984][ T126] usb 3-1: SerialNumber: syz [ 1630.826926][ T126] usb 3-1: config 0 descriptor?? [ 1630.904312][T18587] loop9: detected capacity change from 0 to 2048 [ 1630.917614][T18587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1631.105016][T18596] loop0: detected capacity change from 0 to 2048 [ 1631.129473][T18596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1631.788001][T18595] UDF-fs: warning (device loop0): udf_truncate_tail_extent: Too long extent after EOF in inode 1415: i_size: 29573 lbcount: 32768 extent 129+11264 [ 1632.021130][T18605] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3658'. [ 1632.096881][T18609] fuse: Bad value for 'fd' [ 1632.492530][T18614] netlink: 'syz.9.3658': attribute type 8 has an invalid length. [ 1632.696350][T18616] virtio-fs: tag <(null)> not found [ 1632.710512][T18616] loop7: detected capacity change from 0 to 16384 [ 1633.132541][ T4359] usb 3-1: USB disconnect, device number 38 [ 1633.660304][T18634] loop8: detected capacity change from 0 to 2048 [ 1633.681179][T18634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1633.705429][T18636] loop0: detected capacity change from 0 to 16 [ 1633.713992][T18636] erofs: (device loop0): mounted with root inode @ nid 36. [ 1633.839010][T18638] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3670'. [ 1634.266520][T18642] siw: device registration error -23 [ 1634.664025][T18665] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3677'. [ 1635.155203][T18671] netlink: 'syz.7.3677': attribute type 8 has an invalid length. [ 1636.042993][T18681] loop2: detected capacity change from 0 to 2048 [ 1636.148315][T18681] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1636.196029][T18690] loop8: detected capacity change from 0 to 2048 [ 1636.212555][T18690] EXT4-fs: Ignoring removed bh option [ 1636.233276][T18690] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1636.244635][ T27] audit: type=1800 audit(1742117595.591:358): pid=18681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3680" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1636.248143][T18690] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1636.521186][T14180] EXT4-fs (loop8): unmounting filesystem. [ 1636.715694][ T5078] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1636.917676][T18711] netlink: 'syz.7.3685': attribute type 32 has an invalid length. [ 1637.426658][ T9223] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1637.485571][ T5078] usb 10-1: Using ep0 maxpacket: 32 [ 1637.506362][ T5078] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 1637.540231][ T5078] usb 10-1: config 0 has no interface number 0 [ 1637.548986][ T9223] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 1637.600067][ T5078] usb 10-1: config 0 interface 89 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1637.641544][ T9223] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1637.641544][ T9223] [ 1637.661760][ T5078] usb 10-1: New USB device found, idVendor=0bda, idProduct=0179, bcdDevice=bb.87 [ 1637.686598][ T9223] EXT4-fs (loop2): Total free blocks count 0 [ 1637.699792][ T9223] EXT4-fs (loop2): Free/Dirty block details [ 1637.707465][ T5078] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.715980][ T9223] EXT4-fs (loop2): free_blocks=2415919104 [ 1637.716135][ T9223] EXT4-fs (loop2): dirty_blocks=16 [ 1637.716152][ T9223] EXT4-fs (loop2): Block reservation details [ 1637.716166][ T9223] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 1637.778840][T15547] EXT4-fs (loop2): unmounting filesystem. [ 1637.942312][ T5078] usb 10-1: config 0 descriptor?? [ 1638.211664][T15968] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1638.346452][ T5078] usb 10-1: USB disconnect, device number 9 [ 1638.471597][T15968] usb 9-1: Using ep0 maxpacket: 8 [ 1638.499893][T15968] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1638.732672][T15968] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1638.761395][T15968] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1638.868005][T15968] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1638.878217][T15968] usb 9-1: language id specifier not provided by device, defaulting to English [ 1638.922770][T15968] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1638.939479][T15968] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.957904][T15968] usb 9-1: Product: syz [ 1638.967684][T15968] usb 9-1: Manufacturer: 䶍㙌亱뱫ⱆẶ訽몆滩≗㓕픖쮯烜ᭌᢁ诞เ벱⣵󧇰 [ 1639.482997][T15968] usb 9-1: SerialNumber: syz [ 1639.784210][T15968] usb 9-1: 0:2 : does not exist [ 1639.806755][T15968] usb 9-1: USB disconnect, device number 13 [ 1645.351647][T18823] loop9: detected capacity change from 0 to 8 [ 1645.368776][T18823] squashfs: Unknown parameter '0x0000000000000004' [ 1645.516245][T18818] loop9: detected capacity change from 0 to 2048 [ 1645.619486][T18818] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1647.714217][T18850] loop2: detected capacity change from 0 to 1024 [ 1647.788257][T18850] EXT4-fs: Ignoring removed i_version option [ 1647.855170][T18850] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1647.915033][T18863] loop9: detected capacity change from 0 to 1024 [ 1648.867583][T15547] EXT4-fs (loop2): unmounting filesystem. [ 1649.430284][ T4382] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1649.858634][ T4382] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1650.007534][ T4382] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1650.068966][ T4382] usb 9-1: too many endpoints for config 1 interface 2 altsetting 48: 48, using maximum allowed: 30 [ 1650.169833][ T4382] usb 9-1: config 1 interface 2 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1650.217075][ T4382] usb 9-1: config 1 interface 2 has no altsetting 0 [ 1650.261703][ T4382] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1650.301647][ T4382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.309723][ T4382] usb 9-1: Product: syz [ 1650.365175][ T4382] usb 9-1: Manufacturer: syz [ 1650.385447][ T4382] usb 9-1: SerialNumber: syz [ 1651.474508][ T4382] usb 9-1: selecting invalid altsetting 0 [ 1651.563506][ T4382] usb 9-1: USB disconnect, device number 14 [ 1653.215970][T18937] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3740'. [ 1654.135573][T18955] loop2: detected capacity change from 0 to 2048 [ 1654.549624][T18955] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1654.700858][T18969] loop9: detected capacity change from 0 to 1024 [ 1654.730391][T18955] kvm: pic: non byte write [ 1654.734999][T18955] kvm: pic: non byte write [ 1654.739670][T18955] kvm: pic: non byte write [ 1654.744242][T18955] kvm: pic: non byte write [ 1654.748862][T18955] kvm: pic: non byte write [ 1654.753450][T18955] kvm: pic: non byte write [ 1654.757901][T18955] kvm: pic: non byte write [ 1654.762405][T18955] kvm: pic: non byte write [ 1654.766845][T18955] kvm: pic: non byte write [ 1654.771499][T18955] kvm: pic: non byte write [ 1654.855628][T18969] hfsplus: extend alloc file! (8192,512,16777719) [ 1654.955988][T18973] loop0: detected capacity change from 0 to 8 [ 1655.019625][T15547] EXT4-fs (loop2): unmounting filesystem. [ 1655.139009][T18977] loop9: detected capacity change from 0 to 16 [ 1655.197350][T18977] erofs: (device loop9): mounted with root inode @ nid 36. [ 1655.361850][T18985] syz.9.3750: attempt to access beyond end of device [ 1655.361850][T18985] loop9: rw=0, sector=524984, nr_sectors = 8 limit=16 [ 1655.443740][T18985] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1655.502083][T18991] loop0: detected capacity change from 0 to 512 [ 1655.844986][T18991] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1656.139601][T18991] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1656.479619][T17755] EXT4-fs (loop0): unmounting filesystem. [ 1656.626366][T19009] loop0: detected capacity change from 0 to 512 [ 1656.723147][T19009] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1656.772486][T19009] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1657.055742][T19013] loop8: detected capacity change from 0 to 2048 [ 1657.225360][T19013] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 1657.449268][ T4382] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1657.540421][T18966] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1657.689697][T17755] EXT4-fs (loop0): unmounting filesystem. [ 1657.838932][ T4382] usb 10-1: Using ep0 maxpacket: 32 [ 1657.849688][ T4382] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1657.885591][ T4382] usb 10-1: config 0 has no interface number 0 [ 1658.201826][ T4382] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1658.460506][ T4382] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1658.535801][ T4382] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1658.824889][ T4382] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.014577][ T4382] usb 10-1: Product: syz [ 1659.098648][ T4382] usb 10-1: Manufacturer: syz [ 1659.103392][ T4382] usb 10-1: SerialNumber: syz [ 1659.125991][ T4382] usb 10-1: config 0 descriptor?? [ 1659.133563][T19044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3767'. [ 1659.471903][T19054] netlink: 'syz.2.3767': attribute type 8 has an invalid length. [ 1660.238672][ T4382] appletouch 10-1:0.85: Geyser mode initialized. [ 1660.445205][ T4382] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input23 [ 1662.112274][ T4382] usb 10-1: USB disconnect, device number 10 [ 1662.145594][T19074] loop0: detected capacity change from 0 to 512 [ 1662.158686][T19074] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1662.168349][T19074] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1662.371412][T19074] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1662.378592][T19074] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.3773: bad orphan inode 15 [ 1662.398839][T19074] ext4_test_bit(bit=14, block=18) = 1 [ 1662.404282][T19074] is_bad_inode(inode)=0 [ 1662.408544][T19074] NEXT_ORPHAN(inode)=1023 [ 1662.412890][T19074] max_ino=32 [ 1662.416100][T19074] i_nlink=0 [ 1662.425512][T19074] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #15: comm syz.0.3773: corrupted xattr block 19 [ 1662.442380][T19074] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 1662.452147][T19074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1662.479836][ T4382] appletouch 10-1:0.85: input: appletouch disconnected [ 1662.515121][T19082] loop9: detected capacity change from 0 to 2048 [ 1662.587312][T19082] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1662.813364][ T27] audit: type=1326 audit(1742117622.015:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.8.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03198d169 code=0x7ffc0000 [ 1662.836249][ T27] audit: type=1326 audit(1742117622.015:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.8.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03198d169 code=0x7ffc0000 [ 1663.250465][T19094] xt_socket: unknown flags 0x58 [ 1663.830852][T19091] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.3773: deleted inode referenced: 15 [ 1663.854236][ T27] audit: type=1326 audit(1742117623.175:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.8.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff03198d169 code=0x7ffc0000 [ 1663.950341][ T27] audit: type=1326 audit(1742117623.175:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.8.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03198d169 code=0x7ffc0000 [ 1663.973568][ T27] audit: type=1326 audit(1742117623.175:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.8.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03198d169 code=0x7ffc0000 [ 1664.095146][T17755] EXT4-fs (loop0): unmounting filesystem. [ 1664.153001][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1664.516182][T19110] loop2: detected capacity change from 0 to 512 [ 1665.226832][T19110] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.3779: iget: bad extended attribute block 1 [ 1665.240017][T19110] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3779: couldn't read orphan inode 15 (err -117) [ 1665.256497][T19110] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1665.516798][T15547] EXT4-fs (loop2): unmounting filesystem. [ 1666.481218][T19153] loop9: detected capacity change from 0 to 1024 [ 1666.953606][T19153] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1667.235268][T19153] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1667.292020][T19153] EXT4-fs error (device loop9): ext4_acquire_dquot:6795: comm syz.9.3791: Failed to acquire dquot type 0 [ 1667.379116][T19153] EXT4-fs (loop9): 1 truncate cleaned up [ 1667.417724][T19153] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1667.672376][T19171] loop2: detected capacity change from 0 to 512 [ 1669.080323][T19173] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1669.190488][T19171] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.3797: iget: bad extended attribute block 1 [ 1669.204871][T19171] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3797: couldn't read orphan inode 15 (err -117) [ 1669.218057][T19171] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1669.387384][T19173] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1669.408821][T19173] EXT4-fs error (device loop9): ext4_acquire_dquot:6795: comm syz.9.3791: Failed to acquire dquot type 0 [ 1669.581067][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.593006][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.630402][T15547] EXT4-fs (loop2): unmounting filesystem. [ 1669.764307][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1672.637071][T19235] loop0: detected capacity change from 0 to 512 [ 1672.990628][T19235] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.3813: iget: bad extended attribute block 1 [ 1673.004725][T19235] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3813: couldn't read orphan inode 15 (err -117) [ 1673.017111][T19235] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1673.517057][T19262] loop2: detected capacity change from 0 to 512 [ 1673.528125][T19262] EXT4-fs: Ignoring removed i_version option [ 1673.534555][T19262] ext2: Unknown parameter 'noacl' [ 1674.904464][T19278] 9pnet_fd: Insufficient options for proto=fd [ 1675.420388][T19279] loop8: detected capacity change from 0 to 2048 [ 1675.473558][T19279] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1675.498030][T17755] EXT4-fs (loop0): unmounting filesystem. [ 1675.522615][T19279] UDF-fs: error (device loop8): udf_read_inode: (ino 1345) failed !bh [ 1675.703289][ T27] audit: type=1326 audit(1742117635.067:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.2.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493df8d169 code=0x7ffc0000 [ 1676.900147][ T27] audit: type=1326 audit(1742117635.157:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.2.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493df8d169 code=0x7ffc0000 [ 1676.931175][ T27] audit: type=1326 audit(1742117635.307:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.2.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f493df8d169 code=0x7ffc0000 [ 1677.493807][ T27] audit: type=1326 audit(1742117636.317:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.2.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493df8d169 code=0x7ffc0000 [ 1677.533018][ T27] audit: type=1326 audit(1742117636.317:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.2.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493df8d169 code=0x7ffc0000 [ 1677.649161][T19300] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3832'. [ 1678.013248][ T27] audit: type=1326 audit(1742117636.317:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.2.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f493df8d169 code=0x7ffc0000 [ 1678.690848][ T27] audit: type=1326 audit(1742117636.317:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.2.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493df8d169 code=0x7ffc0000 [ 1678.796257][ T27] audit: type=1326 audit(1742117636.317:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.2.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493df8d169 code=0x7ffc0000 [ 1678.876385][ T27] audit: type=1326 audit(1742117636.327:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.2.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f493df29359 code=0x7ffc0000 [ 1678.935992][ T27] audit: type=1326 audit(1742117636.327:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.2.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493df8d169 code=0x7ffc0000 [ 1678.972321][T19312] kvm: emulating exchange as write [ 1680.193638][T19333] loop8: detected capacity change from 0 to 512 [ 1680.415300][T19333] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.3840: iget: bad extended attribute block 1 [ 1680.429963][T19333] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.3840: couldn't read orphan inode 15 (err -117) [ 1680.443565][T19333] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1680.649888][T19335] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 1680.954431][T14180] EXT4-fs (loop8): unmounting filesystem. [ 1681.147465][T19346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3841'. [ 1683.456575][ T5078] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 1684.327173][T19360] loop9: detected capacity change from 0 to 1024 [ 1684.356538][ T5078] usb 3-1: device not accepting address 39, error -71 [ 1684.373305][T19366] loop2: detected capacity change from 0 to 16 [ 1684.425727][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 1684.454631][T19360] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1684.525982][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 1684.525999][ T27] audit: type=1800 audit(1742117643.898:435): pid=19360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3848" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1684.541907][T19366] erofs: (device loop2): mounted with root inode @ nid 36. [ 1684.682162][T19375] 9pnet_fd: Insufficient options for proto=fd [ 1684.691578][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1685.155623][T19380] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1686.668902][T10785] Bluetooth: hci4: command 0x1003 tx timeout [ 1686.668950][ T4269] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1686.821107][T19393] loop2: detected capacity change from 0 to 128 [ 1687.389160][T19403] wlan0 speed is unknown, defaulting to 1000 [ 1687.496800][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3860'. [ 1687.855029][T13354] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 1688.103807][T13354] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.146049][T13354] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1688.155973][T13354] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1688.191875][T13354] usb 10-1: string descriptor 0 read error: -22 [ 1688.205158][T13354] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1688.221483][T13354] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.267135][T13354] usb 10-1: 0:2 : does not exist [ 1688.901656][T19430] loop0: detected capacity change from 0 to 8 [ 1690.274416][T13354] usb 10-1: USB disconnect, device number 11 [ 1690.410492][ T4383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.595015][ T4359] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1690.684851][ T4383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.795963][ T4359] usb 9-1: New USB device found, idVendor=0930, idProduct=0215, bcdDevice= 8.78 [ 1690.811906][ T4359] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.821431][T12436] Bluetooth: hci3: command 0x0406 tx timeout [ 1690.862668][ T4359] usb 9-1: config 0 descriptor?? [ 1690.913353][ T4383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.936862][ T4359] usb 9-1: Direct firmware load for ath3k-1.fw failed with error -2 [ 1690.955651][ T4359] usb 9-1: Falling back to sysfs fallback for: ath3k-1.fw [ 1691.024357][ T4382] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1691.187227][ T4383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.224448][ T4382] usb 1-1: Using ep0 maxpacket: 16 [ 1691.234370][ T4382] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 1691.252660][ T4382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.266497][ T4269] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1691.275146][ T4382] usb 1-1: Product: syz [ 1691.279559][T10785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1691.294099][T10785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1691.303443][T10785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1691.314430][ T4382] usb 1-1: Manufacturer: syz [ 1691.322605][T10785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1691.332071][T10785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1691.344884][ T4382] usb 1-1: SerialNumber: syz [ 1691.359081][ T4382] usb 1-1: config 0 descriptor?? [ 1691.375737][ T4382] usb 1-1: selecting invalid altsetting 1 [ 1691.400586][ T4382] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 1691.510308][T19466] wlan0 speed is unknown, defaulting to 1000 [ 1691.926048][T19472] loop8: detected capacity change from 0 to 2048 [ 1692.183986][T19472] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1692.799294][T19484] loop9: detected capacity change from 0 to 512 [ 1692.897556][T19466] chnl_net:caif_netlink_parms(): no params data found [ 1692.969421][T19484] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1693.014954][T19484] ext4 filesystem being mounted at /138/file6 supports timestamps until 2038-01-19 (0x7fffffff) [ 1693.327793][T19504] EXT4-fs error (device loop9): __ext4_new_inode:1285: comm syz.9.3877: failed to insert inode 16: doubly allocated? [ 1693.426333][T10785] Bluetooth: hci4: command 0x0409 tx timeout [ 1694.125061][T19466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.137600][T19466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.174372][T19466] device bridge_slave_0 entered promiscuous mode [ 1694.216556][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1694.318651][T19466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.327099][T19466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.364193][T19466] device bridge_slave_1 entered promiscuous mode [ 1695.183649][T19515] loop9: detected capacity change from 0 to 256 [ 1695.219081][T19515] FAT-fs (loop9): Directory bread(block 64) failed [ 1695.226814][T19515] FAT-fs (loop9): Directory bread(block 65) failed [ 1695.234387][T19515] FAT-fs (loop9): Directory bread(block 66) failed [ 1695.240948][T19515] FAT-fs (loop9): Directory bread(block 67) failed [ 1695.247602][T19515] FAT-fs (loop9): Directory bread(block 68) failed [ 1695.254181][T19515] FAT-fs (loop9): Directory bread(block 69) failed [ 1695.260819][T19515] FAT-fs (loop9): Directory bread(block 70) failed [ 1695.267423][T19515] FAT-fs (loop9): Directory bread(block 71) failed [ 1695.274093][T19515] FAT-fs (loop9): Directory bread(block 72) failed [ 1695.280644][T19515] FAT-fs (loop9): Directory bread(block 73) failed [ 1695.347845][T19466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.366910][T19466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.463847][T10785] Bluetooth: hci4: command 0x041b tx timeout [ 1696.109267][ T4382] usb 1-1: USB disconnect, device number 27 [ 1696.152206][T19466] team0: Port device team_slave_0 added [ 1696.512956][T19466] team0: Port device team_slave_1 added [ 1696.755020][T19536] loop9: detected capacity change from 0 to 1024 [ 1696.995540][T19536] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1697.010842][T19466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1697.018372][T19466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1697.044475][T19466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1697.061594][T19466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1697.073668][T19466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1697.386212][T19466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1697.533702][T12436] Bluetooth: hci4: command 0x040f tx timeout [ 1697.900235][ T4383] device hsr_slave_0 left promiscuous mode [ 1697.936042][T15957] EXT4-fs (loop9): unmounting filesystem. [ 1697.942073][ T4383] device hsr_slave_1 left promiscuous mode [ 1698.066241][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1698.087241][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1698.122868][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1698.143481][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1698.194033][ T4383] device bridge_slave_1 left promiscuous mode [ 1699.109819][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.450673][T19566] loop9: detected capacity change from 0 to 1024 [ 1699.623577][T12436] Bluetooth: hci4: command 0x0419 tx timeout [ 1699.955175][ T4383] device bridge_slave_0 left promiscuous mode [ 1699.961481][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.150856][T19571] loop0: detected capacity change from 0 to 512 [ 1700.157866][ T4383] device veth1_macvtap left promiscuous mode [ 1700.170164][ T4383] device veth0_macvtap left promiscuous mode [ 1700.243859][T19571] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1700.253273][ T4383] device veth1_vlan left promiscuous mode [ 1700.259155][ T4383] device veth0_vlan left promiscuous mode [ 1700.299280][T19571] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1700.412266][T19571] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.3897: bad orphan inode 131083 [ 1700.536247][T19571] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1701.134460][T19571] EXT4-fs error (device loop0): __ext4_iget:5055: inode #13: block 512: comm syz.0.3897: invalid block [ 1701.188289][T19582] loop8: detected capacity change from 0 to 8 [ 1701.231076][T19582] SQUASHFS error: Failed to read block 0x4de: -5 [ 1701.248153][T19582] SQUASHFS error: Failed to read block 0x4de: -5 [ 1701.261005][ T27] audit: type=1800 audit(1742117660.620:436): pid=19582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3900" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 1701.351486][T17755] EXT4-fs (loop0): unmounting filesystem. [ 1701.520358][T19591] loop0: detected capacity change from 0 to 512 [ 1701.543322][T19591] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1701.672633][T19591] EXT4-fs (loop0): 1 truncate cleaned up [ 1701.726200][T19591] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1702.738943][T19602] ================================================================== [ 1702.747078][T19602] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x909/0x1fa0 [ 1702.754840][T19602] Read of size 18446744073709551572 at addr ffff88807d067050 by task syz.0.3902/19602 [ 1702.764429][T19602] [ 1702.766785][T19602] CPU: 1 PID: 19602 Comm: syz.0.3902 Not tainted 6.1.130-syzkaller #0 [ 1702.774963][T19602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1702.785047][T19602] Call Trace: [ 1702.788380][T19602] [ 1702.791327][T19602] dump_stack_lvl+0x1e3/0x2cb [ 1702.796039][T19602] ? nf_tcp_handle_invalid+0x647/0x647 [ 1702.801527][T19602] ? panic+0x764/0x764 [ 1702.805619][T19602] ? _printk+0xd1/0x111 [ 1702.809819][T19602] ? __virt_addr_valid+0x17f/0x530 [ 1702.814962][T19602] ? __virt_addr_valid+0x17f/0x530 [ 1702.820098][T19602] print_report+0x15f/0x4f0 [ 1702.824624][T19602] ? __virt_addr_valid+0x17f/0x530 [ 1702.829776][T19602] ? __virt_addr_valid+0x17f/0x530 [ 1702.834923][T19602] ? __virt_addr_valid+0x45b/0x530 [ 1702.840061][T19602] ? __phys_addr+0xb6/0x170 [ 1702.844614][T19602] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 1702.850100][T19602] kasan_report+0x136/0x160 [ 1702.854629][T19602] ? vfs_utimes+0x4b1/0x760 [ 1702.859160][T19602] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 1702.864642][T19602] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 1702.870134][T19602] kasan_check_range+0x27f/0x290 [ 1702.875134][T19602] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 1702.880618][T19602] memmove+0x25/0x60 [ 1702.884542][T19602] ext4_xattr_set_entry+0x909/0x1fa0 [ 1702.889857][T19602] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 1702.896305][T19602] ? ext4_xattr_block_set+0x7f4/0x3820 [ 1702.901810][T19602] ? kmemdup+0x41/0x60 [ 1702.905906][T19602] ? memcpy+0x3c/0x60 [ 1702.909911][T19602] ext4_xattr_block_set+0x97e/0x3820 [ 1702.915233][T19602] ? ext4_get_inode_loc+0x190/0x190 [ 1702.920473][T19602] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 1702.925961][T19602] ? xattr_find_entry+0x24b/0x310 [ 1702.931012][T19602] ? ext4_xattr_block_find+0x23d/0x2b0 [ 1702.936499][T19602] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 1702.942437][T19602] ? ext4_xattr_set+0x3d0/0x3d0 [ 1702.947407][T19602] ? rwsem_write_trylock+0x166/0x210 [ 1702.952737][T19602] ? clear_nonspinnable+0x60/0x60 [ 1702.957784][T19602] ? ext4_reserve_inode_write+0x2b3/0x360 [ 1702.963552][T19602] ? dquot_initialize_needed+0x128/0x320 [ 1702.969217][T19602] __ext4_expand_extra_isize+0x302/0x400 [ 1702.974888][T19602] __ext4_mark_inode_dirty+0x54f/0x920 [ 1702.980387][T19602] ? ext4_blocks_for_truncate+0x270/0x270 [ 1702.986139][T19602] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 1702.991971][T19602] ? seqcount_lockdep_reader_access+0x153/0x220 [ 1702.998240][T19602] ? ext4_journal_check_start+0x179/0x240 [ 1703.003989][T19602] ? ext4_dirty_inode+0x8b/0x100 [ 1703.008952][T19602] ? __ext4_journal_start_sb+0x1f1/0x410 [ 1703.014617][T19602] ext4_dirty_inode+0xbf/0x100 [ 1703.019406][T19602] ? __ext4_expand_extra_isize+0x400/0x400 [ 1703.025241][T19602] __mark_inode_dirty+0x331/0xf80 [ 1703.030285][T19602] ? i_gid_needs_update+0x4e/0x1c0 [ 1703.035432][T19602] ext4_setattr+0x755/0x1a00 [ 1703.040058][T19602] ? atime_needs_update+0x7b0/0x7b0 [ 1703.045284][T19602] ? evm_inode_setattr+0xfc/0x820 [ 1703.050340][T19602] ? rwsem_write_trylock+0x166/0x210 [ 1703.055657][T19602] ? bpf_lsm_inode_setattr+0x5/0x10 [ 1703.060884][T19602] ? ext4_write_inode+0x740/0x740 [ 1703.065940][T19602] notify_change+0xce3/0xfc0 [ 1703.070550][T19602] vfs_utimes+0x4b1/0x760 [ 1703.074917][T19602] ? __ia32_sys_sync_file_range2+0x110/0x110 [ 1703.080921][T19602] ? kasan_quarantine_put+0xd4/0x220 [ 1703.086238][T19602] ? kmem_cache_free+0x292/0x510 [ 1703.091225][T19602] ? user_path_at_empty+0x48/0x60 [ 1703.096270][T19602] __se_sys_utime+0x1dd/0x2d0 [ 1703.100987][T19602] ? __x64_sys_utime+0x60/0x60 [ 1703.105795][T19602] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1703.111794][T19602] ? lockdep_hardirqs_on+0x94/0x130 [ 1703.117023][T19602] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1703.123047][T19602] do_syscall_64+0x3b/0xb0 [ 1703.127498][T19602] ? clear_bhb_loop+0x45/0xa0 [ 1703.132191][T19602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1703.138108][T19602] RIP: 0033:0x7f885018d169 [ 1703.142553][T19602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1703.162180][T19602] RSP: 002b:00007f8851058038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 1703.170617][T19602] RAX: ffffffffffffffda RBX: 00007f88503a6160 RCX: 00007f885018d169 [ 1703.178617][T19602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000006a80 [ 1703.186606][T19602] RBP: 00007f885020e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1703.194597][T19602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1703.202589][T19602] R13: 0000000000000001 R14: 00007f88503a6160 R15: 00007ffcff4fbb58 [ 1703.210593][T19602] [ 1703.213624][T19602] [ 1703.215958][T19602] Allocated by task 19602: [ 1703.220383][T19602] kasan_set_track+0x4b/0x70 [ 1703.225000][T19602] __kasan_kmalloc+0x97/0xb0 [ 1703.229602][T19602] __kmalloc_node_track_caller+0xb1/0x220 [ 1703.235438][T19602] kmemdup+0x26/0x60 [ 1703.239350][T19602] ext4_xattr_block_set+0x7f4/0x3820 [ 1703.244652][T19602] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 1703.250562][T19602] __ext4_expand_extra_isize+0x302/0x400 [ 1703.256219][T19602] __ext4_mark_inode_dirty+0x54f/0x920 [ 1703.261704][T19602] ext4_dirty_inode+0xbf/0x100 [ 1703.266499][T19602] __mark_inode_dirty+0x331/0xf80 [ 1703.271545][T19602] ext4_setattr+0x755/0x1a00 [ 1703.276166][T19602] notify_change+0xce3/0xfc0 [ 1703.280779][T19602] vfs_utimes+0x4b1/0x760 [ 1703.285154][T19602] __se_sys_utime+0x1dd/0x2d0 [ 1703.289867][T19602] do_syscall_64+0x3b/0xb0 [ 1703.294320][T19602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1703.300226][T19602] [ 1703.302563][T19602] Last potentially related work creation: [ 1703.308278][T19602] kasan_save_stack+0x3b/0x60 [ 1703.312978][T19602] __kasan_record_aux_stack+0xb0/0xc0 [ 1703.318364][T19602] kvfree_call_rcu+0x116/0x8c0 [ 1703.323143][T19602] neigh_periodic_work+0x3c5/0xd40 [ 1703.328279][T19602] process_one_work+0x917/0x1260 [ 1703.333262][T19602] worker_thread+0xa47/0x1200 [ 1703.337983][T19602] kthread+0x28d/0x320 [ 1703.342112][T19602] ret_from_fork+0x1f/0x30 [ 1703.346559][T19602] [ 1703.348891][T19602] The buggy address belongs to the object at ffff88807d067000 [ 1703.348891][T19602] which belongs to the cache kmalloc-1k of size 1024 [ 1703.362989][T19602] The buggy address is located 80 bytes inside of [ 1703.362989][T19602] 1024-byte region [ffff88807d067000, ffff88807d067400) [ 1703.376362][T19602] [ 1703.378702][T19602] The buggy address belongs to the physical page: [ 1703.385134][T19602] page:ffffea0001f41800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d060 [ 1703.395320][T19602] head:ffffea0001f41800 order:3 compound_mapcount:0 compound_pincount:0 [ 1703.403774][T19602] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1703.411874][T19602] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017c41dc0 [ 1703.420489][T19602] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1703.429088][T19602] page dumped because: kasan: bad access detected [ 1703.435542][T19602] page_owner tracks the page as allocated [ 1703.441281][T19602] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4265, tgid 4265 (syz-executor), ts 71325480023, free_ts 71253290022 [ 1703.462067][T19602] post_alloc_hook+0x18d/0x1b0 [ 1703.466868][T19602] get_page_from_freelist+0x3731/0x38d0 [ 1703.472446][T19602] __alloc_pages+0x28d/0x770 [ 1703.477060][T19602] alloc_slab_page+0x6a/0x150 [ 1703.481780][T19602] new_slab+0x84/0x2d0 [ 1703.485880][T19602] ___slab_alloc+0xc20/0x1270 [ 1703.490593][T19602] __kmem_cache_alloc_node+0x19f/0x260 [ 1703.496088][T19602] __kmalloc_node_track_caller+0xa0/0x220 [ 1703.501837][T19602] __alloc_skb+0x12a/0x2c0 [ 1703.506334][T19602] aoecmd_cfg+0x2bb/0xa00 [ 1703.510695][T19602] call_timer_fn+0x1ad/0x6b0 [ 1703.515327][T19602] __run_timers+0x67c/0x890 [ 1703.519873][T19602] run_timer_softirq+0x63/0xf0 [ 1703.524679][T19602] handle_softirqs+0x2ee/0xa40 [ 1703.529459][T19602] __irq_exit_rcu+0x157/0x240 [ 1703.534153][T19602] irq_exit_rcu+0x5/0x20 [ 1703.538413][T19602] page last free stack trace: [ 1703.543098][T19602] free_unref_page_prepare+0x12a6/0x15b0 [ 1703.548821][T19602] free_unref_page+0x33/0x3e0 [ 1703.553513][T19602] __unfreeze_partials+0x1b7/0x210 [ 1703.558657][T19602] put_cpu_partial+0x17b/0x250 [ 1703.563455][T19602] qlist_free_all+0x76/0xe0 [ 1703.567978][T19602] kasan_quarantine_reduce+0x156/0x170 [ 1703.573456][T19602] __kasan_slab_alloc+0x1f/0x70 [ 1703.578343][T19602] slab_post_alloc_hook+0x52/0x3a0 [ 1703.583498][T19602] kmem_cache_alloc_node+0x136/0x310 [ 1703.588806][T19602] __alloc_skb+0xd3/0x2c0 [ 1703.593150][T19602] rtmsg_ifinfo_build_skb+0x80/0x180 [ 1703.598444][T19602] rtmsg_ifinfo+0x71/0x120 [ 1703.602878][T19602] netdev_state_change+0x12f/0x190 [ 1703.608011][T19602] linkwatch_do_dev+0x10c/0x160 [ 1703.612884][T19602] __linkwatch_run_queue+0x448/0x6b0 [ 1703.618188][T19602] linkwatch_event+0x48/0x50 [ 1703.622800][T19602] [ 1703.625127][T19602] Memory state around the buggy address: [ 1703.630769][T19602] ffff88807d066f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1703.638849][T19602] ffff88807d066f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1703.646930][T19602] >ffff88807d067000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1703.655005][T19602] ^ [ 1703.661697][T19602] ffff88807d067080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1703.669778][T19602] ffff88807d067100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1703.677850][T19602] ================================================================== [ 1703.701146][T19602] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1703.708410][T19602] CPU: 1 PID: 19602 Comm: syz.0.3902 Not tainted 6.1.130-syzkaller #0 [ 1703.716598][T19602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1703.726670][T19602] Call Trace: [ 1703.729966][T19602] [ 1703.732933][T19602] dump_stack_lvl+0x1e3/0x2cb [ 1703.737642][T19602] ? nf_tcp_handle_invalid+0x647/0x647 [ 1703.743123][T19602] ? panic+0x764/0x764 [ 1703.747217][T19602] ? preempt_schedule_common+0xa6/0xd0 [ 1703.752718][T19602] ? vscnprintf+0x59/0x80 [ 1703.757080][T19602] panic+0x318/0x764 [ 1703.761004][T19602] ? check_panic_on_warn+0x1d/0xa0 [ 1703.766277][T19602] ? memcpy_page_flushcache+0xfc/0xfc [ 1703.771695][T19602] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 1703.777704][T19602] ? _raw_spin_unlock+0x40/0x40 [ 1703.782600][T19602] check_panic_on_warn+0x7e/0xa0 [ 1703.787565][T19602] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 1703.793047][T19602] end_report+0x66/0x110 [ 1703.797301][T19602] kasan_report+0x143/0x160 [ 1703.801807][T19602] ? vfs_utimes+0x4b1/0x760 [ 1703.806316][T19602] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 1703.811780][T19602] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 1703.817245][T19602] kasan_check_range+0x27f/0x290 [ 1703.822187][T19602] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 1703.827644][T19602] memmove+0x25/0x60 [ 1703.831539][T19602] ext4_xattr_set_entry+0x909/0x1fa0 [ 1703.836828][T19602] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 1703.843245][T19602] ? ext4_xattr_block_set+0x7f4/0x3820 [ 1703.848696][T19602] ? kmemdup+0x41/0x60 [ 1703.852768][T19602] ? memcpy+0x3c/0x60 [ 1703.856763][T19602] ext4_xattr_block_set+0x97e/0x3820 [ 1703.862057][T19602] ? ext4_get_inode_loc+0x190/0x190 [ 1703.867270][T19602] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 1703.872729][T19602] ? xattr_find_entry+0x24b/0x310 [ 1703.877766][T19602] ? ext4_xattr_block_find+0x23d/0x2b0 [ 1703.883224][T19602] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 1703.889137][T19602] ? ext4_xattr_set+0x3d0/0x3d0 [ 1703.893993][T19602] ? rwsem_write_trylock+0x166/0x210 [ 1703.899285][T19602] ? clear_nonspinnable+0x60/0x60 [ 1703.904311][T19602] ? ext4_reserve_inode_write+0x2b3/0x360 [ 1703.910071][T19602] ? dquot_initialize_needed+0x128/0x320 [ 1703.915719][T19602] __ext4_expand_extra_isize+0x302/0x400 [ 1703.921446][T19602] __ext4_mark_inode_dirty+0x54f/0x920 [ 1703.926925][T19602] ? ext4_blocks_for_truncate+0x270/0x270 [ 1703.932644][T19602] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 1703.938455][T19602] ? seqcount_lockdep_reader_access+0x153/0x220 [ 1703.944698][T19602] ? ext4_journal_check_start+0x179/0x240 [ 1703.950420][T19602] ? ext4_dirty_inode+0x8b/0x100 [ 1703.955360][T19602] ? __ext4_journal_start_sb+0x1f1/0x410 [ 1703.960999][T19602] ext4_dirty_inode+0xbf/0x100 [ 1703.965768][T19602] ? __ext4_expand_extra_isize+0x400/0x400 [ 1703.971579][T19602] __mark_inode_dirty+0x331/0xf80 [ 1703.976599][T19602] ? i_gid_needs_update+0x4e/0x1c0 [ 1703.981710][T19602] ext4_setattr+0x755/0x1a00 [ 1703.986303][T19602] ? atime_needs_update+0x7b0/0x7b0 [ 1703.991509][T19602] ? evm_inode_setattr+0xfc/0x820 [ 1703.996544][T19602] ? rwsem_write_trylock+0x166/0x210 [ 1704.001835][T19602] ? bpf_lsm_inode_setattr+0x5/0x10 [ 1704.007035][T19602] ? ext4_write_inode+0x740/0x740 [ 1704.012064][T19602] notify_change+0xce3/0xfc0 [ 1704.016653][T19602] vfs_utimes+0x4b1/0x760 [ 1704.021002][T19602] ? __ia32_sys_sync_file_range2+0x110/0x110 [ 1704.026988][T19602] ? kasan_quarantine_put+0xd4/0x220 [ 1704.032279][T19602] ? kmem_cache_free+0x292/0x510 [ 1704.037226][T19602] ? user_path_at_empty+0x48/0x60 [ 1704.042258][T19602] __se_sys_utime+0x1dd/0x2d0 [ 1704.046939][T19602] ? __x64_sys_utime+0x60/0x60 [ 1704.051741][T19602] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1704.057725][T19602] ? lockdep_hardirqs_on+0x94/0x130 [ 1704.062928][T19602] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1704.068915][T19602] do_syscall_64+0x3b/0xb0 [ 1704.073327][T19602] ? clear_bhb_loop+0x45/0xa0 [ 1704.078006][T19602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1704.083908][T19602] RIP: 0033:0x7f885018d169 [ 1704.088326][T19602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1704.107938][T19602] RSP: 002b:00007f8851058038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 1704.116366][T19602] RAX: ffffffffffffffda RBX: 00007f88503a6160 RCX: 00007f885018d169 [ 1704.124341][T19602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000006a80 [ 1704.132393][T19602] RBP: 00007f885020e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1704.140369][T19602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1704.148336][T19602] R13: 0000000000000001 R14: 00007f88503a6160 R15: 00007ffcff4fbb58 [ 1704.156306][T19602] [ 1704.159631][T19602] Kernel Offset: disabled [ 1704.163960][T19602] Rebooting in 86400 seconds..