last executing test programs: 3m10.945085943s ago: executing program 1 (id=124): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$hiddev(r0, &(0x7f0000000100)=""/100, 0x64) connect$unix(r0, &(0x7f0000000180)=@abs={0xad0dfe6c089e391, 0x0, 0x4e21}, 0x6e) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x908, @mcast1, 0x1}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="0100"}) 3m10.831950437s ago: executing program 1 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0xfffffffffffffd9f) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)="b5", 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x130, 0x240, 0x0, 0x240, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fspick(0xffffffffffffffff, &(0x7f0000000640)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 3m10.158233527s ago: executing program 1 (id=130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) close_range(r0, 0xffffffffffffffff, 0x0) 3m9.808065522s ago: executing program 1 (id=132): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 3m9.16375743s ago: executing program 1 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) poll(0x0, 0x0, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x4e, 0x101240) fadvise64(r4, 0x8000000000000000, 0x9, 0x6) quotactl_fd$Q_SYNC(r3, 0xffffffff80000100, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$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") 3m3.335935812s ago: executing program 1 (id=152): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, 0x0, &(0x7f0000000380)=""/75}, 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r5, &(0x7f00000023c0)="8ce2ad4d", 0x4, 0x20000800, &(0x7f0000002400)={0x2, 0x4000, @multicast1}, 0x10) 2m48.152490008s ago: executing program 32 (id=152): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, 0x0, &(0x7f0000000380)=""/75}, 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r5, &(0x7f00000023c0)="8ce2ad4d", 0x4, 0x20000800, &(0x7f0000002400)={0x2, 0x4000, @multicast1}, 0x10) 2m8.271973744s ago: executing program 3 (id=253): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x6}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) writev(r7, &(0x7f0000000240), 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_GET_PIT(r9, 0xc048ae65, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002f400008500000082000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000380)={[{@debug}, {@discard}, {@usrquota}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}]}, 0x67, 0x52b, &(0x7f0000000a00)="$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") 2m7.387446072s ago: executing program 3 (id=254): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x348cf000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 2m6.074318999s ago: executing program 3 (id=256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x0, 0x7, 0xee0d, 0x9, 0x5}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000140)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") 2m0.293448749s ago: executing program 3 (id=270): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") creat(&(0x7f0000000140)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r5, &(0x7f0000000240)='./bus/file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x2) 1m57.557055347s ago: executing program 3 (id=274): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_VMA(0x27, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3}, 0x50) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5, 0xffffffffffffffff, 0x2000000}, 0xc) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') r6 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500adc588e7000000848fc5d0ffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m50.718991273s ago: executing program 3 (id=292): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(r0, &(0x7f0000000580)='net/ip6_tables_names\x00') connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000005c0)=r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$packet(0x11, 0x2, 0x300) ptrace$setregset(0x4205, 0x0, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000480021032cbd7000fbe3df250a000000", @ANYRES32=0x0, @ANYBLOB="04000000080002000600000014000100ff010000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) listen(r4, 0x86a) 1m35.546390259s ago: executing program 33 (id=292): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(r0, &(0x7f0000000580)='net/ip6_tables_names\x00') connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000005c0)=r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a50004000030a010300000000000000000500000708000540fffffffd0900010073797a30000000000900010073797a30000000000900010073797a300000000008000b400000000108000b4000000001f0000000000a000600000000000000000a0000070900010073797a31000000000800024000000002080002400000000108000240000000020800024000000003990006006c36e41ae036cabdf97442b97dd4768efe6d29ed40f427812be1b25f44cea59991352b6367bb516361f2893fb227f65f40679161c98ef7cb61d71089533058008cad4b88d250743a3c40f4dfb6562726a8a59d57021b786df5b4d6eac41fad8c90ba48fb68867da4c87ec95b96657a4c657a302102eacbe2e4585d0c16be29c38f971870690bbc22d4627740dd2b99a379ff9ea7a20000000c0019400000000000000002080002400000000220000000000a00030000000000000000050000090c000440000000000000000348000000180a010800000000000000000a0000040900020073797a31000000000900010073797a3100000000040003800900010073797a30000000000900010073797a31000000001c000000120a01020000000000000000020000070800034000000002140000001100010000000000000000000500000a677b153abd9c42b04f8c6258497b24bf4d97ac54041a53f794d494a723aa7629a38c610ae74d765f0355ab8ea72b17eaa8842450d47238c41d7b0b01dae9293b2ae716dbf59f8948e052012e401e6a175e04d69462954e35b9957fc444efd24b"], 0x1ec}}, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$packet(0x11, 0x2, 0x300) ptrace$setregset(0x4205, 0x0, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000480021032cbd7000fbe3df250a000000", @ANYRES32=0x0, @ANYBLOB="04000000080002000600000014000100ff010000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) listen(r4, 0x86a) 1m15.208290319s ago: executing program 0 (id=349): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") creat(0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) 1m13.005763304s ago: executing program 0 (id=352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_usb_connect(0x0, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403", @ANYBLOB="a9863f"], 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m9.484070236s ago: executing program 0 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r3, r2, 0x0) 1m8.643426283s ago: executing program 0 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x14) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) 1m5.851038774s ago: executing program 0 (id=365): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x6}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) writev(r7, &(0x7f0000000240), 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_PIT(r8, 0xc048ae65, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002f400008500000082000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000380)={[{@debug}, {@discard}, {@usrquota}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}]}, 0x67, 0x52b, &(0x7f0000000a00)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") 1m4.228863925s ago: executing program 0 (id=369): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1a) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) r7 = userfaultfd(0x80001) close_range(r7, 0xffffffffffffffff, 0x0) 48.340648744s ago: executing program 34 (id=369): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1a) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) r7 = userfaultfd(0x80001) close_range(r7, 0xffffffffffffffff, 0x0) 23.244448838s ago: executing program 5 (id=455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 22.044825943s ago: executing program 5 (id=458): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0x4, 0x0, &(0x7f00000004c0)="63eced8e", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setrlimit(0xf, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 15.106328476s ago: executing program 7 (id=467): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x40101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 14.823095209s ago: executing program 7 (id=468): rename(&(0x7f0000000100)='./file0\x00', 0x0) 14.616041799s ago: executing program 4 (id=469): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(r5, 0x0, 0x7, r6, &(0x7f0000000040)={r7, r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x80) 14.615309749s ago: executing program 7 (id=470): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = epoll_create(0x401) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000007c0)={0x90000001}) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073113d00000000008510000002000000850000007600000095000000000000009500a5050000000083d5fffa522e3fefee08fe3838911a1b22ff65141533153eabc277e2fe2b4f93ff6210dd82adf037566cc75c4e786f0f7b90c0dd934e3433af1bedadc1d5c39601737e9436988fe3488f49b2041ace164b46da7f401c07e2acc4d00352086a591f0d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000600)={[{}, {@noblock_validity}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0xd41}}, {@nogrpid}, {@nobh}, {@errors_remount}, {@noinit_itable}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}, 0x32}]}, 0x9f, 0x4f2, &(0x7f0000000a40)="$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") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x888, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x85c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1000000}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0xe, 0x5, 0x3, 0xda, 0x1, 0x7, 0x0, 0x1000, 0x0, 0xfffffffc, 0x3e8d, 0x80000000, 0xd7b, 0x7, 0x8, 0xffff, 0xfffffffc, 0x401, 0x5, 0x5, 0x7ff, 0xe, 0xfff, 0xf, 0xfffff001, 0x7, 0xe11, 0x3, 0x1, 0xfffffffc, 0x80000001, 0xd, 0x1, 0x7, 0x6, 0x9, 0xffffcc0b, 0x5, 0x2, 0xc5, 0x2, 0x5, 0x1, 0x1, 0xfa, 0x4, 0xfff, 0x0, 0x59c, 0xfffffffa, 0x7, 0x7, 0xfa4a, 0x1bd, 0x470c, 0x4, 0xb, 0x6, 0x10001, 0x7fff, 0x3, 0x9, 0x96, 0x0, 0x5, 0xffffffff, 0x1, 0xe, 0x6, 0x7, 0xfffff000, 0x80c5, 0x7, 0x2, 0x3, 0x8, 0x10000, 0x0, 0x1, 0x9, 0x5e39, 0x4, 0x4, 0x1, 0x291b, 0x4, 0x0, 0x9, 0xc, 0x8001, 0x0, 0x1ff, 0x3, 0xfffffffd, 0xfff, 0x80, 0x4, 0x2000000, 0x2, 0x28c, 0x5, 0x5, 0x3, 0x2, 0x202, 0xce5, 0x5, 0x9, 0x34, 0x5, 0x3, 0x14, 0x5, 0xb, 0x1, 0x3, 0x7, 0x2bc, 0x8, 0x4, 0x7fffffff, 0x3734, 0x1, 0xf0ca, 0xcf, 0xc8, 0x5, 0x7, 0x10, 0x3ff, 0xc, 0x5f, 0x3, 0x3, 0x5, 0x2, 0x9, 0x7fffffff, 0x80, 0x8, 0x9, 0x1, 0x12, 0x81, 0xb, 0x5, 0x1, 0x1ff, 0x100, 0x4, 0x1, 0x4, 0x10, 0x2, 0xe, 0x4, 0x101, 0x2, 0x20, 0x101, 0x7, 0x1, 0x2, 0x0, 0x1, 0x2, 0x1, 0x80000001, 0x3, 0x4, 0x2, 0x8000, 0x2, 0x4, 0x1000, 0x8, 0xffffff9d, 0x7, 0x6, 0x401, 0xffffc000, 0x4, 0x8, 0x8, 0x21, 0x5, 0x6, 0x3, 0xb87c, 0x0, 0xae0, 0xcb7, 0x8, 0x9, 0xdf0, 0x7, 0x3a2a, 0x2, 0x4, 0x8000, 0x9, 0x7, 0x2, 0xfffffffb, 0x7, 0x8, 0x90b6, 0x5, 0xfff, 0x9, 0x81, 0x3, 0x3c8, 0x7d, 0x5, 0x2, 0x6, 0x5, 0xb2f3, 0x0, 0x9, 0x1, 0x7, 0x63, 0xfffffffc, 0x8001, 0x3a, 0xe6, 0x2, 0x3ff, 0x4, 0x1ff, 0x5, 0x2, 0x8000, 0x80000001, 0xf0, 0x7, 0x28, 0x3, 0x2, 0x7, 0x2, 0x0, 0x9, 0x8, 0xfff, 0xfffffc21, 0x0, 0x5, 0x6, 0xc9, 0x0, 0x101]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1673, 0x20000000, 0xffffffe8, 0x5, 0x5, {0x7, 0x1, 0x2, 0x3, 0x81, 0x6}, {0xc, 0x1, 0x8000, 0x3, 0x100, 0x8}, 0x7, 0x5, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1f60, 0x16, 0x621a, 0x0, 0xc, 0x8, 0x7, 0x6, 0x8, 0x200, 0x3, 0xffffff01, 0x0, 0x100, 0xfffffffa, 0x1, 0x2, 0x8, 0xfffff50f, 0xffffafbe, 0x3, 0x6, 0x2, 0x31, 0x7d, 0x19f, 0x0, 0x5, 0x46e, 0x1, 0x9, 0x1000, 0x4, 0x8001, 0xa, 0xf, 0x7f2, 0x893, 0x80a8, 0x9, 0x4, 0x2, 0x1000, 0x0, 0x8, 0x0, 0x8, 0x8, 0xd72, 0xfff, 0x5, 0xe0000, 0x5, 0x100, 0x0, 0x0, 0x6, 0xef, 0xbde7, 0x1a4, 0x7, 0x400, 0x8, 0x2, 0x200, 0x9, 0x5606, 0x333969c9, 0x8, 0x8f0, 0x200, 0x4b7d, 0x9, 0x8, 0xffffff7f, 0x81, 0x2, 0x1, 0x3, 0xd, 0x1, 0x7fff, 0x7, 0xfffffff7, 0x5, 0x729e, 0x7ff, 0x2, 0x5ff, 0x2, 0x0, 0x4, 0xfffffff9, 0x9, 0x6, 0x1010, 0x4, 0x0, 0x1ff, 0x6, 0x4, 0x5, 0x3, 0x6, 0xa5, 0x1, 0x2, 0x19, 0xf18, 0x864, 0x0, 0x8, 0x45, 0x7, 0x1, 0x80000000, 0x2, 0x3, 0x7fffffff, 0x6, 0x1ff, 0x7, 0x3, 0x1, 0x4, 0x9, 0x7, 0x0, 0x2, 0x4, 0x7ff, 0x6, 0x1, 0x2, 0x6c6b, 0x200, 0x4, 0x80000000, 0x5b4, 0x9, 0x1, 0x9, 0xffffffff, 0x3, 0x3, 0x4, 0x8, 0x3, 0x7b5, 0x6e8, 0x80, 0x8, 0x1, 0x3, 0x4, 0x1ff, 0x4, 0x2, 0x8000, 0x6, 0x8c2b3531, 0x2, 0xa7, 0x0, 0x200, 0x8ca4, 0x4, 0x7, 0x4, 0x8001, 0x22c, 0x400, 0x5, 0x9, 0x5, 0x9, 0x399b, 0x0, 0x81, 0x100, 0x200, 0x4, 0x101, 0x9, 0xe, 0x81, 0x3, 0x4, 0x200, 0x3, 0xe7e, 0x3, 0x9, 0x40, 0x80000001, 0x1, 0x2, 0x5, 0x8, 0x8e1f, 0x7, 0x4, 0x3, 0xa, 0x3f, 0x5, 0x6, 0x1, 0xfffffffb, 0x8, 0x5, 0x2, 0xffff, 0x4, 0x296, 0xe9, 0xdb, 0x9, 0x2, 0x2856, 0x662, 0xe, 0x8, 0x4, 0x0, 0x9, 0x1, 0xd9a0333f, 0x3ff, 0xfffffffd, 0x72c6, 0xfffffffd, 0x1, 0x0, 0x3, 0xc, 0x4, 0x1fe0000, 0x40, 0x8000, 0x9, 0x2, 0xfffffff7, 0x401, 0x2, 0x2, 0x0, 0x6, 0x94, 0x3, 0x7f, 0x7fff, 0x9, 0x8, 0x8, 0x7]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000f40)={0x1b4, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x80000001}, @WGDEVICE_A_PEERS={0x144, 0x8, 0x0, 0x1, [{0x140, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x13c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0xb}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x59, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="660a00000000000061127c000000000018000000000000000000151e3830edc7b20e00000000000021649165a1905c811de4b5faf5204a7cb27b5e82a9448622759d4a20954ed7849e96ade143a95dff09d486c84b8796177bc3ccb9434d1483327d92d82ee8fb24dc5b25d7f8d9b9ea12cb39f45019b449cb1ffd52"], &(0x7f0000000000)='GPL\x00'}, 0x80) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000802, 0xfffffffffffffffe}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, 0x0, 0x4000080) 14.615033649s ago: executing program 5 (id=471): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 13.327058097s ago: executing program 5 (id=472): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4008040) 10.840017099s ago: executing program 6 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x348cf000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 10.362314481s ago: executing program 5 (id=476): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r2, 0x0, 0x298) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) unshare(0x62040200) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) getdents64(r8, 0x0, 0x0) 10.087966723s ago: executing program 4 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x3b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)={0x90, 0x0, 0x1, {0x1, 0x5, 0x9, 0xffffffffffffff7c, 0x3fe, 0x9, {0xa, 0xa000000000000003, 0x10, 0xfe2b260, 0x8, 0x800000000000, 0x2, 0x12, 0x3, 0xa000, 0x7, r2, r3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.563400657s ago: executing program 4 (id=478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0) 8.578297242s ago: executing program 6 (id=480): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.999417218s ago: executing program 4 (id=481): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x149000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002880)={&(0x7f0000002540)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf2516000000280001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="487e9290bf13d6532a36e0046111050003000100000005000400000000000500040000000000050003000000000005000200000000001c0001800800030001000000080001004ce19dfc5d99ea79d0e201b6307b16bf956a241831ce90c3aa83d15d7dc75451d3a687ee8941a9b503954be54228403041c0c5929b4b0740038573846a7f480dfa262653304520c96ccd6afb995422a750cde5763e91bb472c32f8cfc552c4e88c496b", @ANYRES32=0x0, @ANYBLOB="08000300030000006c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000014000200677265746170300000000000000000001400020070696d7265673000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0500020000000000"], 0xf4}, 0x1, 0x0, 0x0, 0x48001}, 0x200040c4) write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000002000000f30000007f0000000402000004002000e10c0000000400"/598], 0x258) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x600) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="7472616673d7167966646e863d0000758ae277f58cf7d10a27a9a6a6b4d85f996b6f3acfc70c1bff37b692f542c6a0c3ff7abab38d7de885c647edfcbf6cb4f99e86556ca07935760503a02cc1c9ff10aa81de62478877dd1cb9a6e24c33fa8c45487f2c04d0f3ff52f1d403ac8cd57410dbace5b16eca5e238cb697edffd5831fafa4f1b7af35c9d325a629681796f010e953e6b4c4f0ec", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r9}}) read$FUSE(r0, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r9, &(0x7f0000000180)={0x18, 0x0, r10, {0x1}}, 0x18) 7.643027634s ago: executing program 6 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x3fed, &(0x7f0000000380), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) 6.416553639s ago: executing program 6 (id=483): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 6.332012374s ago: executing program 2 (id=484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xa1}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x2}}}}}}, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 6.206209839s ago: executing program 7 (id=485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(', @ANYRES16, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 5.173749506s ago: executing program 6 (id=486): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) 3.588124707s ago: executing program 2 (id=487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getitimer(0x0, &(0x7f0000000280)) 3.239945923s ago: executing program 2 (id=488): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") creat(0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) 3.162476777s ago: executing program 7 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f400cf1077c877d474ca050203010902240001000000000904c800020805"], 0x0) sendmsg(r2, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000001b80), 0x0, &(0x7f0000001bc0)=[{0x10, 0x110, 0x8}], 0x10}, 0x8010) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.991343544s ago: executing program 4 (id=490): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xa}}]}}, 0x0, 0x32, 0x0, 0xa, 0x7}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) pwrite64(r1, &(0x7f0000000340)="57265465d2b1a9e1879a390786dd", 0xffffff3f, 0x100000000) 2.054880557s ago: executing program 2 (id=491): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) unshare(0x26020480) syz_open_dev$evdev(0x0, 0x200, 0x100080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 1.344016399s ago: executing program 2 (id=492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa2242) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000040)={0x54, 0x0, 0xc0d, {0x0, 0xd78}, {0x963d, 0xffff}, @cond=[{0x5, 0x1, 0x0, 0x7f, 0x1ff, 0x4}, {0xc, 0x7f, 0x1, 0xa, 0x2, 0x3}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYBLOB="020000000000a3d8000000000000000000000000b3be3b8cd4fc7a0d8005ddb36097eb9331ffdce193ee21d8cc", @ANYRES32, @ANYRES32, @ANYBLOB="0200000002000000050000000300"/28], 0x50) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010000305000000000000ffff0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c000280050007000000000005000a0000000000050009000000000008000500"], 0x5c}}, 0x0) 196.579791ms ago: executing program 4 (id=493): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) truncate(0x0, 0x0) 187.347751ms ago: executing program 2 (id=494): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x0) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000004dc0)={0x2020}, 0x2020) 40.087358ms ago: executing program 5 (id=495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x40, {0x7, 0x0, 0x0, r2, 0x0, 0x44662}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x4) 38.610908ms ago: executing program 6 (id=496): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 0s ago: executing program 7 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) kernel console output (not intermixed with test programs): 59e76b749 code=0x7ffc0000 [ 81.920259][ T26] audit: type=1326 audit(1763887331.266:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 82.780870][ T4485] loop0: detected capacity change from 0 to 128 [ 82.829878][ T4481] loop2: detected capacity change from 0 to 1024 [ 82.954474][ T4481] EXT4-fs (loop2): Ignoring removed orlov option [ 82.973731][ T4485] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.029149][ T4485] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.047179][ T4481] EXT4-fs (loop2): inline encryption not supported [ 84.270883][ T4481] EXT4-fs: error -4 creating inode table initialization thread [ 84.488502][ T4481] EXT4-fs (loop2): mount failed [ 84.825775][ T4287] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.065831][ T4287] usb 4-1: Using ep0 maxpacket: 8 [ 86.033976][ T4287] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 86.051345][ T4287] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 86.095690][ T4287] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 86.105073][ T4287] usb 4-1: config 250 has no interface number 0 [ 86.149532][ T4287] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 86.178572][ T4287] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 86.210415][ T4287] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 86.222666][ T4287] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 86.240648][ T4287] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 86.285220][ T4287] usb 4-1: config 250 interface 228 has no altsetting 0 [ 87.229625][ T4287] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 87.245656][ T4287] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 87.256008][ T4287] usb 4-1: Product: syz [ 87.260211][ T4287] usb 4-1: SerialNumber: syz [ 87.316777][ T4287] hub 4-1:250.228: bad descriptor, ignoring hub [ 87.323419][ T4287] hub: probe of 4-1:250.228 failed with error -5 [ 87.345724][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.596382][ T4287] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 87.610439][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 87.668515][ T4287] usb 4-1: USB disconnect, device number 5 [ 87.727717][ T4287] usblp0: removed [ 87.736276][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.801607][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.847062][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.877073][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.953794][ T7] usb 2-1: Product: syz [ 88.960167][ T7] usb 2-1: Manufacturer: syz [ 88.964810][ T7] usb 2-1: SerialNumber: syz [ 89.915857][ T7] usb 2-1: 0:2 : does not exist [ 89.976553][ T7] usb 2-1: USB disconnect, device number 2 [ 90.244072][ T4303] udevd[4303]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.064775][ T4580] netlink: 96 bytes leftover after parsing attributes in process `syz.3.76'. [ 91.906441][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 93.175972][ T4595] loop4: detected capacity change from 0 to 2048 [ 93.314294][ T4595] loop4: p1 p2 p3 [ 93.749525][ T3560] loop4: p1 p2 p3 [ 94.473417][ T4605] loop4: detected capacity change from 0 to 256 [ 94.518244][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 94.538160][ T4172] udevd[4172]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 94.548950][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 94.828865][ T4172] udevd[4172]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 94.839181][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 94.885282][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 96.131904][ T4287] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 96.425681][ T13] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 96.520737][ T4287] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.539409][ T4287] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.580364][ T4287] usb 4-1: config 0 interface 0 has no altsetting 0 [ 96.600557][ T4287] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 96.626854][ T4287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.661385][ T4287] usb 4-1: config 0 descriptor?? [ 96.745946][ T13] usb 2-1: not running at top speed; connect to a high speed hub [ 96.825942][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.841628][ T13] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 96.861475][ T13] usb 2-1: config 1 has no interface number 1 [ 96.868065][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 96.895758][ T13] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 97.081534][ T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.126127][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.134640][ T13] usb 2-1: Product: syz [ 97.144617][ T13] usb 2-1: Manufacturer: syz [ 97.152988][ T13] usb 2-1: SerialNumber: syz [ 97.188272][ T4287] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 97.207121][ T4287] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 97.214430][ T4287] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 97.314437][ T4287] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 97.329206][ T4287] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 97.341941][ T4287] logitech 0003:046D:C298.0004: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.3-1/input0 [ 97.907809][ T4287] logitech 0003:046D:C298.0004: no inputs found [ 97.919661][ T4287] usb 4-1: USB disconnect, device number 6 [ 98.829616][ T13] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 98.973086][ T13] usb 2-1: USB disconnect, device number 3 [ 99.038565][ T4638] fido_id[4638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 99.213330][ T4647] loop1: detected capacity change from 0 to 512 [ 99.377598][ T26] audit: type=1326 audit(1763887349.506:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 99.411306][ T4647] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 99.442129][ T26] audit: type=1326 audit(1763887349.506:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 99.465235][ T26] audit: type=1326 audit(1763887349.506:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 99.468936][ T4647] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 99.498070][ T26] audit: type=1326 audit(1763887349.506:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 99.531800][ T4652] udevd[4652]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.614695][ T26] audit: type=1326 audit(1763887349.506:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 99.650435][ T4647] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 99.663818][ T26] audit: type=1326 audit(1763887349.506:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 99.699900][ T26] audit: type=1326 audit(1763887349.506:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 99.726923][ T26] audit: type=1326 audit(1763887349.506:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 99.730147][ T4647] EXT4-fs (loop1): orphan cleanup on readonly fs [ 99.810061][ T4647] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.95: bg 0: block 361: padding at end of block bitmap is not set [ 99.907754][ T4647] EXT4-fs (loop1): Remounting filesystem read-only [ 99.919573][ T4647] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 99.949936][ T4647] EXT4-fs (loop1): Remounting filesystem read-only [ 100.015666][ T4647] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.95: attempt to clear invalid blocks 33619980 len 1 [ 100.059254][ T4647] EXT4-fs (loop1): Remounting filesystem read-only [ 100.100867][ T4647] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.95: invalid indirect mapped block 1811939328 (level 0) [ 100.152259][ T4647] EXT4-fs (loop1): Remounting filesystem read-only [ 100.171649][ T4647] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.95: invalid indirect mapped block 2185560079 (level 1) [ 100.197284][ T26] audit: type=1326 audit(1763887350.356:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 100.341250][ T4647] EXT4-fs (loop1): Remounting filesystem read-only [ 100.351269][ T4647] EXT4-fs (loop1): 1 truncate cleaned up [ 100.364964][ T26] audit: type=1326 audit(1763887350.376:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 100.465731][ T4647] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none. [ 102.537211][ T4694] syz.3.106[4694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.537316][ T4694] syz.3.106[4694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.627522][ T4704] capability: warning: `syz.3.106' uses deprecated v2 capabilities in a way that may be insecure [ 102.775703][ T4272] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.395839][ T4272] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 103.405400][ T4272] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 103.426230][ T4272] usb 3-1: config 0 has no interface number 0 [ 103.736078][ T4272] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 103.745274][ T4272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.827402][ T4272] usb 3-1: Product: syz [ 103.972409][ T4272] usb 3-1: Manufacturer: syz [ 104.079467][ T4272] usb 3-1: SerialNumber: syz [ 104.273801][ T4272] usb 3-1: config 0 descriptor?? [ 104.654078][ T26] kauditd_printk_skb: 82 callbacks suppressed [ 104.654094][ T26] audit: type=1326 audit(1763887354.806:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 104.799564][ T26] audit: type=1326 audit(1763887354.806:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 104.925723][ T26] audit: type=1326 audit(1763887354.806:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 105.095911][ T4272] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 105.102450][ T4272] usb 3-1: No valid video chain found. [ 105.126978][ T26] audit: type=1326 audit(1763887354.806:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 105.175191][ T4735] loop0: detected capacity change from 0 to 1024 [ 105.222375][ T26] audit: type=1326 audit(1763887354.806:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 105.269538][ T4735] EXT4-fs (loop0): Ignoring removed bh option [ 105.285641][ T4735] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.299136][ T4287] usb 3-1: USB disconnect, device number 4 [ 105.306946][ T26] audit: type=1326 audit(1763887354.806:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 105.401228][ T26] audit: type=1326 audit(1763887354.806:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 105.424581][ T4735] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,resuid=0x0000000000000000,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 105.511780][ T26] audit: type=1326 audit(1763887354.806:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 105.539246][ T4727] futex_wake_op: syz.1.118 tries to shift op by 144; fix this program [ 105.877414][ T4742] loop0: detected capacity change from 0 to 512 [ 105.994648][ T4742] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 106.025832][ T4742] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.195645][ T4287] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 106.381332][ T4756] overlayfs: workdir and upperdir must be separate subtrees [ 106.556152][ T4287] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.589715][ T4287] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.775934][ T4287] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.795915][ T4287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.817261][ T4287] usb 3-1: Product: syz [ 106.823126][ T4287] usb 3-1: Manufacturer: syz [ 106.830006][ T4287] usb 3-1: SerialNumber: syz [ 107.738019][ T26] audit: type=1326 audit(1763887357.886:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141d80b749 code=0x7ffc0000 [ 107.775955][ T4287] usb 3-1: cannot find UAC_HEADER [ 107.931412][ T4781] loop4: detected capacity change from 0 to 128 [ 107.932378][ T4287] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 107.995690][ T4287] usb 3-1: USB disconnect, device number 5 [ 108.005782][ T26] audit: type=1326 audit(1763887357.886:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141d80b749 code=0x7ffc0000 [ 109.239338][ T4781] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.296380][ T4781] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.466347][ T4797] loop2: detected capacity change from 0 to 512 [ 109.576265][ T4797] EXT4-fs (loop2): Ignoring removed bh option [ 109.597236][ T4303] udevd[4303]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.970240][ T4797] EXT4-fs (loop2): 1 truncate cleaned up [ 109.995749][ T4797] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,errors=remount-ro,bh,noload,usrquota,usrjquota=,. Quota mode: writeback. [ 110.247715][ T4803] loop1: detected capacity change from 0 to 16 [ 110.358111][ T4797] overlayfs: upper fs needs to support d_type. [ 110.481293][ T4797] overlayfs: conflicting lowerdir path [ 110.774832][ T4803] erofs: (device loop1): mounted with root inode @ nid 36. [ 112.030998][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 112.031014][ T26] audit: type=1326 audit(1763887362.186:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 112.127728][ T26] audit: type=1326 audit(1763887362.186:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 112.281727][ T26] audit: type=1326 audit(1763887362.186:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 112.441921][ T26] audit: type=1326 audit(1763887362.186:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 113.140871][ T26] audit: type=1326 audit(1763887362.196:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 113.255421][ T26] audit: type=1326 audit(1763887362.196:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 113.341257][ T26] audit: type=1326 audit(1763887363.496:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4840 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 113.364833][ T4839] loop3: detected capacity change from 0 to 256 [ 113.446045][ T26] audit: type=1326 audit(1763887363.546:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4840 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 113.494108][ T4841] loop4: detected capacity change from 0 to 2048 [ 113.546732][ T26] audit: type=1326 audit(1763887363.546:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4840 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 113.629265][ T4841] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000004,,errors=continue. Quota mode: none. [ 113.785301][ T26] audit: type=1326 audit(1763887363.546:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4840 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 113.819216][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'. [ 113.842674][ T4841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.149'. [ 114.152482][ T2856] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.680186][ T2856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.732320][ T2856] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.046911][ T4867] loop2: detected capacity change from 0 to 1024 [ 115.093905][ T4867] EXT4-fs (loop2): inline encryption not supported [ 115.115757][ T4867] EXT4-fs (loop2): Ignoring removed nobh option [ 115.135773][ T4867] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 115.145765][ T2856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.154850][ T2856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.178082][ T4867] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.181940][ T2856] usb 2-1: Product: syz [ 115.380189][ T2856] usb 2-1: Manufacturer: syz [ 115.384874][ T2856] usb 2-1: SerialNumber: syz [ 115.805855][ T2856] cdc_mbim 2-1:1.0: skipping garbage [ 115.914000][ T4867] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,data_err=abort,barrier=0x0000000000000002,dioread_lock,sysvgroups,inlinecrypt,data_err=ignore,grpquota,nobh,delalloc,mblk_io_submit,dioread_nolock,,errors=continue. Quota mode: writeback. [ 116.008530][ T4848] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 116.867181][ T4848] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.056569][ T2856] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 117.243909][ T2856] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 117.335996][ T2856] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 117.356783][ T2856] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 117.428095][ T4902] loop4: detected capacity change from 0 to 128 [ 117.660225][ T2856] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 2a:c8:d8:67:25:f5 [ 117.744414][ T4902] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.387133][ T4902] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.818733][ T4848] ipt_CLUSTERIP: Please specify destination IP [ 119.978213][ T26] kauditd_printk_skb: 70 callbacks suppressed [ 119.978230][ T26] audit: type=1326 audit(1763887370.136:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 120.525636][ T26] audit: type=1326 audit(1763887370.166:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 120.731123][ T26] audit: type=1326 audit(1763887370.166:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 120.935959][ T26] audit: type=1326 audit(1763887370.166:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 122.269932][ T4947] loop3: detected capacity change from 0 to 512 [ 122.444588][ T26] audit: type=1326 audit(1763887370.166:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 122.899463][ T26] audit: type=1326 audit(1763887370.166:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 123.123885][ T4947] EXT4-fs (loop3): Ignoring removed oldalloc option [ 124.023492][ T4947] EXT4-fs: failed to create workqueue [ 124.023510][ T4947] EXT4-fs (loop3): mount failed [ 124.402310][ T3853] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 125.943984][ T4979] loop2: detected capacity change from 0 to 128 [ 126.016414][ T4979] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.044804][ T4979] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.536811][ T26] audit: type=1326 audit(1763887379.696:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 129.646322][ T26] audit: type=1326 audit(1763887379.706:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 129.839221][ T26] audit: type=1326 audit(1763887379.706:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 129.935687][ T26] audit: type=1326 audit(1763887379.706:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 130.045689][ T26] audit: type=1326 audit(1763887379.706:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 130.101835][ T26] audit: type=1326 audit(1763887379.706:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 130.189478][ T26] audit: type=1326 audit(1763887379.736:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 130.217988][ T5019] chnl_net:caif_netlink_parms(): no params data found [ 131.985119][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 132.247454][ T5019] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.279382][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.313155][ T5019] device bridge_slave_0 entered promiscuous mode [ 132.364160][ T5019] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.397070][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.439702][ T5019] device bridge_slave_1 entered promiscuous mode [ 132.583104][ T5019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.647985][ T5019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.760669][ T5019] team0: Port device team_slave_0 added [ 132.794577][ T5019] team0: Port device team_slave_1 added [ 132.809201][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.816040][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.931132][ T5019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.960634][ T5019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.156436][ T5019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.229250][ T5045] loop0: detected capacity change from 0 to 128 [ 133.239001][ T5019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.285940][ T5019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.363244][ T5019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.566541][ T5045] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.585885][ T5045] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.725782][ T4272] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.098166][ T4272] usb 3-1: Using ep0 maxpacket: 8 [ 134.156010][ T26] audit: type=1326 audit(1763887384.226:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 134.346500][ T5019] device hsr_slave_0 entered promiscuous mode [ 134.412419][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 134.415984][ T26] audit: type=1326 audit(1763887384.286:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 134.441700][ T4272] usb 3-1: unable to get BOS descriptor or descriptor too short [ 134.640402][ T5019] device hsr_slave_1 entered promiscuous mode [ 134.669253][ T5019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.715888][ T4272] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 134.949650][ T4272] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 134.968180][ T5019] Cannot create hsr debugfs directory [ 135.000704][ T4272] usb 3-1: config 4 has no interface number 0 [ 135.196229][ T4272] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 135.223721][ T4272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.251719][ T4272] usb 3-1: Product: syz [ 135.265652][ T4272] usb 3-1: Manufacturer: syz [ 135.286050][ T4272] usb 3-1: SerialNumber: syz [ 135.348051][ T4223] usb 2-1: USB disconnect, device number 4 [ 135.356419][ T4223] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 137.125352][ T5078] loop2: detected capacity change from 0 to 512 [ 137.945895][ T4345] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.060270][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 139.625824][ T2337] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.966803][ T4272] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 140.024921][ T4272] usb 3-1: No valid video chain found. [ 140.338569][ T4272] usb 3-1: USB disconnect, device number 6 [ 140.640027][ T4192] Bluetooth: hci5: command 0x0419 tx timeout [ 140.782242][ T5112] loop3: detected capacity change from 0 to 128 [ 140.812096][ T2337] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.878561][ T2337] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 141.048399][ T4345] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.100888][ T5112] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.260505][ T5112] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.656738][ T2337] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 141.825885][ T2337] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.845875][ T2337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.854008][ T2337] usb 1-1: Product: syz [ 141.884291][ T2337] usb 1-1: Manufacturer: syz [ 141.903319][ T2337] usb 1-1: SerialNumber: syz [ 142.322839][ T2337] cdc_ncm 1-1:1.0: skipping garbage [ 142.344655][ T4345] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.958367][ T4345] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.035797][ T2337] cdc_ncm 1-1:1.0: bind() failure [ 143.052453][ T2337] usb 1-1: USB disconnect, device number 3 [ 143.179442][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 143.200700][ T5142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 144.469961][ T26] audit: type=1326 audit(1763887394.606:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 145.085770][ T26] audit: type=1326 audit(1763887394.616:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 145.178514][ T26] audit: type=1326 audit(1763887394.616:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 145.211685][ T26] audit: type=1326 audit(1763887394.616:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 145.235412][ T5019] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.275225][ T5163] loop3: detected capacity change from 0 to 1024 [ 145.291711][ T26] audit: type=1326 audit(1763887394.616:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 145.365086][ T5019] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.373123][ T26] audit: type=1326 audit(1763887394.616:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 145.399092][ T5019] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.436759][ T5163] EXT4-fs (loop3): inline encryption not supported [ 145.463237][ T5163] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.485628][ T26] audit: type=1326 audit(1763887394.626:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 145.510564][ T5019] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.582453][ T26] audit: type=1326 audit(1763887394.626:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 145.586437][ T5163] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 147.566776][ T5190] loop2: detected capacity change from 0 to 128 [ 147.778508][ T5190] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.803254][ T5162] loop0: detected capacity change from 0 to 40427 [ 147.889991][ T5190] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.972572][ T5162] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 149.140395][ T5204] loop4: detected capacity change from 0 to 256 [ 149.373455][ T5162] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 149.949286][ T5019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.082225][ T5162] F2FS-fs (loop0): invalid crc value [ 150.091263][ T5019] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.122600][ T5204] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 150.397632][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.444155][ T5162] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 150.469394][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.566610][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.824932][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.543767][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.551078][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.673685][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.851284][ T26] audit: type=1326 audit(1763887402.196:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 153.042637][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.052952][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.062280][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.070218][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.093524][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.104948][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.114668][ T26] audit: type=1326 audit(1763887402.196:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 153.199625][ T5019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.245631][ T5019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.274225][ T26] audit: type=1326 audit(1763887402.196:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 153.296805][ T26] audit: type=1326 audit(1763887402.196:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 153.343408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.352330][ T26] audit: type=1326 audit(1763887402.196:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 153.496864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.588266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.633006][ T26] audit: type=1326 audit(1763887402.196:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 153.699116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.779587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.851548][ T26] audit: type=1326 audit(1763887402.206:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 153.904895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.052225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.080697][ T26] audit: type=1326 audit(1763887402.206:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 154.106179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.116928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.125003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.461271][ T5217] syz.3.222[5217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.461379][ T5217] syz.3.222[5217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.966845][ T5217] netlink: 'syz.3.222': attribute type 4 has an invalid length. [ 156.321557][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 156.345582][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 156.354579][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 156.363470][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 156.372528][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 156.381883][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 156.390885][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 156.399772][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 156.408770][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 156.417664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 156.977105][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.984920][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.050638][ T5278] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.063817][ T5278] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 157.777706][ T5279] loop2: detected capacity change from 0 to 512 [ 158.105447][ T5279] EXT4-fs (loop2): Ignoring removed nobh option [ 158.112703][ T5279] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.058802][ T5279] EXT4-fs: failed to create workqueue [ 160.064359][ T5279] EXT4-fs (loop2): mount failed [ 160.479228][ T5019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.627717][ T4345] device hsr_slave_0 left promiscuous mode [ 161.736964][ T4345] device hsr_slave_1 left promiscuous mode [ 161.829121][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.880453][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.908662][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.941366][ T26] audit: type=1326 audit(1763887412.336:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 162.978106][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.048218][ T4345] device bridge_slave_1 left promiscuous mode [ 163.056165][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.120291][ T4345] device bridge_slave_0 left promiscuous mode [ 163.158486][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.209934][ T26] audit: type=1326 audit(1763887412.336:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 163.532928][ T26] audit: type=1326 audit(1763887412.336:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 163.582531][ T26] audit: type=1326 audit(1763887412.346:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 163.723783][ T4345] device veth1_macvtap left promiscuous mode [ 163.795661][ T26] audit: type=1326 audit(1763887412.346:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 163.820164][ T4345] device veth0_macvtap left promiscuous mode [ 163.880741][ T4345] device veth1_vlan left promiscuous mode [ 163.920370][ T4345] device veth0_vlan left promiscuous mode [ 163.952669][ T5328] loop0: detected capacity change from 0 to 128 [ 163.961299][ T26] audit: type=1326 audit(1763887412.346:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 163.986850][ T26] audit: type=1326 audit(1763887412.346:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 164.019002][ T26] audit: type=1326 audit(1763887412.346:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 164.147783][ T5328] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.200017][ T5328] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 166.605524][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 166.658977][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 166.713383][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.775021][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.875018][ T5347] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 166.904639][ T4345] bond0 (unregistering): Released all slaves [ 167.869729][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.896405][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.930889][ T5019] device veth0_vlan entered promiscuous mode [ 167.972910][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.026464][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.065194][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.109575][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.183518][ T5019] device veth1_vlan entered promiscuous mode [ 168.288565][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.307777][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.365777][ T26] audit: type=1326 audit(1763887418.506:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5371 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 168.402333][ T5019] device veth0_macvtap entered promiscuous mode [ 168.443309][ T26] audit: type=1326 audit(1763887418.556:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5371 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 168.484783][ T5019] device veth1_macvtap entered promiscuous mode [ 168.557421][ T26] audit: type=1326 audit(1763887418.556:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5371 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 168.566139][ T5019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.689180][ T26] audit: type=1326 audit(1763887418.556:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5371 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 168.697959][ T5019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.826558][ T26] audit: type=1326 audit(1763887418.556:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5371 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 168.919111][ T5019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.929887][ T5019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.940263][ T5019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.950847][ T5019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.960732][ T5019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.971281][ T5019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.006161][ T5019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.021484][ T26] audit: type=1326 audit(1763887418.556:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5371 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59e76b749 code=0x7ffc0000 [ 169.116321][ T5019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.252716][ T5019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.283360][ T5019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.374543][ T5019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.435394][ T5019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.515053][ T5019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.585621][ T5019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.685484][ T5019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.733149][ T5019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.764622][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.783991][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.815166][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.834801][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.870135][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.893957][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.923073][ T5019] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.959733][ T5019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.979474][ T5019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.011949][ T5019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.242973][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.258012][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.303825][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.341116][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.373836][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.436184][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.786876][ T4223] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 172.355955][ T4223] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 172.387948][ T4223] usb 6-1: config 0 has no interface number 0 [ 172.394126][ T4223] usb 6-1: config 0 interface 41 has no altsetting 0 [ 172.424832][ T5424] overlayfs: failed to resolve './file0': -2 [ 172.795743][ T26] audit: type=1326 audit(1763887422.916:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 172.805656][ T4223] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 172.824116][ T5433] loop3: detected capacity change from 0 to 128 [ 172.867493][ T4223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.876772][ T4223] usb 6-1: Product: syz [ 172.926817][ T4223] usb 6-1: Manufacturer: syz [ 172.931732][ T4223] usb 6-1: SerialNumber: syz [ 173.064787][ T26] audit: type=1326 audit(1763887422.916:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 173.162009][ T4223] usb 6-1: config 0 descriptor?? [ 173.954964][ T26] audit: type=1326 audit(1763887422.916:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 173.965897][ T5433] EXT4-fs: error -4 creating inode table initialization thread [ 173.987450][ T5433] EXT4-fs (loop3): mount failed [ 174.751478][ T26] audit: type=1326 audit(1763887422.916:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 175.251364][ T4223] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 175.271456][ T4223] CoreChips: probe of 6-1:0.41 failed with error -71 [ 175.290078][ T4223] usb 6-1: USB disconnect, device number 2 [ 175.383963][ T26] audit: type=1326 audit(1763887422.916:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 175.499565][ T26] audit: type=1326 audit(1763887422.916:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 175.581708][ T26] audit: type=1326 audit(1763887422.916:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 175.706208][ T26] audit: type=1326 audit(1763887422.916:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 175.769342][ T26] audit: type=1326 audit(1763887422.916:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 176.550672][ T26] audit: type=1326 audit(1763887422.916:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 176.606523][ T26] audit: type=1326 audit(1763887422.916:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 176.645843][ T26] audit: type=1326 audit(1763887422.986:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3154f21749 code=0x7ffc0000 [ 176.925047][ T5482] loop3: detected capacity change from 0 to 128 [ 177.967335][ T5482] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.041861][ T5482] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.248187][ T5516] Zero length message leads to an empty skb [ 181.836252][ T4295] Bluetooth: hci0: command 0x0406 tx timeout [ 181.842349][ T4295] Bluetooth: hci1: command 0x0406 tx timeout [ 181.879044][ T4295] Bluetooth: hci2: command 0x0406 tx timeout [ 181.956978][ T4295] Bluetooth: hci3: command 0x0406 tx timeout [ 182.036298][ T5524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 185.139924][ T5574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.925171][ T5610] overlayfs: missing 'lowerdir' [ 189.324313][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 190.173453][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.182199][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.194210][ T5627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.355958][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.424108][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.798256][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 191.988296][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.058011][ T7] usb 3-1: SerialNumber: syz [ 193.485675][ T7] usb 3-1: can't set config #1, error -71 [ 193.528046][ T7] usb 3-1: USB disconnect, device number 7 [ 194.297646][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.304616][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.567751][ T5663] loop2: detected capacity change from 0 to 256 [ 195.773510][ T5663] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 196.842160][ T5675] overlayfs: missing 'lowerdir' [ 197.415243][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 197.415280][ T26] audit: type=1326 audit(1763887447.566:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5671 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 197.422278][ T26] audit: type=1326 audit(1763887447.576:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5671 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 197.423846][ T26] audit: type=1326 audit(1763887447.576:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5671 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 197.431557][ T26] audit: type=1326 audit(1763887447.586:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5671 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 197.553341][ T26] audit: type=1326 audit(1763887447.696:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5671 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 197.574786][ T26] audit: type=1326 audit(1763887447.716:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5671 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 199.105757][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.035869][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.071601][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.141733][ T7] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.221350][ T26] audit: type=1326 audit(1763887450.376:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 200.223051][ T7] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 201.145604][ T26] audit: type=1326 audit(1763887450.426:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 201.162329][ T7] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.346442][ T26] audit: type=1326 audit(1763887450.426:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 201.385861][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.425644][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.185902][ T26] audit: type=1326 audit(1763887450.426:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 202.270773][ T7] usb 6-1: Product: syz [ 202.274999][ T7] usb 6-1: Manufacturer: syz [ 202.322626][ T7] usb 6-1: SerialNumber: syz [ 202.365844][ T7] usb 6-1: can't set config #1, error -71 [ 202.440780][ T7] usb 6-1: USB disconnect, device number 3 [ 202.452768][ T26] audit: type=1326 audit(1763887450.436:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 202.660058][ T26] audit: type=1326 audit(1763887450.436:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 202.775657][ T26] audit: type=1326 audit(1763887450.436:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 203.083530][ T26] audit: type=1326 audit(1763887450.446:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 203.164535][ T5742] overlayfs: missing 'lowerdir' [ 203.838170][ T5746] loop0: detected capacity change from 0 to 512 [ 205.425600][ T26] audit: type=1326 audit(1763887450.446:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 205.454900][ T5746] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 205.465735][ T5746] System zones: 0-2, 18-18, 34-34 [ 205.471942][ T5746] EXT4-fs (loop0): orphan cleanup on readonly fs [ 205.479535][ T5746] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.322: bad orphan inode 13 [ 205.491029][ T5746] ext4_test_bit(bit=12, block=18) = 1 [ 205.496794][ T5746] is_bad_inode(inode)=0 [ 205.500968][ T5746] NEXT_ORPHAN(inode)=2130706432 [ 205.505918][ T5746] max_ino=32 [ 205.509130][ T5746] i_nlink=1 [ 205.512471][ T5746] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,inode_readahead_blks=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 205.565994][ T26] audit: type=1326 audit(1763887450.456:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 205.719566][ T26] audit: type=1326 audit(1763887450.456:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 206.075934][ T2337] Bluetooth: hci4: command 0x0409 tx timeout [ 206.115878][ T26] audit: type=1326 audit(1763887450.456:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 206.370546][ T26] audit: type=1326 audit(1763887450.506:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 206.605310][ T26] audit: type=1326 audit(1763887450.506:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 207.584131][ T5740] chnl_net:caif_netlink_parms(): no params data found [ 207.800063][ T5784] 9pnet: Insufficient options for proto=fd [ 207.962108][ T5784] netlink: 'syz.4.328': attribute type 16 has an invalid length. [ 207.970414][ T5784] netlink: 'syz.4.328': attribute type 17 has an invalid length. [ 208.004224][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.012420][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.051226][ T5784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.621663][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 208.829640][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.854794][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.887131][ T5740] device bridge_slave_0 entered promiscuous mode [ 208.917521][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.976751][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.985188][ T5740] device bridge_slave_1 entered promiscuous mode [ 209.128654][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.169915][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.292336][ T5740] team0: Port device team_slave_0 added [ 209.319934][ T5740] team0: Port device team_slave_1 added [ 209.445284][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.463437][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.517589][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.557908][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.572676][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.651933][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.873876][ T5740] device hsr_slave_0 entered promiscuous mode [ 209.896233][ T5740] device hsr_slave_1 entered promiscuous mode [ 209.917691][ T5740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.963340][ T5740] Cannot create hsr debugfs directory [ 210.661289][ T5740] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.689686][ T5740] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.952302][ T2337] Bluetooth: hci4: command 0x040f tx timeout [ 212.701228][ T5826] loop5: detected capacity change from 0 to 512 [ 212.922680][ T5740] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 213.005686][ T5826] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 213.013883][ T5826] System zones: 0-2, 18-18, 34-34 [ 213.020355][ T5826] EXT4-fs (loop5): orphan cleanup on readonly fs [ 213.027554][ T5740] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 213.027640][ T5826] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.334: bad orphan inode 13 [ 213.045699][ T5826] ext4_test_bit(bit=12, block=18) = 1 [ 213.051482][ T5826] is_bad_inode(inode)=0 [ 213.055873][ T5826] NEXT_ORPHAN(inode)=2130706432 [ 213.060746][ T5826] max_ino=32 [ 213.064682][ T5826] i_nlink=1 [ 213.068039][ T5826] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,inode_readahead_blks=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 213.093853][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 213.147628][ T5831] loop0: detected capacity change from 0 to 128 [ 213.313934][ T5831] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.350961][ T5831] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.420518][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.704603][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.023323][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.076046][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.268385][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.296349][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.370738][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.377988][ T4268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.436478][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.455046][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.483969][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.509546][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.516835][ T4268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.596182][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.628891][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.675911][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.714604][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.763054][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.788593][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.825122][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.845945][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.855882][ T4295] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 215.865001][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.908572][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.954255][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.987746][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.064363][ T26] audit: type=1326 audit(1763887466.216:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 216.115913][ T4295] usb 1-1: Using ep0 maxpacket: 32 [ 216.215599][ T26] audit: type=1326 audit(1763887466.216:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 216.264620][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.435104][ T26] audit: type=1326 audit(1763887466.216:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 216.443111][ T4295] usb 1-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 216.495589][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.546773][ T4295] usb 1-1: config 0 descriptor?? [ 216.778903][ T26] audit: type=1326 audit(1763887466.216:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 217.179153][ T4295] wacom 0003:056A:4004.0005: unknown main item tag 0x0 [ 217.226819][ T4295] wacom 0003:056A:4004.0005: unknown main item tag 0x0 [ 217.313671][ T26] audit: type=1326 audit(1763887466.216:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 217.346240][ T4295] wacom 0003:056A:4004.0005: hidraw0: USB HID vb.27 Device [HID 056a:4004] on usb-dummy_hcd.0-1/input0 [ 217.348613][ T26] audit: type=1326 audit(1763887466.246:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 217.445863][ T4295] usb 1-1: USB disconnect, device number 4 [ 217.580160][ T26] audit: type=1326 audit(1763887466.246:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 217.623484][ T26] audit: type=1326 audit(1763887466.246:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 217.624536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.964322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.283783][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.343282][ T5884] fido_id[5884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 218.796258][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 219.855726][ T7] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 220.033227][ T5914] overlayfs: missing 'lowerdir' [ 220.479701][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.499338][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.628039][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.665118][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.695344][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.725493][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.803902][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.826913][ T5740] device veth0_vlan entered promiscuous mode [ 221.714676][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14660, setting to 64 [ 221.745653][ T7] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 221.755191][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.817389][ T5740] device veth1_vlan entered promiscuous mode [ 221.870418][ T7] usb 5-1: config 0 descriptor?? [ 221.888597][ T5929] loop0: detected capacity change from 0 to 128 [ 221.935932][ T5904] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 221.984049][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.027902][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.044925][ T5929] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.056441][ T5929] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.099706][ T5740] device veth0_macvtap entered promiscuous mode [ 222.111047][ T5740] device veth1_macvtap entered promiscuous mode [ 222.131949][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.142737][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.152951][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.163781][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.197816][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.315351][ T5935] loop5: detected capacity change from 0 to 512 [ 222.373930][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.385413][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.400863][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.413289][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.426741][ T7] cypress 0003:04B4:DE64.0006: item fetching failed at offset 0/3 [ 222.773042][ T7] cypress 0003:04B4:DE64.0006: parse failed [ 223.815037][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.826688][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.856708][ T7] cypress: probe of 0003:04B4:DE64.0006 failed with error -22 [ 223.872133][ T7] usb 5-1: USB disconnect, device number 2 [ 223.985639][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.004281][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.046758][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.086797][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.177218][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.262574][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.975669][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 226.099320][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.147553][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.162252][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.173503][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.183934][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.194598][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.204485][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.310349][ T5967] overlayfs: missing 'lowerdir' [ 226.513124][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.606358][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.835335][ T5740] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.895575][ T5740] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.924891][ T5740] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.945690][ T7] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 226.955575][ T5740] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.959485][ T7] usb 1-1: config 0 has no interface number 0 [ 226.996365][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.069140][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.102787][ T5984] tipc: Failed to remove unknown binding: 66,1,1/0:116895006/116895008 [ 228.245728][ T5984] tipc: Failed to remove unknown binding: 66,1,1/0:116895006/116895008 [ 228.303726][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.311984][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 228.312019][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.334367][ T7] usb 1-1: config 0 descriptor?? [ 228.356050][ T7] usb 1-1: can't set config #0, error -71 [ 228.386300][ T7] usb 1-1: USB disconnect, device number 5 [ 228.729573][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.758717][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.767601][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.840293][ T5998] serio: Serial port ptm0 [ 228.850045][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.909208][ T6005] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.967727][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.998831][ T6005] exFAT-fs (loop0): unable to read boot sector [ 229.055663][ T6005] exFAT-fs (loop0): failed to read boot sector [ 229.215165][ T6005] exFAT-fs (loop0): failed to recognize exfat type [ 230.985732][ T26] audit: type=1326 audit(1763887480.636:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.5.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 231.060030][ T6015] loop6: detected capacity change from 0 to 1024 [ 231.126020][ T26] audit: type=1326 audit(1763887480.646:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.5.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 231.349517][ T6015] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 231.415696][ T6015] EXT4-fs (loop6): group descriptors corrupted! [ 231.546832][ T26] audit: type=1326 audit(1763887480.896:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.5.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 231.559004][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.868632][ T6026] loop0: detected capacity change from 0 to 512 [ 232.075653][ T26] audit: type=1326 audit(1763887480.896:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.5.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 232.454985][ T26] audit: type=1326 audit(1763887480.896:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.5.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 232.480497][ T6026] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 232.490699][ T6026] System zones: 0-2, 18-18, 34-34 [ 232.497160][ T6026] EXT4-fs (loop0): orphan cleanup on readonly fs [ 232.504395][ T6026] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.365: bad orphan inode 13 [ 232.517234][ T6026] ext4_test_bit(bit=12, block=18) = 1 [ 232.522651][ T6026] is_bad_inode(inode)=0 [ 232.526923][ T6026] NEXT_ORPHAN(inode)=2130706432 [ 232.531823][ T6026] max_ino=32 [ 232.535051][ T6026] i_nlink=1 [ 232.538418][ T6026] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,inode_readahead_blks=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 232.560259][ T26] audit: type=1326 audit(1763887480.996:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.5.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 232.607119][ T26] audit: type=1326 audit(1763887480.996:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.5.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 232.631330][ T26] audit: type=1326 audit(1763887480.996:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.5.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 232.774919][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.978136][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.274998][ T6041] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 233.284014][ T6041] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 236.958285][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.034208][ T6085] loop6: detected capacity change from 0 to 512 [ 238.264988][ T6085] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 2: comm syz.6.378: invalid block [ 238.308226][ T6085] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.378: invalid indirect mapped block 10 (level 1) [ 238.418168][ T6085] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.378: invalid indirect mapped block 8 (level 1) [ 238.457247][ T6085] EXT4-fs (loop6): 1 truncate cleaned up [ 238.463000][ T6085] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 238.495795][ T4235] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 238.657231][ T26] audit: type=1326 audit(6055289787.819:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.5.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 238.800721][ T26] audit: type=1326 audit(6055289787.839:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.5.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 238.873052][ T4235] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.903047][ T26] audit: type=1326 audit(6055289787.839:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.5.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 238.945715][ T4235] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.040294][ T26] audit: type=1326 audit(6055289787.839:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.5.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 239.348780][ T4235] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 239.403870][ T6116] loop6: detected capacity change from 0 to 512 [ 239.710468][ T6116] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 239.719108][ T6116] System zones: 0-2, 18-18, 34-34 [ 239.730018][ T6116] EXT4-fs (loop6): orphan cleanup on readonly fs [ 239.743809][ T6116] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.380: bad orphan inode 13 [ 239.759285][ T6116] ext4_test_bit(bit=12, block=18) = 1 [ 239.764765][ T6116] is_bad_inode(inode)=0 [ 239.769076][ T6116] NEXT_ORPHAN(inode)=2130706432 [ 239.774004][ T6116] max_ino=32 [ 239.777829][ T6116] i_nlink=1 [ 239.782612][ T6116] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,inode_readahead_blks=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 239.940172][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 239.948326][ T4235] usb 5-1: SerialNumber: syz [ 239.955068][ T26] audit: type=1326 audit(6055289787.839:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.5.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 240.100869][ T26] audit: type=1326 audit(6055289787.839:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.5.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 240.257734][ T4235] usb 5-1: 0:2 : does not exist [ 240.274131][ T4235] usb 5-1: unit 255 not found! [ 240.435748][ T4235] usb 5-1: USB disconnect, device number 3 [ 241.426862][ T144] device hsr_slave_0 left promiscuous mode [ 241.434869][ T144] device hsr_slave_1 left promiscuous mode [ 241.451932][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.469961][ T6133] loop6: detected capacity change from 0 to 128 [ 241.483129][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.511666][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.542789][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.552574][ T144] device bridge_slave_1 left promiscuous mode [ 241.592813][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.596877][ T6133] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.653293][ T144] device bridge_slave_0 left promiscuous mode [ 241.674447][ T6133] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.724390][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.734308][ T4235] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 241.802300][ T144] device veth1_macvtap left promiscuous mode [ 241.833307][ T144] device veth0_macvtap left promiscuous mode [ 241.854578][ T144] device veth1_vlan left promiscuous mode [ 241.860428][ T144] device veth0_vlan left promiscuous mode [ 241.974092][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 242.583913][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.603723][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.623719][ T4235] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 242.632809][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.674104][ T4235] usb 5-1: config 0 descriptor?? [ 242.994318][ T144] team0 (unregistering): Port device team_slave_1 removed [ 243.023726][ T144] team0 (unregistering): Port device team_slave_0 removed [ 243.062192][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.101310][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.162682][ T4235] zydacron 0003:13EC:0006.0007: item fetching failed at offset 1/2 [ 243.178131][ T4235] zydacron 0003:13EC:0006.0007: parse failed [ 243.191095][ T4235] zydacron: probe of 0003:13EC:0006.0007 failed with error -22 [ 243.217389][ T4303] udevd[4303]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.279984][ T144] bond0 (unregistering): Released all slaves [ 243.467744][ T4235] usb 5-1: USB disconnect, device number 4 [ 245.022970][ T6150] 9pnet: Insufficient options for proto=fd [ 245.053382][ T6150] netlink: 'syz.2.389': attribute type 16 has an invalid length. [ 245.061225][ T6150] netlink: 'syz.2.389': attribute type 17 has an invalid length. [ 245.089722][ T6150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.098913][ T6150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.940231][ T6150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.723373][ T6167] loop5: detected capacity change from 0 to 256 [ 246.827518][ T6167] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.838411][ T6167] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 246.889623][ T6167] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 246.912773][ T6167] exfat filesystem being mounted at /34/bus supports timestamps until 2107-12-31 (0x10391447f) [ 249.502846][ T6196] loop5: detected capacity change from 0 to 128 [ 253.465564][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 253.472688][ T23] Bluetooth: hci5: command 0x0406 tx timeout [ 255.671831][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 256.297458][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.303791][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.510473][ T6200] chnl_net:caif_netlink_parms(): no params data found [ 257.589737][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.832498][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 257.849055][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.881929][ T6200] device bridge_slave_0 entered promiscuous mode [ 257.932660][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.974220][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.001183][ T6200] device bridge_slave_1 entered promiscuous mode [ 258.167009][ T6200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.272291][ T6200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.533528][ T26] audit: type=1326 audit(6055289807.698:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.5.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 259.005612][ T26] audit: type=1326 audit(6055289807.739:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.5.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 259.445309][ T26] audit: type=1326 audit(6055289807.749:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.5.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 259.560936][ T26] audit: type=1326 audit(6055289807.759:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.5.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 259.693265][ T26] audit: type=1326 audit(6055289807.779:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.5.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 259.715873][ T26] audit: type=1326 audit(6055289807.919:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.5.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 259.828588][ T6200] team0: Port device team_slave_0 added [ 259.907125][ T6200] team0: Port device team_slave_1 added [ 259.933936][ T2856] Bluetooth: hci2: command 0x0419 tx timeout [ 260.332958][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.354692][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.555242][ T6200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.625875][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.650893][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.862241][ T6200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.807945][ T6328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.815611][ T6328] IPv6: NLM_F_CREATE should be set when creating new route [ 261.906892][ T6200] device hsr_slave_0 entered promiscuous mode [ 262.654476][ T6200] device hsr_slave_1 entered promiscuous mode [ 262.685049][ T6200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.760985][ T6339] loop5: detected capacity change from 0 to 512 [ 262.859417][ T6200] Cannot create hsr debugfs directory [ 262.957330][ T6339] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 264.388264][ T6339] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 264.397196][ T6339] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 264.447640][ T6339] EXT4-fs (loop5): orphan cleanup on readonly fs [ 264.553691][ T6339] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #4: comm syz.5.423: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 264.743257][ T6339] EXT4-fs (loop5): Remounting filesystem read-only [ 264.750585][ T6339] EXT4-fs error (device loop5): ext4_quota_enable:6420: comm syz.5.423: Bad quota inode: 4, type: 1 [ 264.832988][ T6339] EXT4-fs (loop5): Remounting filesystem read-only [ 264.851518][ T6339] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 264.947359][ T6339] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 264.987865][ T6339] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,norecovery,nouid32,nomblk_io_submit,. Quota mode: writeback. [ 265.108268][ T6366] 9pnet: Insufficient options for proto=fd [ 265.120695][ T6366] 9pnet: Insufficient options for proto=fd [ 265.311373][ T6366] netlink: 'syz.6.432': attribute type 16 has an invalid length. [ 265.319548][ T6366] netlink: 'syz.6.432': attribute type 17 has an invalid length. [ 265.352404][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 265.360573][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 265.455282][ T6366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.650144][ T26] audit: type=1326 audit(6055289815.682:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 266.845168][ T26] audit: type=1326 audit(6055289815.682:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 266.955007][ T6200] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 266.994292][ T6200] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 267.025591][ T26] audit: type=1326 audit(6055289815.692:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 267.099442][ T26] audit: type=1326 audit(6055289815.692:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 267.130716][ T6200] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 267.191427][ T26] audit: type=1326 audit(6055289815.692:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 267.223898][ T6200] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 267.231441][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 267.253907][ T26] audit: type=1326 audit(6055289815.692:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 267.285068][ T26] audit: type=1326 audit(6055289815.692:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 267.421397][ T26] audit: type=1326 audit(6055289815.692:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9229e749 code=0x7ffc0000 [ 267.601343][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 268.421193][ T23] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 268.481833][ T23] usb 6-1: config 1 has no interface number 1 [ 268.524027][ T23] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 268.531116][ T6200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.564345][ T23] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.638783][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.655178][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.684125][ T6414] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 268.694688][ T6414] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 268.697378][ T6200] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.750916][ T23] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.773466][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.776174][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.811180][ T23] usb 6-1: Product: syz [ 268.821610][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.830636][ T23] usb 6-1: Manufacturer: syz [ 268.836650][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.840225][ T23] usb 6-1: SerialNumber: syz [ 268.843911][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.872827][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.914081][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.951247][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.958553][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.069081][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.096223][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.118279][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.324287][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.370186][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.391021][ T4192] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 269.494325][ T23] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 269.687632][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.738203][ T23] usb 6-1: USB disconnect, device number 4 [ 269.755809][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.807718][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.861225][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.891492][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.921159][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.942548][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.419463][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.468963][ T6440] loop5: detected capacity change from 0 to 512 [ 270.544124][ T6440] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 270.564951][ T6200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.650866][ T6440] EXT4-fs (loop5): 1 truncate cleaned up [ 270.667079][ T6440] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.157293][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.185754][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.270331][ T4192] usb 5-1: Using ep0 maxpacket: 8 [ 271.300868][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.342354][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.438995][ T4192] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.462938][ T6200] device veth0_vlan entered promiscuous mode [ 271.547882][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.565931][ T4192] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 271.581510][ T4192] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 271.593283][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.948070][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.980908][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.229581][ T6200] device veth1_vlan entered promiscuous mode [ 272.239092][ T4192] usb 5-1: config 4 has no interface number 0 [ 272.281169][ T6466] bridge0: port 1(bond0) entered blocking state [ 272.290609][ T4192] usb 5-1: string descriptor 0 read error: -71 [ 272.297284][ T4192] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 272.326196][ T6466] bridge0: port 1(bond0) entered disabled state [ 272.337294][ T4192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.357842][ T6466] device bond0 entered promiscuous mode [ 272.379582][ T6466] device bond_slave_0 entered promiscuous mode [ 272.408928][ T4192] usb 5-1: can't set config #4, error -71 [ 272.416006][ T6466] device bond_slave_1 entered promiscuous mode [ 272.438938][ T4192] usb 5-1: USB disconnect, device number 5 [ 272.480757][ T6466] bridge0: port 1(bond0) entered blocking state [ 272.487206][ T6466] bridge0: port 1(bond0) entered forwarding state [ 272.518056][ T6472] loop5: detected capacity change from 0 to 128 [ 272.623071][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.695522][ T6472] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.752566][ T6200] device veth0_macvtap entered promiscuous mode [ 272.813069][ T6472] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 272.970727][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.027040][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.051482][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.107969][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.131782][ T6200] device veth1_macvtap entered promiscuous mode [ 273.214985][ T6486] loop6: detected capacity change from 0 to 256 [ 273.397632][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.429936][ T6486] FAT-fs (loop6): Unrecognized mount option "check=relaxdd" or missing value [ 273.526936][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.628606][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.751401][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.762757][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.772933][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.783663][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.793539][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.804584][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.814456][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.835269][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.857001][ T6200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.953417][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.050982][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.170950][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.455874][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.927736][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.939743][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.002804][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.028031][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.059217][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.075019][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.085419][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.124811][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.143621][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.164697][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.204166][ T6200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.247557][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.256582][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.337538][ T6200] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.370383][ T6200] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.404701][ T6200] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.476344][ T6200] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.752104][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.785428][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.858840][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.875039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 275.917100][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.976804][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 276.587506][ T26] audit: type=1326 audit(6055289825.717:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 277.772383][ T26] audit: type=1326 audit(6055289825.727:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 277.799065][ T26] audit: type=1326 audit(6055289825.727:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 277.960721][ T26] audit: type=1326 audit(6055289825.727:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 277.983313][ T26] audit: type=1326 audit(6055289825.727:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 278.006687][ T26] audit: type=1326 audit(6055289825.727:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 278.098538][ T26] audit: type=1326 audit(6055289825.737:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 278.231766][ T6540] loop7: detected capacity change from 0 to 128 [ 278.278915][ T26] audit: type=1326 audit(6055289825.737:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 278.922393][ T6540] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.604202][ T6540] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 282.120058][ T144] device hsr_slave_0 left promiscuous mode [ 282.150599][ T144] device hsr_slave_1 left promiscuous mode [ 282.174176][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.217383][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.256810][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.281561][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.310099][ T144] device bridge_slave_1 left promiscuous mode [ 282.328953][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.371131][ T144] device bridge_slave_0 left promiscuous mode [ 282.408701][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.814359][ T144] device veth1_macvtap left promiscuous mode [ 283.567754][ T6576] loop7: detected capacity change from 0 to 512 [ 283.576126][ T26] audit: type=1326 audit(6055289832.071:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 284.175801][ T6576] EXT4-fs (loop7): Ignoring removed nobh option [ 284.182350][ T6576] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.342418][ T6576] EXT4-fs (loop7): orphan cleanup on readonly fs [ 284.363745][ T6576] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 284.386177][ T6576] EXT4-fs (loop7): Remounting filesystem read-only [ 284.394220][ T6576] Quota error (device loop7): write_blk: dquota write failed [ 284.402585][ T6576] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 284.412732][ T6576] EXT4-fs error (device loop7): ext4_acquire_dquot:6209: comm syz.7.470: Failed to acquire dquot type 0 [ 284.425807][ T6576] EXT4-fs (loop7): Remounting filesystem read-only [ 284.432856][ T6576] EXT4-fs (loop7): 1 truncate cleaned up [ 284.539217][ T6576] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,noblock_validity,nolazytime,journal_dev=0x0000000000000d41,nogrpid,nobh,errors=remount-ro,noinit_itable,min_batch_time=0x00000000000000012. Quota mode: writeback. [ 284.620450][ T144] device veth0_macvtap left promiscuous mode [ 285.108438][ T144] device veth1_vlan left promiscuous mode [ 285.246085][ T26] audit: type=1326 audit(6055289832.071:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 285.268375][ T26] audit: type=1326 audit(6055289832.071:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 285.312838][ T26] audit: type=1326 audit(6055289832.071:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 285.385654][ T144] device veth0_vlan left promiscuous mode [ 286.384327][ T26] audit: type=1326 audit(6055289832.071:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 286.614440][ T26] audit: type=1326 audit(6055289832.071:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.5.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f667f1ac749 code=0x7ffc0000 [ 289.080329][ T6627] process 'syz.4.481' launched './file0' with NULL argv: empty string added [ 289.227390][ T144] team0 (unregistering): Port device team_slave_1 removed [ 289.257394][ T144] team0 (unregistering): Port device team_slave_0 removed [ 289.284571][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.308245][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.426697][ T5985] kernel write not supported for file /vcsu (pid: 5985 comm: kworker/0:8) [ 289.499158][ T144] bond0 (unregistering): Released all slaves [ 291.819785][ T26] audit: type=1326 audit(6055289840.315:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.6.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a2640749 code=0x7ffc0000 [ 291.960867][ T26] audit: type=1326 audit(6055289840.315:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.6.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a2640749 code=0x7ffc0000 [ 292.066062][ T26] audit: type=1326 audit(6055289840.315:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.6.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa3a2640749 code=0x7ffc0000 [ 292.158970][ T26] audit: type=1326 audit(6055289840.315:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.6.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a2640749 code=0x7ffc0000 [ 292.188899][ T4272] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 292.271409][ T26] audit: type=1326 audit(6055289840.315:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.6.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a2640749 code=0x7ffc0000 [ 292.368967][ T26] audit: type=1326 audit(6055289840.315:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.6.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fa3a2640749 code=0x7ffc0000 [ 292.559372][ T4272] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.626524][ T4272] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 292.668707][ T4272] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 293.608524][ T4272] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.658415][ T4272] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.686181][ T4272] usb 7-1: Product: syz [ 293.728301][ T4272] usb 7-1: Manufacturer: syz [ 293.733083][ T4272] usb 7-1: SerialNumber: syz [ 294.080433][ T4272] cdc_mbim 7-1:1.0: skipping garbage [ 294.934453][ T6649] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 295.007560][ T5985] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 295.043635][ T26] audit: type=1326 audit(6055289844.227:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 295.437489][ T26] audit: type=1326 audit(6055289844.247:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 295.503050][ T26] audit: type=1326 audit(6055289844.257:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 295.548580][ T26] audit: type=1326 audit(6055289844.257:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f9c5c749 code=0x7ffc0000 [ 295.731161][ T5985] usb 8-1: Using ep0 maxpacket: 16 [ 295.872483][ T5985] usb 8-1: config 0 has an invalid interface number: 200 but max is 0 [ 295.891490][ T5985] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.919207][ T6649] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 295.921831][ T5985] usb 8-1: config 0 has no interface number 0 [ 295.961562][ T5985] usb 8-1: config 0 interface 200 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 296.726836][ T4272] cdc_mbim 7-1:1.0: bind() failure [ 296.746794][ T4272] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 296.786733][ T4272] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 296.920039][ T4272] usbtest: probe of 7-1:1.1 failed with error -71 [ 296.950971][ T4272] usb 7-1: USB disconnect, device number 2 [ 297.038850][ T6700] [ 297.041306][ T6700] ====================================================== [ 297.048315][ T6700] WARNING: possible circular locking dependency detected [ 297.055334][ T6700] syzkaller #0 Not tainted [ 297.059754][ T6700] ------------------------------------------------------ [ 297.066844][ T6700] syz.4.493/6700 is trying to acquire lock: [ 297.072919][ T6700] ffff8880b9127eb8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x186/0x7c0 [ 297.081636][ T6700] [ 297.081636][ T6700] but task is already holding lock: [ 297.089219][ T6700] ffff888023054238 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 297.098111][ T6700] [ 297.098111][ T6700] which lock already depends on the new lock. [ 297.098111][ T6700] [ 297.108663][ T6700] [ 297.108663][ T6700] the existing dependency chain (in reverse order) is: [ 297.117873][ T6700] [ 297.117873][ T6700] -> #2 (&trie->lock){..-.}-{2:2}: [ 297.125265][ T6700] _raw_spin_lock_irqsave+0xa4/0xf0 [ 297.131261][ T6700] trie_delete_elem+0x90/0x710 [ 297.136644][ T6700] 0xffffffffa002a6e1 [ 297.141143][ T6700] bpf_trace_run3+0x17e/0x320 [ 297.146531][ T6700] enqueue_timer+0x394/0x520 [ 297.151682][ T6700] __mod_timer+0x8e1/0xd20 [ 297.156816][ T6700] queue_delayed_work_on+0x126/0x1e0 [ 297.162660][ T6700] process_one_work+0x863/0x1000 [ 297.168192][ T6700] worker_thread+0xaa8/0x12a0 [ 297.173381][ T6700] kthread+0x436/0x520 [ 297.178063][ T6700] ret_from_fork+0x1f/0x30 [ 297.183000][ T6700] [ 297.183000][ T6700] -> #1 (&base->lock){-.-.}-{2:2}: [ 297.190348][ T6700] _raw_spin_lock_irqsave+0xa4/0xf0 [ 297.196084][ T6700] lock_timer_base+0x123/0x270 [ 297.201363][ T6700] __mod_timer+0x117/0xd20 [ 297.206286][ T6700] queue_delayed_work_on+0x126/0x1e0 [ 297.212079][ T6700] kvfree_call_rcu+0x4a9/0x7c0 [ 297.217356][ T6700] rtnl_register_internal+0x489/0x590 [ 297.223249][ T6700] rtnl_register+0x2e/0x70 [ 297.228372][ T6700] ip_rt_init+0x2e0/0x3a0 [ 297.233225][ T6700] ip_init+0xa/0x20 [ 297.237628][ T6700] inet_init+0x28b/0x3a0 [ 297.242467][ T6700] do_one_initcall+0x1ee/0x680 [ 297.247745][ T6700] do_initcall_level+0x137/0x1f0 [ 297.253207][ T6700] do_initcalls+0x4b/0x90 [ 297.258047][ T6700] kernel_init_freeable+0x3ce/0x560 [ 297.263752][ T6700] kernel_init+0x19/0x1b0 [ 297.268682][ T6700] ret_from_fork+0x1f/0x30 [ 297.273780][ T6700] [ 297.273780][ T6700] -> #0 (krc.lock){..-.}-{2:2}: [ 297.280822][ T6700] __lock_acquire+0x2c33/0x7c60 [ 297.286196][ T6700] lock_acquire+0x197/0x3f0 [ 297.291312][ T6700] _raw_spin_lock+0x2a/0x40 [ 297.296337][ T6700] kvfree_call_rcu+0x186/0x7c0 [ 297.301693][ T6700] trie_delete_elem+0x58c/0x710 [ 297.307068][ T6700] bpf_prog_8c8ab8634bca3061+0x3a/0x94c [ 297.313145][ T6700] bpf_trace_run2+0x15b/0x2d0 [ 297.318331][ T6700] __bpf_trace_sys_enter+0x60/0x70 [ 297.323965][ T6700] trace_sys_enter+0x65/0x80 [ 297.329200][ T6700] syscall_trace_enter+0x115/0x180 [ 297.334819][ T6700] do_syscall_64+0x24/0xa0 [ 297.339744][ T6700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.346205][ T6700] [ 297.346205][ T6700] other info that might help us debug this: [ 297.346205][ T6700] [ 297.356502][ T6700] Chain exists of: [ 297.356502][ T6700] krc.lock --> &base->lock --> &trie->lock [ 297.356502][ T6700] [ 297.368658][ T6700] Possible unsafe locking scenario: [ 297.368658][ T6700] [ 297.376199][ T6700] CPU0 CPU1 [ 297.381560][ T6700] ---- ---- [ 297.386917][ T6700] lock(&trie->lock); [ 297.391205][ T6700] lock(&base->lock); [ 297.397777][ T6700] lock(&trie->lock); [ 297.404458][ T6700] lock(krc.lock); [ 297.408271][ T6700] [ 297.408271][ T6700] *** DEADLOCK *** [ 297.408271][ T6700] [ 297.417016][ T6700] 2 locks held by syz.4.493/6700: [ 297.422023][ T6700] #0: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 297.431419][ T6700] #1: ffff888023054238 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 297.440795][ T6700] [ 297.440795][ T6700] stack backtrace: [ 297.446788][ T6700] CPU: 1 PID: 6700 Comm: syz.4.493 Not tainted syzkaller #0 [ 297.454161][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.464343][ T6700] Call Trace: [ 297.467702][ T6700] [ 297.470624][ T6700] dump_stack_lvl+0x168/0x230 [ 297.475299][ T6700] ? load_image+0x3b0/0x3b0 [ 297.479788][ T6700] ? show_regs_print_info+0x20/0x20 [ 297.484978][ T6700] ? print_circular_bug+0x12b/0x1a0 [ 297.490178][ T6700] check_noncircular+0x274/0x310 [ 297.495101][ T6700] ? add_chain_block+0x940/0x940 [ 297.500024][ T6700] ? lockdep_lock+0xdc/0x1e0 [ 297.504633][ T6700] ? mark_lock+0x94/0x320 [ 297.509072][ T6700] ? _find_first_zero_bit+0xce/0xf0 [ 297.514350][ T6700] __lock_acquire+0x2c33/0x7c60 [ 297.519193][ T6700] ? verify_lock_unused+0x140/0x140 [ 297.524483][ T6700] lock_acquire+0x197/0x3f0 [ 297.529062][ T6700] ? kvfree_call_rcu+0x186/0x7c0 [ 297.534200][ T6700] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 297.539655][ T6700] ? read_lock_is_recursive+0x10/0x10 [ 297.545248][ T6700] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 297.551162][ T6700] ? _raw_spin_unlock+0x40/0x40 [ 297.556236][ T6700] ? debug_object_active_state+0x6b/0x340 [ 297.561952][ T6700] _raw_spin_lock+0x2a/0x40 [ 297.566451][ T6700] ? kvfree_call_rcu+0x186/0x7c0 [ 297.571384][ T6700] kvfree_call_rcu+0x186/0x7c0 [ 297.576137][ T6700] ? call_rcu+0x930/0x930 [ 297.580449][ T6700] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 297.585803][ T6700] ? _raw_spin_lock+0x40/0x40 [ 297.590461][ T6700] ? longest_prefix_match+0x4c6/0x660 [ 297.595825][ T6700] trie_delete_elem+0x58c/0x710 [ 297.600666][ T6700] bpf_prog_8c8ab8634bca3061+0x3a/0x94c [ 297.606205][ T6700] bpf_trace_run2+0x15b/0x2d0 [ 297.610870][ T6700] ? bpf_trace_run1+0x2d0/0x2d0 [ 297.615707][ T6700] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 297.621777][ T6700] ? lock_chain_count+0x20/0x20 [ 297.626619][ T6700] __bpf_trace_sys_enter+0x60/0x70 [ 297.631752][ T6700] trace_sys_enter+0x65/0x80 [ 297.636333][ T6700] syscall_trace_enter+0x115/0x180 [ 297.641433][ T6700] do_syscall_64+0x24/0xa0 [ 297.645925][ T6700] ? clear_bhb_loop+0x30/0x80 [ 297.650611][ T6700] ? clear_bhb_loop+0x30/0x80 [ 297.655290][ T6700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.661170][ T6700] RIP: 0033:0x7f3a9229e749 [ 297.665593][ T6700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.685187][ T6700] RSP: 002b:00007f3a905050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 297.693593][ T6700] RAX: ffffffffffffffda RBX: 00007f3a924f4fa8 RCX: 00007f3a9229e749 [ 297.701560][ T6700] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3a924f4fac [ 297.709941][ T6700] RBP: 00007f3a924f4fa0 R08: 0000d3dd8a3ba8f8 R09: 0000000000000000 [ 297.718517][ T6700] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 297.726521][ T6700] R13: 00007f3a924f5038 R14: 00007fff4fe434a0 R15: 00007fff4fe43588 [ 297.734702][ T6700] [ 297.786165][ T5985] usb 8-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 297.824359][ T5985] usb 8-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 297.850787][ T6704] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.857927][ T6704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.036361][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 298.036464][ T26] audit: type=1326 audit(6055289847.148:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.6.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a2640749 code=0x7ffc0000 [ 298.299678][ T26] audit: type=1326 audit(6055289847.148:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.6.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a2640749 code=0x7ffc0000 [ 298.337295][ T26] audit: type=1326 audit(6055289847.158:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.6.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa3a2640749 code=0x7ffc0000 [ 298.362446][ T5985] usb 8-1: config 0 descriptor?? [ 298.370855][ T26] audit: type=1326 audit(6055289847.158:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.6.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a2640749 code=0x7ffc0000 [ 298.393593][ T5985] usb 8-1: can't set config #0, error -71 [ 298.403639][ T5985] usb 8-1: USB disconnect, device number 2 [ 298.410670][ T26] audit: type=1326 audit(6055289847.158:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.6.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a2640749 code=0x7ffc0000 [ 298.438211][ T26] audit: type=1326 audit(6055289847.158:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.6.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fa3a2640749 code=0x7ffc0000