last executing test programs: 8m8.723520579s ago: executing program 32 (id=907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) r6 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 7m51.145356004s ago: executing program 33 (id=962): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setsig(r3, 0xa, 0x800020) keyctl$unlink(0x9, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) unshare(0x2a020400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="8b44c1531c440180c200000008004500005800000000002f907800000000e000c800b48065580000000010000800000086dd080088be000000001000000088f7ffff00000000080022eb00000000200000000200100000000000400080000800655000000000"], 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000005200000008000300", @ANYRES32=r8, @ANYBLOB="06004800000000000500890000000000050088000000000004002a000a00060008021100000000001a9e07332661d7a60b96a96f106fcbfba4a988dfc3803950e946b2204aa6"], 0x44}}, 0x0) 7m44.548177513s ago: executing program 2 (id=973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 7m28.90040864s ago: executing program 34 (id=973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 5m26.712637974s ago: executing program 6 (id=1262): socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r4 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x1002, 0x12) 5m24.852316651s ago: executing program 6 (id=1266): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5m20.502834526s ago: executing program 6 (id=1274): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[], 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 5m17.097511762s ago: executing program 6 (id=1278): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000006600000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 5m15.130966541s ago: executing program 6 (id=1281): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x2000004) r1 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 5m14.031763242s ago: executing program 6 (id=1284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 4m58.739141362s ago: executing program 35 (id=1284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 4m49.935929905s ago: executing program 5 (id=1330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18e0ffffffffff14000000000000002018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = memfd_create(&(0x7f0000006a80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18e0ffffffffff14000000000000002018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = memfd_create(&(0x7f0000006a80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x585d4d9346027f5c}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd, 0x1fff}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 4m40.828319524s ago: executing program 5 (id=1352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r2) 4m40.253580835s ago: executing program 36 (id=1352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r2) 3m11.108462343s ago: executing program 9 (id=1562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) 3m10.706169101s ago: executing program 9 (id=1564): getgroups(0x4, &(0x7f0000000080)=[0x0, 0xee01, 0xee00, 0xee00]) r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, 0x0) 3m10.335750978s ago: executing program 9 (id=1565): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x200006, &(0x7f0000000340)=ANY=[], 0x8, 0x626f, &(0x7f0000006c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x222, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") fanotify_mark(r3, 0x101, 0x8001043, r4, 0x0) 3m6.024407913s ago: executing program 9 (id=1569): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) 3m1.195982087s ago: executing program 9 (id=1578): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0x0, 0x0) 3m0.799946145s ago: executing program 9 (id=1581): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) listen(r7, 0x0) sendto$inet6(r6, 0x0, 0x0, 0xac90735b7318e8a0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @loopback}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f040000004801001000", 0x1d}], 0x1) close(r4) writev(r8, 0x0, 0x0) set_robust_list(&(0x7f0000000280)={0x0, 0xc8ac}, 0x18) 2m45.196067131s ago: executing program 37 (id=1581): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) listen(r7, 0x0) sendto$inet6(r6, 0x0, 0x0, 0xac90735b7318e8a0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @loopback}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f040000004801001000", 0x1d}], 0x1) close(r4) writev(r8, 0x0, 0x0) set_robust_list(&(0x7f0000000280)={0x0, 0xc8ac}, 0x18) 2m15.275940908s ago: executing program 7 (id=1680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109840, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x400, 0x9004}, 0x4) setrlimit(0xb, &(0x7f0000000740)={0xfff, 0x100}) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x8002, 0x40) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x2400) sendmmsg$unix(r1, 0x0, 0x0, 0x20841) 2m11.038958381s ago: executing program 7 (id=1685): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="000e0177000000000100000000000000e1bda6000000000000000000000000000000000000000001fe80000000000000000000000000000b200100000000"], 0x78) 2m6.128601207s ago: executing program 7 (id=1693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 2m0.008058787s ago: executing program 7 (id=1704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) 1m59.024019796s ago: executing program 7 (id=1709): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 1m57.505650136s ago: executing program 7 (id=1710): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) readv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/27, 0x1b}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 1m43.02423611s ago: executing program 0 (id=1735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m41.798517994s ago: executing program 38 (id=1710): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) readv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/27, 0x1b}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 1m41.572555729s ago: executing program 0 (id=1739): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r3 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x1002, 0x12) 1m39.929514481s ago: executing program 0 (id=1744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfdfdffff}) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='mounts\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 1m35.484123428s ago: executing program 0 (id=1751): sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pause() 1m33.770451732s ago: executing program 0 (id=1755): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x14a, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRES32=r4, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5, 0x0, 0x8000000000085e}, 0x18) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000004000000410000000000000009490000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) 1m32.595233335s ago: executing program 0 (id=1757): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c002e39a45aa9edcfe08671a816cb673d99851079b41e699eacf742"], 0x1, 0x373, &(0x7f00000006c0)="$eJzs3U9rXFUUAPDTsfmr6WQhgop4qRvdDEn8Ag3SghhQYkeqC+HVTHTINBPmDZEpot259XMUl+4E8QtkoXt37rJx2UXpk8yfJpOOKSVOHtXfD8I9yT0nc+883uNuHufw1g93drbz2nbWjcq1FJWIqDyIWO5HA5eGY6Ufz8ZJ9+Kd6q0/3vj4088+WN/YuL6Z0o31m++upZSuvPnL19/8ePXX7ouf/HTl57k4WP788K+1Pw9eOXj18NHNr5p5auZpt91NWbrdbnez261G2mrmO7WUPmo1sryRmrt5ozM2v91q7+31Ura7tbS412nkecp2e2mn0Uvddup2ein7MmvuplqtlpYWg6ep39/czNYH8fwZedcuakFMQaeznh3dw3NPzNTvl7IgAKBU5z3/z/6r5/+ZcP6/SCfP//xXHZ3/Z4f37zjnfwAAAAAAAAAAAAAAeB48KIpqURTV0ViMXhIe/l7y8piyJ67/qZ+y18d0nXhxbz6i9f1+fb8+GAfz69vRjFY0YiWq8fDosTAyiG+8v3F9JfUtx9Kd7/r1V3+LqL8wXr8a1VieXL86qE+P6+NonInFk/VrUY2XJ9evTayfjbffOlFfi2r8/kW0oxVb/cfbcf23qym99+HGqfq5fh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w+1NPJ6DPre79cjFmJ/2L+/dpywPN4ff1D/uL/+SlTj4eT+/CsT+/Nfjtcul7t3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjJe3d3slar0bmoYNTzv/+X2VHwz1WXBun3Tk0txHjy3NP+zzmDyjNVLQw3OWHqUVEU01rq/MVeyvMEMxFxRk4x/ALP/1kvRcQZOXMRMf0tV8r/wp85KONpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOU6bvpd9koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoU967u5O1Wo3OFIOy9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA8+TsAAP//S+oM3w==") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) close(r0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x5608, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x30) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x60, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'], 0x30}}], 0xa8000, 0x40000840) r5 = socket$netlink(0x10, 0x3, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 1m16.357654093s ago: executing program 39 (id=1757): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c002e39a45aa9edcfe08671a816cb673d99851079b41e699eacf742"], 0x1, 0x373, &(0x7f00000006c0)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) close(r0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x5608, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x30) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x60, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'], 0x30}}], 0xa8000, 0x40000840) r5 = socket$netlink(0x10, 0x3, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 23.784113294s ago: executing program 4 (id=1858): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_create(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 21.275998913s ago: executing program 3 (id=1863): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x48, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_POLICE={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 20.93332226s ago: executing program 3 (id=1864): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x21c, 0x0, @loopback, @loopback, 0x700}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="4018780000007be4ae"], 0x0, 0x0, 0x0, 0x0}) 17.012211797s ago: executing program 4 (id=1869): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, r0, 0x6000) 16.903573039s ago: executing program 1 (id=1870): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x585d4d9346027f5c}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd, 0x1fff}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 16.86423267s ago: executing program 3 (id=1871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x5) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x8800) socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000f5ffffff0000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000160a0101000b000000000000010000000900010073797a30000000000900020073797a3000000000300003802c00038014000100726f7365300000000000000000fdffff13000100726f7365300000000000000000000000140000001000"], 0xe4}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 16.769936592s ago: executing program 2 (id=1777): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3) 16.755802312s ago: executing program 1 (id=1872): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x1, 0x801001a, 0x66d, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x9}}, 0x50) write$FUSE_IOCTL(r0, &(0x7f00000001c0)={0x20, 0x0, r1, {0x0, 0x4, 0x4}}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pause() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x46, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0xc17a) fsync(r2) 16.460080038s ago: executing program 4 (id=1873): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 15.634794594s ago: executing program 3 (id=1874): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x48, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_POLICE={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 15.364094939s ago: executing program 4 (id=1876): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000808500000006000000b7080000000000007baaf8ff00000000b5080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 15.363412859s ago: executing program 1 (id=1877): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="000000000000000044e00000000000007b8afcff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095356515cf77091801593b67b6239112309796301bd6ffea59bb7e13d1786c8e0b2d4fa0205fc66c856c8975dfb6e23d68da739a667b5f5d0105f05d92af9d1ef30b8a3ae4b52752b64090374ae3872686b0f4e35355d919a0a2bf159b73d7ee13dbf621f98d4ec7a7eabd983faad4d1e6d3aa1b170c9fe5b62c5c7b6c8bd16bea570ff799f48b8c15516a4013904d4570a5a8203e8deae7187b59a8bb47"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r3], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r5, &(0x7f0000000680), 0x0}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r2, r1, 0x4, r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) symlink(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000006c0)={'veth0_to_bridge\x00', 0x1000}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x1, 0x8, 0x3, 0x4, 0x6687, 0x7858}, {0x2, 0x7, 0x0, 0x5, 0x9, 0x5}], ['\x00', '\x00', '\x00']}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x460, 0x0, 0x5002004a, 0x6, 0x0, 0x3, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0xffffff00, 0x0, 'sit0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2c8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@NFQUEUE3={0x20, 'NFQUEUE\x00', 0x3, {0xe, 0x100, 0x1}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe13], 0x0, 0x0, 0xfffffffffffffffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c0) 15.262132711s ago: executing program 3 (id=1878): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 14.115269723s ago: executing program 4 (id=1879): socket$nl_audit(0x10, 0x3, 0x9) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x802}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x2, 0x14}, &(0x7f00000000c0), 0x0) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x29) socket(0xa, 0x3, 0xf2c) r5 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x3, 0x0, 0x2000000000903, 0xf, 0x3}, 0x20) 13.744043871s ago: executing program 1 (id=1880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18e0ffffffffff14000000000000002018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = memfd_create(&(0x7f0000006a80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x21c, 0x0, @loopback, @loopback, 0x700}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="4018780000007be4ae"], 0x0, 0x0, 0x0, 0x0}) 13.26905557s ago: executing program 2 (id=1882): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000001540)='./file1\x00', 0x40, &(0x7f0000000580)=ANY=[], 0x1, 0x150e, &(0x7f0000002ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x37, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @ldst={0x1, 0x1, 0x2, 0x6, 0xb, 0xffffffffffffffe0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0xe8, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x0, 0xfffffffb, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{0x5, 0x5, 0x6, 0x1}, {0x1, 0x1, 0xc, 0x8}], 0x10, 0x47c}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback, 0x2, 0x0, 0xffff, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0}, 0x40) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1c0) fallocate(r10, 0x0, 0x0, 0x8000c66) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map=0x1, r8, 0x7, 0x2001, 0xffffffffffffffff, @value=r10, @void, @void, @void, r9}, 0x20) 10.659951071s ago: executing program 2 (id=1883): pipe2$9p(0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES32=0x0], 0x2, 0x150f, &(0x7f000000bb00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x101042, 0x1) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 10.351657527s ago: executing program 8 (id=1884): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000840)="b9aea252ff030703008cb89e0800", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.773677109s ago: executing program 8 (id=1885): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181200009a4c4b4c16d7704e905c0e91a7449a4705f22b2656190b23673a72720d15a969b803e55c0fa03712b3994050c60cbce1eca25ecc233788e5203b7ff0ebe9d419bd8a9e855e50142491c573a9be81357daa483b148616ac0101", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x11) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 8.18404517s ago: executing program 8 (id=1886): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000803, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1fb, &(0x7f0000000b00)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@bsdgroups}], [{@audit}, {@smackfsdef={'smackfsdef', 0x3d, 'errors=remount-ro'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r6}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x39, 0x64, 0x63, 0x35, 0x34, 0x65], 0x2d, [0x34, 0x33, 0x39, 0x37], 0x2d, [0x33, 0x62, 0x7, 0x32], 0x2d, [0x66, 0x32, 0x39, 0x62], 0x2d, [0x61, 0x65, 0x32, 0x66, 0x36, 0x36, 0x65, 0x35]}}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x41) 6.777556577s ago: executing program 2 (id=1887): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x20, 0x1e, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x684}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @generic={0x8, 0xe, 0x3, 0x2, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffae}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x2, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x3, 0x402, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[0xffffffffffffffff], &(0x7f0000000640), 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") r4 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x0) sendfile(r5, r5, 0x0, 0x7a680003) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000000)='^\x00', &(0x7f0000000080)='./file0\x00', r4) 5.704156119s ago: executing program 8 (id=1888): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0x5, &(0x7f0000000000)={0x2, 0x8b}, 0x0) inotify_init() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@local}, &(0x7f0000000580)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x4001) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 4.957073283s ago: executing program 1 (id=1889): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000808500000006000000b7080000000000007baaf8ff00000000b5080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 520.01435ms ago: executing program 2 (id=1890): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000000c0)={0x7, 0x11, 0x0, 0x17, 0x4, 0x0, 0xaf3a, 0x149, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e7, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x3, 0x2f2ad676, @local, 0xffffffff}}}, 0x108) preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}, {0x0}], 0x2, 0x5b, 0x0) 519.52732ms ago: executing program 8 (id=1891): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x5d, 0x1000000, 0x0}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b0747d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xfffffffe, 0x0, 0x80000000], [0x10003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000]}, 0x45c) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r4, &(0x7f0000004740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f00)=""/29, 0x1d}, 0x4}], 0x1, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000000)=0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1e, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast2}, 0x2003}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r12 = dup(r2) read$FUSE(r12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000085000000ba00000095"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 511.7125ms ago: executing program 1 (id=1892): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) close(0xffffffffffffffff) inotify_init1(0x80000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r4], 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, 0x0) 415.920392ms ago: executing program 4 (id=1893): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 8 (id=1894): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200), 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x4e22, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5f}, {0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x8865, 0x2}}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x4, 0x3, 0x1, 0x0, 0xf000000}}, 0xe8) preadv(r0, &(0x7f0000001500), 0x0, 0xf73, 0x3) kernel console output (not intermixed with test programs): lem. [ 582.536903][ T9537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.750062][ T9537] device hsr_slave_0 entered promiscuous mode [ 582.772423][ T9537] device hsr_slave_1 entered promiscuous mode [ 582.795564][ T9537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.810357][ T9537] Cannot create hsr debugfs directory [ 583.184806][ T9617] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 583.323788][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 583.564792][ T9631] overlayfs: failed to resolve './file0': -2 [ 584.529070][ T9537] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 584.649070][ T9537] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 584.707766][ T9537] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 584.755867][ T9641] xt_bpf: check failed: parse error [ 584.767865][ T9537] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 585.555809][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 585.788119][ T9537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.848547][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 585.875684][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 585.941300][ T9537] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.021992][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 586.038848][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 586.050318][ T4830] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.057746][ T4830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.188307][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 586.510087][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 586.633708][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 586.643630][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.650815][ T4830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.816500][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 586.865480][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 586.896140][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 586.953738][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 587.003545][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 587.024092][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 587.049663][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 587.068599][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 587.086358][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 587.098839][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 587.130662][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 587.173891][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'. [ 587.213807][ T9672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1336'. [ 587.317709][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 587.607734][ T4280] Bluetooth: hci4: command 0x0405 tx timeout [ 589.576128][ T9692] syz.3.1340[9692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 589.576258][ T9692] syz.3.1340[9692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 589.635576][ T9693] syz.3.1340[9693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 589.752626][ T9693] syz.3.1340[9693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 591.655307][ T9711] netlink: 'syz.7.1342': attribute type 17 has an invalid length. [ 592.113062][ T9711] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 592.167417][ T9711] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 592.247187][ T9711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.503543][ T9717] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 592.505754][ T9537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.564946][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 592.588158][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 592.627207][ T9717] kvm: pic: non byte read [ 592.653875][ T9717] kvm: pic: level sensitive irq not supported [ 592.654056][ T9717] kvm: pic: non byte read [ 592.681417][ T9717] kvm: pic: non byte read [ 592.686579][ T9717] kvm: pic: non byte read [ 592.700241][ T9717] kvm: pic: non byte read [ 594.182797][ T4882] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.318560][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 594.334090][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 594.472339][ T4882] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.573057][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 594.599009][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 594.621625][ T9754] loop7: detected capacity change from 0 to 512 [ 594.650238][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 594.699183][ T9754] EXT4-fs (loop7): orphan cleanup on readonly fs [ 594.736418][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 594.782051][ T9754] EXT4-fs error (device loop7): ext4_quota_enable:7024: comm syz.7.1355: inode #218103808: comm syz.7.1355: iget: illegal inode # [ 594.872724][ T9754] EXT4-fs error (device loop7): ext4_quota_enable:7027: comm syz.7.1355: Bad quota inode: 218103808, type: 2 [ 594.909272][ T4882] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.938691][ T9754] EXT4-fs warning (device loop7): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 594.956333][ T9537] device veth0_vlan entered promiscuous mode [ 594.987192][ T9537] device veth1_vlan entered promiscuous mode [ 594.991526][ T9754] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 595.016335][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 595.030903][ T9754] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 595.068413][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 595.087831][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 595.097874][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 595.117733][ T4274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 595.119123][ T9754] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 595.134459][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 595.216229][ T4882] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.296041][ T9754] EXT4-fs error (device loop7): ext4_quota_enable:7024: comm syz.7.1355: inode #218103808: comm syz.7.1355: iget: illegal inode # [ 595.397639][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 595.419642][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 595.424363][ T9754] EXT4-fs error (device loop7): ext4_quota_enable:7027: comm syz.7.1355: Bad quota inode: 218103808, type: 2 [ 595.439327][ T9537] device veth0_macvtap entered promiscuous mode [ 595.443464][ T9537] device veth1_macvtap entered promiscuous mode [ 595.477059][ T9754] EXT4-fs warning (device loop7): ext4_enable_quotas:7068: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 595.725486][ T8039] EXT4-fs (loop7): unmounting filesystem. [ 595.735082][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.768766][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.795618][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.812888][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.868853][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.940926][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.974134][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.025696][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.077587][ T9537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.119031][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 596.133508][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 596.178463][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 596.467128][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 597.066796][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.086609][ T9779] loop4: detected capacity change from 0 to 4096 [ 597.105583][ T9779] ntfs3: Unknown parameter '\2.W5qøi2nw' [ 597.128018][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.147745][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.167565][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.187615][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.198505][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 597.222717][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.253564][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.281672][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.316714][ T9537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.336968][ T5960] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 597.407974][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 597.417331][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 597.453243][ T9537] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.474292][ T9537] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.524283][ T9537] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.563984][ T9537] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.337337][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'. [ 598.358129][ T9791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1361'. [ 598.484262][ T4723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.519256][ T4723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.631330][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 598.646221][ T9759] chnl_net:caif_netlink_parms(): no params data found [ 598.680896][ T4492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.710368][ T4492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.743231][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 598.927819][ T4380] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 599.122514][ T4380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.154460][ T4380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.182499][ T4380] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 599.236825][ T4380] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 599.261126][ T4380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.277807][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 599.290527][ T4380] usb 4-1: config 0 descriptor?? [ 599.310634][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.343669][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.399388][ T9759] device bridge_slave_0 entered promiscuous mode [ 599.488246][ T9759] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.499110][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.529015][ T9759] device bridge_slave_1 entered promiscuous mode [ 599.733766][ T4380] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 599.749515][ T9816] loop8: detected capacity change from 0 to 32768 [ 599.798196][ T4380] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 599.908686][ T9816] XFS (loop8): Mounting V5 Filesystem [ 599.948898][ T9759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.016369][ T9759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.059028][ T9816] XFS (loop8): Ending clean mount [ 600.092142][ T4257] usb 4-1: USB disconnect, device number 6 [ 600.461965][ T9830] fido_id[9830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 601.357991][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 601.428624][ T9537] XFS (loop8): Unmounting Filesystem [ 601.443068][ T9759] team0: Port device team_slave_0 added [ 601.592039][ T9759] team0: Port device team_slave_1 added [ 601.762702][ T9847] loop7: detected capacity change from 0 to 4096 [ 601.787251][ T9847] ntfs3: Unknown parameter '\2.W5qøi2nw' [ 602.113755][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.165937][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.273626][ T9759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.337708][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1372'. [ 602.461819][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1372'. [ 602.498333][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.517624][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.249307][ T9759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.261365][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'. [ 603.275632][ T9867] device gretap0 entered promiscuous mode [ 603.281587][ T9867] device macsec0 entered promiscuous mode [ 603.376190][ T9867] device gretap0 left promiscuous mode [ 603.457821][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 603.538705][ T4882] device hsr_slave_0 left promiscuous mode [ 603.546870][ T4882] device hsr_slave_1 left promiscuous mode [ 603.606900][ T4882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.642980][ T4882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.674070][ T4882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.681931][ T4882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.690052][ T4882] device bridge_slave_1 left promiscuous mode [ 603.696395][ T4882] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.709827][ T4882] device bridge_slave_0 left promiscuous mode [ 603.723030][ T4882] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.803985][ T4882] device veth1_macvtap left promiscuous mode [ 603.818074][ T4882] device veth0_macvtap left promiscuous mode [ 603.825574][ T4882] device veth1_vlan left promiscuous mode [ 603.864627][ T4882] device veth0_vlan left promiscuous mode [ 604.221961][ T9881] loop4: detected capacity change from 0 to 4096 [ 604.365928][ T9881] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 604.403597][ T9880] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 604.563884][ T7188] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 604.574037][ T4268] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 604.587636][ T4268] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 604.604925][ T4268] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 604.622303][ T7188] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 604.672051][ T4268] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 605.857830][ T4326] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 606.058285][ T4326] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 606.107057][ T4326] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 606.157704][ T4326] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.185282][ T4326] usb 5-1: New USB device found, idVendor=483c, idProduct=7e67, bcdDevice= 0.40 [ 606.207608][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.215817][ T4326] usb 5-1: Product: syz [ 606.220537][ T4326] usb 5-1: Manufacturer: syz [ 606.225418][ T4326] usb 5-1: SerialNumber: syz [ 606.464778][ T4326] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x483C pid 0x7E67 [ 606.688324][ T4380] usb 5-1: USB disconnect, device number 12 [ 606.817078][ T4882] team0 (unregistering): Port device team_slave_1 removed [ 606.906286][ T4882] team0 (unregistering): Port device team_slave_0 removed [ 606.969460][ T4380] usblp0: removed [ 606.998290][ T4882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.085418][ T4882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.945139][ T4882] bond0 (unregistering): Released all slaves [ 608.144911][ T9759] device hsr_slave_0 entered promiscuous mode [ 608.180395][ T9759] device hsr_slave_1 entered promiscuous mode [ 608.202373][ T9759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.233382][ T9759] Cannot create hsr debugfs directory [ 608.252951][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1383'. [ 608.301407][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1383'. [ 609.687051][ T9927] loop4: detected capacity change from 0 to 256 [ 609.834597][ T9759] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 609.889970][ T9759] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 609.930489][ T9759] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 609.964484][ T9759] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 610.087790][ T4257] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 610.387998][ T9759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.458536][ T9942] loop7: detected capacity change from 0 to 4096 [ 610.492870][ T9759] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.521710][ T9942] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 610.723543][ T4257] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 610.740548][ T4257] usb 5-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 610.741465][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 610.757550][ T4257] usb 5-1: config 0 has no interface number 0 [ 610.796996][ T4257] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 610.832610][ T4257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.845268][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.857630][ T4257] usb 5-1: Product: syz [ 610.862138][ T4257] usb 5-1: Manufacturer: syz [ 610.873851][ T4257] usb 5-1: SerialNumber: syz [ 610.905331][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 610.908660][ T4257] usb 5-1: config 0 descriptor?? [ 611.043970][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 611.132426][ T4257] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 611.169652][ T4257] usb 5-1: No valid video chain found. [ 611.208192][ T4491] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.215344][ T4491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.247029][ T4257] usb 5-1: USB disconnect, device number 13 [ 611.383103][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 611.453527][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 611.718332][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.725602][ T4491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.835370][ T9959] overlayfs: failed to resolve './file0': -2 [ 612.559865][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 612.626894][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 612.698526][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 612.778653][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 612.828489][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 613.016696][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 613.026587][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 613.078658][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 613.122219][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 613.157441][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 613.166766][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 613.175424][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 613.227206][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 613.274458][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1397'. [ 615.084488][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 615.098954][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 615.144900][ T9759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.609145][T10003] loop4: detected capacity change from 0 to 128 [ 615.688566][T10003] EXT4-fs: Ignoring removed nobh option [ 616.868574][T10003] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 616.972538][T10003] ext4 filesystem being mounted at /322/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 618.410238][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 618.445232][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 618.536732][ T9759] device veth0_vlan entered promiscuous mode [ 618.558603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 618.567305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 618.615902][ T9759] device veth1_vlan entered promiscuous mode [ 618.655895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 618.664686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 618.685553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 618.779066][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 618.814930][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 618.859019][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 618.889197][ T9759] device veth0_macvtap entered promiscuous mode [ 618.943420][ T9759] device veth1_macvtap entered promiscuous mode [ 619.009731][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.048294][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.097185][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.144165][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.168437][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.224426][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.250509][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.290548][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.331343][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.365335][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1410'. [ 619.391864][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1410'. [ 619.527277][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 619.576988][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 619.673583][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 619.730454][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 619.912759][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.201941][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.451597][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.462449][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.472829][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.517555][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.569602][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.611361][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.652482][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.673951][T10044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1411'. [ 620.684862][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 620.694435][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 620.709577][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 620.746975][ T9759] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.847808][ T9759] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.856617][ T9759] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.917624][ T9759] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.150643][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 621.337319][T10055] loop8: detected capacity change from 0 to 256 [ 621.442722][T10055] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 622.464409][ T4491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.545225][ T4491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.837253][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 623.562796][ T4723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.595715][ T4723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.835454][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 624.378691][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.385482][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.955590][T10082] loop8: detected capacity change from 0 to 4096 [ 625.041827][T10082] EXT4-fs: Ignoring removed i_version option [ 625.102152][T10082] EXT4-fs: Ignoring removed orlov option [ 625.136126][T10082] EXT4-fs: Ignoring removed mblk_io_submit option [ 625.190302][T10082] ext4: Bad value for 'inode_readahead_blks' [ 625.356121][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1421'. [ 625.507037][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1421'. [ 625.941952][T10100] loop9: detected capacity change from 0 to 128 [ 625.973908][T10100] EXT4-fs: Ignoring removed nobh option [ 626.073886][T10100] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 626.084092][T10100] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 630.953491][T10146] loop7: detected capacity change from 0 to 512 [ 631.999695][T10146] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 632.057711][T10146] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.099699][T10158] loop4: detected capacity change from 0 to 512 [ 632.183962][T10158] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 632.307766][T10158] EXT4-fs (loop4): 1 truncate cleaned up [ 632.313494][T10158] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 632.413765][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1432'. [ 632.493037][T10158] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.1432: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 632.604677][T10167] loop8: detected capacity change from 0 to 16 [ 632.634647][T10167] erofs: (device loop8): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 632.744013][ T8039] EXT4-fs (loop7): unmounting filesystem. [ 633.776855][T10158] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 633.828492][T10158] EXT4-fs warning (device loop4): ext4_rename_delete:3778: inode #2: comm syz.4.1432: Deleting old file: nlink 5, error=-117 [ 634.302785][ T9759] EXT4-fs (loop9): unmounting filesystem. [ 634.311367][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 635.752943][T10182] loop4: detected capacity change from 0 to 256 [ 635.830834][T10182] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 635.861684][T10182] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 635.899491][T10182] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 637.777641][ T4388] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 637.980298][ T4388] usb 8-1: config 0 has an invalid interface number: 235 but max is 0 [ 637.998975][ T4388] usb 8-1: config 0 has no interface number 0 [ 638.006909][ T4388] usb 8-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 638.019364][ T4388] usb 8-1: config 0 interface 235 has no altsetting 0 [ 638.030741][ T4388] usb 8-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 638.051771][ T4388] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.072726][ T4388] usb 8-1: Product: syz [ 638.087078][ T4388] usb 8-1: Manufacturer: syz [ 638.097688][ T127] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 638.101090][ T4388] usb 8-1: SerialNumber: syz [ 638.146259][ T4388] usb 8-1: config 0 descriptor?? [ 638.189615][ T4388] keyspan 8-1:0.235: Keyspan 1 port adapter converter detected [ 638.198025][ T4388] keyspan 8-1:0.235: found no endpoint descriptor for endpoint 87 [ 638.206027][ T4388] keyspan 8-1:0.235: found no endpoint descriptor for endpoint 7 [ 638.215667][ T4388] keyspan 8-1:0.235: found no endpoint descriptor for endpoint 81 [ 638.223944][ T4388] keyspan 8-1:0.235: found no endpoint descriptor for endpoint 1 [ 638.235131][ T4388] keyspan 8-1:0.235: found no endpoint descriptor for endpoint 85 [ 638.250287][ T4388] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 638.293831][ T127] usb 9-1: Using ep0 maxpacket: 8 [ 638.301516][ T127] usb 9-1: unable to get BOS descriptor or descriptor too short [ 638.338896][ T127] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 638.428957][ T127] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 638.446704][ T127] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 638.466312][ T127] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 638.485620][ T127] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 8192, setting to 1024 [ 638.507393][ T127] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 638.546391][ T127] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 638.575626][ T127] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.601153][ T127] usb 9-1: Product: syz [ 638.613955][ T127] usb 9-1: Manufacturer: syz [ 638.629304][ T127] usb 9-1: SerialNumber: syz [ 638.649515][ T127] usb 9-1: config 0 descriptor?? [ 638.667237][T10202] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 638.853900][ T127] snd-usb-audio: probe of 9-1:0.0 failed with error -2 [ 638.928251][ T4397] udevd[4397]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.943151][ T127] usb 9-1: USB disconnect, device number 2 [ 639.572535][ T127] usb 8-1: USB disconnect, device number 2 [ 639.665379][ T127] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 639.725157][ T127] keyspan 8-1:0.235: device disconnected [ 642.868636][T10237] netlink: 'syz.7.1448': attribute type 15 has an invalid length. [ 643.249244][T10273] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1457'. [ 643.298153][T10273] lo: Caught tx_queue_len zero misconfig [ 643.614293][T10278] loop9: detected capacity change from 0 to 256 [ 643.644274][T10278] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 644.079228][T10292] loop4: detected capacity change from 0 to 256 [ 644.086887][T10292] exfat: Deprecated parameter 'namecase' [ 644.103134][T10292] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 644.176153][T10292] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 644.936786][T10291] loop9: detected capacity change from 0 to 2048 [ 645.375471][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1463'. [ 647.795396][T10333] loop9: detected capacity change from 0 to 256 [ 647.851777][T10333] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 649.247608][ T4312] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 649.429266][ T4312] usb 5-1: Using ep0 maxpacket: 32 [ 649.437760][ T4312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.553990][ T4312] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.618437][ T4312] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 649.661743][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.405700][ T4312] usb 5-1: config 0 descriptor?? [ 650.453041][ T4312] hub 5-1:0.0: bad descriptor, ignoring hub [ 650.516723][T10363] loop7: detected capacity change from 0 to 4096 [ 650.589131][ T4312] hub: probe of 5-1:0.0 failed with error -5 [ 650.597235][ T4312] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 650.614898][T10363] ntfs3: Unknown parameter '\2.W5qøi2nw' [ 651.034389][T10347] loop4: detected capacity change from 0 to 512 [ 651.101347][T10377] loop8: detected capacity change from 0 to 256 [ 651.142681][T10377] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 651.193195][T10347] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1475: bad orphan inode 11862016 [ 651.206153][ T4257] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 651.220739][T10347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 651.230031][T10347] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.785836][T10397] loop7: detected capacity change from 0 to 256 [ 652.737635][ T4257] usb 4-1: Using ep0 maxpacket: 16 [ 652.750201][ T4257] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 652.821409][T10397] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 652.916993][ T4257] usb 4-1: config 0 has no interface number 0 [ 653.288093][ T4340] usb 5-1: USB disconnect, device number 14 [ 654.232317][ T4257] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 654.256362][ T4257] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 654.279972][ T4257] usb 4-1: config 0 interface 41 has no altsetting 0 [ 654.311819][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 654.337390][ T4257] usb 4-1: string descriptor 0 read error: -71 [ 654.392397][ T4257] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 654.446959][ T4257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.542216][T10415] loop7: detected capacity change from 0 to 1024 [ 654.658581][ T4257] usb 4-1: config 0 descriptor?? [ 654.671382][ T4257] usb 4-1: can't set config #0, error -71 [ 654.685916][ T4257] usb 4-1: USB disconnect, device number 7 [ 656.148123][T10421] hfsplus: xattr searching failed [ 656.356534][ T26] audit: type=1800 audit(1758866296.263:50): pid=10421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1492" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 656.868040][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1496'. [ 657.406258][T10431] loop7: detected capacity change from 0 to 4096 [ 657.487610][T10431] ntfs3: Unknown parameter '\2.W5qøi2nw' [ 657.565318][ T5960] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 658.054627][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 658.140127][T10454] device bridge0 entered promiscuous mode [ 659.074162][T10475] loop7: detected capacity change from 0 to 1024 [ 659.902333][T10480] hfsplus: xattr searching failed [ 659.912379][ T26] audit: type=1800 audit(1758866300.023:51): pid=10480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1506" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 663.346709][T10512] loop4: detected capacity change from 0 to 512 [ 663.432248][T10512] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 664.526311][T10514] loop7: detected capacity change from 0 to 8192 [ 666.398174][ T127] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 666.607657][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 666.614814][ T127] usb 4-1: config 0 interface 0 has no altsetting 0 [ 666.651570][ T127] usb 4-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 666.702142][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.731077][ T127] usb 4-1: config 0 descriptor?? [ 667.153485][ T127] hid-generic 0003:17EF:61AE.0004: hidraw0: USB HID vff.ff Device [HID 17ef:61ae] on usb-dummy_hcd.3-1/input0 [ 667.889194][T10564] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 668.073423][T10562] loop9: detected capacity change from 0 to 4096 [ 668.116251][T10562] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512) [ 668.754527][T10554] loop7: detected capacity change from 0 to 32768 [ 670.168559][T10590] loop9: detected capacity change from 0 to 1024 [ 670.175878][T10590] EXT4-fs: Ignoring removed i_version option [ 671.413540][T10581] loop8: detected capacity change from 0 to 4096 [ 671.634125][T10590] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:477: comm syz.9.1533: Invalid block bitmap block 0 in block_group 0 [ 671.655902][T10590] Quota error (device loop9): write_blk: dquota write failed [ 671.664180][T10590] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 671.675303][T10590] EXT4-fs error (device loop9): ext4_acquire_dquot:6816: comm syz.9.1533: Failed to acquire dquot type 0 [ 671.715323][T10590] EXT4-fs error (device loop9): ext4_free_blocks:6205: comm syz.9.1533: Freeing blocks not in datazone - block = 0, count = 4096 [ 671.748480][T10590] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.1533: Invalid inode bitmap blk 0 in block_group 0 [ 671.771069][ T32] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-8 [ 671.782418][T10590] EXT4-fs error (device loop9) in ext4_free_inode:362: Corrupt filesystem [ 671.795537][T10590] EXT4-fs (loop9): 1 orphan inode deleted [ 671.801924][T10590] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 672.040681][T10596] device lo entered promiscuous mode [ 672.049499][T10596] device tunl0 entered promiscuous mode [ 672.058953][T10596] device gre0 entered promiscuous mode [ 672.068257][T10596] device gretap0 entered promiscuous mode [ 672.077938][T10596] device erspan0 entered promiscuous mode [ 672.091228][T10596] device ip_vti0 entered promiscuous mode [ 672.100965][T10596] device ip6_vti0 entered promiscuous mode [ 672.111098][T10596] device sit0 entered promiscuous mode [ 672.121045][T10596] device ip6tnl0 entered promiscuous mode [ 672.130908][T10596] device ip6gre0 entered promiscuous mode [ 672.140446][T10596] device syz_tun entered promiscuous mode [ 672.149524][T10596] device ip6gretap0 entered promiscuous mode [ 672.158964][T10596] device bridge0 entered promiscuous mode [ 672.168013][T10596] device vcan0 entered promiscuous mode [ 672.174696][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 672.183248][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 672.192097][T10596] device bond0 entered promiscuous mode [ 672.197807][T10596] device bond_slave_0 entered promiscuous mode [ 672.205131][T10596] device bond_slave_1 entered promiscuous mode [ 672.217175][T10596] device team0 entered promiscuous mode [ 672.222991][T10596] device team_slave_0 entered promiscuous mode [ 672.230508][T10596] device team_slave_1 entered promiscuous mode [ 672.242244][T10596] device dummy0 entered promiscuous mode [ 672.251823][T10596] device nlmon0 entered promiscuous mode [ 672.655227][T10596] device caif0 entered promiscuous mode [ 672.661195][T10596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 672.793083][T10581] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 672.832876][ T32] EXT4-fs error (device loop9): ext4_release_dquot:6852: comm kworker/u4:2: Failed to release dquot type 0 [ 673.006261][T10605] loop4: detected capacity change from 0 to 128 [ 673.224961][ T9537] EXT4-fs (loop8): unmounting filesystem. [ 673.743230][ T9759] EXT4-fs (loop9): unmounting filesystem. [ 674.226059][T10624] loop9: detected capacity change from 0 to 512 [ 674.301698][T10624] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 675.742902][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1542'. [ 675.757587][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1542'. [ 676.361517][ T22] usb 4-1: USB disconnect, device number 8 [ 676.974025][T10650] loop7: detected capacity change from 0 to 256 [ 679.981044][T10690] loop4: detected capacity change from 0 to 256 [ 680.853680][T10694] loop9: detected capacity change from 0 to 512 [ 680.961806][T10694] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 681.140356][T10694] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 681.168035][T10694] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.567428][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 681.864863][ T9759] EXT4-fs (loop9): unmounting filesystem. [ 683.131198][T10728] netlink: 'syz.4.1560': attribute type 1 has an invalid length. [ 683.196097][T10730] loop7: detected capacity change from 0 to 256 [ 683.239770][T10730] FAT-fs (loop7): "posix" option is obsolete, not supported now [ 683.351025][T10728] netlink: 'syz.4.1560': attribute type 13 has an invalid length. [ 683.630536][T10728] gretap0: refused to change device tx_queue_len [ 683.653104][T10728] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 685.780459][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.826723][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.321612][T10753] loop9: detected capacity change from 0 to 32768 [ 686.785364][T10769] loop7: detected capacity change from 0 to 256 [ 686.900603][T10769] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 688.990385][T10777] loop4: detected capacity change from 0 to 256 [ 689.030953][T10777] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 689.054866][T10777] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 689.224913][T10777] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 689.437322][T10785] loop7: detected capacity change from 0 to 128 [ 690.374183][ T26] audit: type=1800 audit(1758866330.483:52): pid=10794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1570" name="file1" dev="loop7" ino=1048676 res=0 errno=0 [ 690.791168][T10806] loop7: detected capacity change from 0 to 256 [ 691.340729][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.350311][T10811] FAT-fs (loop7): Filesystem has been set read-only [ 691.369694][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.378619][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.387339][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.396533][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.405459][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.414439][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.423671][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.433396][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.442673][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.452620][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.461354][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.470161][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.479309][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.487985][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.496722][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.505854][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.514672][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.523755][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.532470][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.541422][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.550261][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.559464][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.568179][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.580270][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.589749][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.598526][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.607294][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.616023][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.624950][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.633810][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.643270][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.652250][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.660967][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.669778][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.678505][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.687115][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.696083][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.704991][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.713820][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.722985][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.731745][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.741232][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.750670][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.759687][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.768478][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.777212][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.786094][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.794864][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.803607][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.812366][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.821037][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.830182][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.838970][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.848311][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.856977][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.865656][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.874309][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.883721][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.892506][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.901196][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.909911][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.918833][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.927538][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.936195][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.945634][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.954417][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.963136][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.971792][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.980467][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.989151][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 691.997836][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 692.006432][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 692.015069][T10811] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 692.027797][ T26] audit: type=1800 audit(1758866332.133:53): pid=10811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1576" name="file0" dev="loop7" ino=1048677 res=0 errno=0 [ 693.525083][T10835] xt_bpf: check failed: parse error [ 693.559570][T10834] syz.7.1580[10834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 694.478131][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1583'. [ 695.056216][T10860] loop7: detected capacity change from 0 to 1024 [ 695.108304][T10860] EXT4-fs: Ignoring removed oldalloc option [ 695.140146][T10860] EXT4-fs: Ignoring removed bh option [ 695.166407][T10860] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 695.277995][T10860] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 696.258067][ T8039] EXT4-fs (loop7): unmounting filesystem. [ 696.342145][T10879] loop8: detected capacity change from 0 to 256 [ 696.550605][T10879] syz.8.1588: attempt to access beyond end of device [ 696.550605][T10879] loop8: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 696.752644][T10887] loop7: detected capacity change from 0 to 512 [ 696.795666][T10887] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 698.057676][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'. [ 701.264388][T10933] loop7: detected capacity change from 0 to 256 [ 701.273573][T10933] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 701.284625][T10933] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 701.299214][T10933] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 701.596305][T10936] loop4: detected capacity change from 0 to 512 [ 701.929040][T10936] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1602: iget: bad extended attribute block 1 [ 702.063877][T10936] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1602: couldn't read orphan inode 15 (err -117) [ 702.241259][T10936] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 703.279161][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 703.357813][T10943] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 703.770217][T10960] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 703.792864][T10960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 703.801875][T10960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 704.471234][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 704.768675][T10967] loop4: detected capacity change from 0 to 512 [ 704.816998][T10967] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 706.799364][ T4357] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 707.233612][ T4357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.536353][ T4357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.567801][ T4357] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 707.612083][ T4357] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 707.653974][ T4357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.697704][ T4357] usb 4-1: config 0 descriptor?? [ 707.824909][T11001] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 707.887121][T11001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 708.162309][ T4357] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xe [ 708.175532][ T4357] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 708.183776][ T4357] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 708.196651][ T4357] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 708.652183][ T4357] usb 4-1: USB disconnect, device number 9 [ 709.251864][T11026] 9pnet_fd: Insufficient options for proto=fd [ 710.287881][T11018] fido_id[11018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 710.856988][ T4257] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 711.129088][ T4257] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 711.637497][ T4257] usb 4-1: config 0 has no interface number 0 [ 711.643709][ T4257] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 711.797993][ T4257] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 712.020272][ T4257] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 712.032355][ T4257] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 712.077919][ T4257] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 712.094096][ T4257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.139357][ T4257] usb 4-1: Product: syz [ 712.143820][ T4257] usb 4-1: Manufacturer: syz [ 712.172494][ T4257] usb 4-1: SerialNumber: syz [ 713.018242][ T4257] usb 4-1: config 0 descriptor?? [ 713.081349][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 713.095352][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 713.106452][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 713.129696][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 713.149411][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 713.156835][ T4257] usb 4-1: can't set config #0, error -71 [ 713.167134][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 713.183613][ T4257] usb 4-1: USB disconnect, device number 10 [ 713.295117][T11061] loop4: detected capacity change from 0 to 512 [ 713.358022][T11061] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 713.540712][T11061] EXT4-fs (loop4): 1 truncate cleaned up [ 713.546483][T11061] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 713.885748][T11072] loop8: detected capacity change from 0 to 4096 [ 713.893195][T11072] EXT4-fs: Ignoring removed mblk_io_submit option [ 713.952977][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 714.002030][T11072] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 714.069425][T11079] loop4: detected capacity change from 0 to 256 [ 714.073558][T10954] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.095082][T11079] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 714.318130][T11079] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 714.387786][ T4333] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 714.436235][T11079] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 715.213004][T11082] fs-verity: sha512 using implementation "sha512-avx2" [ 715.622043][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 716.525248][ T9537] EXT4-fs (loop8): unmounting filesystem. [ 716.657575][ T4333] usb 8-1: Using ep0 maxpacket: 8 [ 716.665695][ T4333] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 716.682217][ T4333] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.719875][ T4333] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 716.776930][T10954] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.791647][ T4333] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.828596][ T4333] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.842253][ T4333] usb 8-1: Product: syz [ 716.846582][ T4333] usb 8-1: Manufacturer: Ф [ 716.856557][ T4333] usb 8-1: SerialNumber: syz [ 717.221115][ T4333] usb 8-1: 0:2 : does not exist [ 717.306286][ T4333] usb 8-1: USB disconnect, device number 3 [ 717.678125][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 718.270997][T11107] loop7: detected capacity change from 0 to 8192 [ 718.469610][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.052272][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 720.221964][T10954] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.565998][T10954] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.582673][ T4357] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 720.744916][T11051] chnl_net:caif_netlink_parms(): no params data found [ 720.909492][ T4357] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 720.939581][ T4357] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 720.947672][T11135] loop4: detected capacity change from 0 to 128 [ 720.977958][T11135] EXT4-fs: Ignoring removed nobh option [ 721.120168][ T4357] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.132425][ T4357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.149352][T11135] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 721.149997][ T4357] usb 4-1: Product: syz [ 721.162874][ T4357] usb 4-1: Manufacturer: syz [ 721.168354][T11135] ext4 filesystem being mounted at /374/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 721.192594][ T4357] usb 4-1: SerialNumber: syz [ 721.883646][ T4357] usb 4-1: 0:2 : does not exist [ 722.539358][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 722.800083][ T4357] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 722.923097][ T4357] usb 4-1: USB disconnect, device number 11 [ 722.968327][T11151] loop8: detected capacity change from 0 to 256 [ 722.992151][T11151] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 723.029899][T11151] syz.8.1647: attempt to access beyond end of device [ 723.029899][T11151] loop8: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 723.076510][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 723.129459][T11151] syz.8.1647: attempt to access beyond end of device [ 723.129459][T11151] loop8: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 723.259031][T11151] syz.8.1647: attempt to access beyond end of device [ 723.259031][T11151] loop8: rw=0, sector=280, nr_sectors = 8 limit=256 [ 723.271924][T11051] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.309751][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 723.327556][T11051] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.335850][T11051] device bridge_slave_0 entered promiscuous mode [ 723.342403][ T26] audit: type=1800 audit(1758866363.443:54): pid=11151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1647" name="file1" dev="loop8" ino=1048681 res=0 errno=0 [ 723.518338][T11051] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.525859][T11051] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.708894][T11051] device bridge_slave_1 entered promiscuous mode [ 723.970888][T11051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.041437][T11051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.072105][T11051] team0: Port device team_slave_0 added [ 725.106148][T11051] team0: Port device team_slave_1 added [ 725.195116][T11051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.212607][T11051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.068700][T11051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.229585][T11051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.249130][T11051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.296320][T11051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.587150][T11051] device hsr_slave_0 entered promiscuous mode [ 726.596941][T11051] device hsr_slave_1 entered promiscuous mode [ 726.626368][T11051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.647885][ T4326] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 726.665734][T11051] Cannot create hsr debugfs directory [ 726.847560][ T4326] usb 4-1: Using ep0 maxpacket: 16 [ 726.859413][ T4326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.889491][ T4326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.933803][ T4326] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 726.954673][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.044547][ T4326] usb 4-1: config 0 descriptor?? [ 728.440428][ T4326] sony 0003:054C:05C4.0006: report_id 3777278742 is invalid [ 728.465720][ T4326] sony 0003:054C:05C4.0006: item 0 4 1 8 parsing failed [ 728.484253][ T4326] sony 0003:054C:05C4.0006: parse failed [ 728.514089][ T4326] sony: probe of 0003:054C:05C4.0006 failed with error -22 [ 728.655829][ T4326] usb 4-1: USB disconnect, device number 12 [ 728.861836][T11232] loop8: detected capacity change from 0 to 1024 [ 730.338603][T11244] xt_limit: Overflow, try lower: 268435456/134217728 [ 732.860193][ T26] audit: type=1326 audit(1758866372.873:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb818eec9 code=0x7ffc0000 [ 733.267200][ T26] audit: type=1326 audit(1758866372.873:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb818eec9 code=0x7ffc0000 [ 733.295072][T11269] loop8: detected capacity change from 0 to 512 [ 733.316094][ T26] audit: type=1326 audit(1758866372.873:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb818eec9 code=0x7ffc0000 [ 733.357626][ T26] audit: type=1326 audit(1758866372.883:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb818eec9 code=0x7ffc0000 [ 733.388894][T11269] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 733.456978][ T26] audit: type=1326 audit(1758866372.883:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb818eec9 code=0x7ffc0000 [ 733.586611][ T26] audit: type=1326 audit(1758866372.883:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f8cb818eec9 code=0x7ffc0000 [ 733.807847][T11280] loop4: detected capacity change from 0 to 1024 [ 733.815543][T11280] EXT4-fs: Ignoring removed orlov option [ 736.431959][T11280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 737.147555][ T26] audit: type=1326 audit(1758866372.943:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb818eec9 code=0x7ffc0000 [ 737.332965][ T26] audit: type=1326 audit(1758866372.943:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb818eec9 code=0x7ffc0000 [ 737.479178][ T26] audit: type=1800 audit(1758866376.593:63): pid=11280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1675" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 737.591816][ T26] audit: type=1804 audit(1758866376.713:64): pid=11291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1675" name="/newroot/380/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 738.373742][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 738.988885][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1673'. [ 740.384344][T11314] loop4: detected capacity change from 0 to 8192 [ 743.060944][T10954] device hsr_slave_0 left promiscuous mode [ 743.176028][T10954] device hsr_slave_1 left promiscuous mode [ 743.280810][T10954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.317648][T10954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.354843][T10954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.404765][T10954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.475052][T10954] device bridge_slave_1 left promiscuous mode [ 743.488977][T10954] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.538152][T10954] device bridge_slave_0 left promiscuous mode [ 743.544530][T10954] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.698169][T10954] device veth1_macvtap left promiscuous mode [ 743.704318][T10954] device veth0_macvtap left promiscuous mode [ 743.738068][T10954] device veth1_vlan left promiscuous mode [ 743.744133][T10954] device veth0_vlan left promiscuous mode [ 744.950553][T11332] loop8: detected capacity change from 0 to 40427 [ 744.976141][T11332] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 745.027317][T11332] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 745.085346][T11332] F2FS-fs (loop8): invalid crc value [ 745.150198][T11332] F2FS-fs (loop8): Found nat_bits in checkpoint [ 745.384549][T11332] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 745.399402][T11332] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 747.226450][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.245155][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.116369][T11362] loop4: detected capacity change from 0 to 128 [ 748.186546][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 748.186562][ T26] audit: type=1800 audit(1758866388.293:66): pid=11362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1692" name="file1" dev="loop4" ino=1048683 res=0 errno=0 [ 748.571349][T11368] loop4: detected capacity change from 0 to 512 [ 748.654557][T11368] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 748.689453][T11368] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 748.839161][T10954] device team_slave_1 left promiscuous mode [ 748.895533][T10954] team0 (unregistering): Port device team_slave_1 removed [ 748.942660][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 749.019582][T10954] device team_slave_0 left promiscuous mode [ 749.036852][T10954] team0 (unregistering): Port device team_slave_0 removed [ 749.168997][T10954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.178915][T10954] device bond_slave_1 left promiscuous mode [ 749.340260][T10954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.358487][T10954] device bond_slave_0 left promiscuous mode [ 751.570797][T11391] xt_TPROXY: Can be used only with -p tcp or -p udp [ 751.585027][T11391] x_tables: duplicate underflow at hook 1 [ 752.194081][T10954] bond0 (unregistering): Released all slaves [ 752.402872][T11336] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 752.412416][T11336] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 752.422248][T11336] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 752.553513][T11398] loop8: detected capacity change from 0 to 512 [ 754.449773][T11398] EXT4-fs (loop8): 1 orphan inode deleted [ 754.455726][T11398] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 754.515233][T11398] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 754.779070][T11406] fuse: Bad value for 'fd' [ 754.852905][T11051] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 754.950825][T11051] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 755.011011][T11051] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 755.155798][T11051] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 755.206970][ T9] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 755.245443][ T9] EXT4-fs error (device loop8): ext4_release_dquot:6852: comm kworker/u4:0: Failed to release dquot type 1 [ 755.358156][ T9537] EXT4-fs (loop8): unmounting filesystem. [ 756.518677][T11051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.059226][T11051] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.066570][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 757.178760][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 757.338231][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 757.538138][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 757.608196][T11488] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.615368][T11488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.889583][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 757.954763][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 758.024904][T11488] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.032203][T11488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.143083][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 758.174635][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 759.079805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 759.101710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 759.160769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 759.201750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 759.241651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 759.277177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 759.306796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 759.364102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 759.394168][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'. [ 759.396942][T11051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 759.471433][T11051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 759.520551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 759.540288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 761.718721][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 761.726405][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 761.777702][T11051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.959960][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 761.998251][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 762.137807][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 762.169189][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 762.211774][T11051] device veth0_vlan entered promiscuous mode [ 762.242752][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 762.273017][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 762.375789][T11051] device veth1_vlan entered promiscuous mode [ 762.637112][T11051] device veth0_macvtap entered promiscuous mode [ 762.780703][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 762.805861][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 762.938615][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 762.980317][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 763.031677][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 763.162978][T11051] device veth1_macvtap entered promiscuous mode [ 765.103284][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.118292][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.129258][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.182974][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.224749][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.267580][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.300343][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.440818][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.520278][T11051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.585405][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.700487][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.013029][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.221234][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.302802][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.366889][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.426954][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.455766][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.576001][T11051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.597627][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 766.606566][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 766.654581][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 766.672239][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 766.750430][T11051] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.769782][T11051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.823046][T11051] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.878492][T11051] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.204128][ T7020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.256655][ T7020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.335744][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 767.461185][ T4831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.501988][ T4831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.581998][T11485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 767.590198][T11600] loop8: detected capacity change from 0 to 16 [ 767.660427][T11600] erofs: (device loop8): mounted with root inode @ nid 36. [ 768.312765][T11607] erofs: (device loop8): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 768.856472][T11608] loop0: detected capacity change from 0 to 512 [ 768.977349][T11608] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 772.591816][T11639] loop4: detected capacity change from 0 to 128 [ 772.592324][T11640] loop8: detected capacity change from 0 to 256 [ 772.698727][T11639] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 772.750163][T11639] ext4 filesystem being mounted at /399/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 773.846320][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 775.642718][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 775.656774][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 775.668179][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 775.681465][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 775.689506][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 775.697074][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 777.587836][T11666] chnl_net:caif_netlink_parms(): no params data found [ 777.758066][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 778.013883][T11666] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.031902][T11666] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.057509][ T4340] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 778.062599][T11666] device bridge_slave_0 entered promiscuous mode [ 778.106949][T11666] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.133723][T11666] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.155533][T11666] device bridge_slave_1 entered promiscuous mode [ 778.270314][ T4340] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 778.301084][ T4340] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 778.324435][ T4340] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 778.354118][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 778.372789][ T4340] usb 5-1: Product: syz [ 778.382971][ T4340] usb 5-1: SerialNumber: syz [ 778.443439][ T4340] usb 5-1: bad CDC descriptors [ 778.458977][ T4340] usb 5-1: bad CDC descriptors [ 778.469526][ T4340] option 5-1:7.0: GSM modem (1-port) converter detected [ 778.662643][T11666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.718805][T11666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.742887][T11688] loop4: detected capacity change from 0 to 1024 [ 778.795032][T11688] ext4: Unknown parameter 'hash' [ 779.012405][T11488] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.120906][T11666] team0: Port device team_slave_0 added [ 779.140506][T11666] team0: Port device team_slave_1 added [ 779.300251][T11488] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.330360][T11666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.351673][T11666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.421487][T11702] loop8: detected capacity change from 0 to 256 [ 779.465874][T11666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.471244][T11702] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 779.551343][T11702] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 779.596164][T11488] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.615369][T11702] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 779.645413][T11666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.660270][T11666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.758839][T11666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.839426][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 779.998677][T11053] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 780.328973][T11053] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.347688][T11488] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.367474][T11053] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 780.399887][T11053] usb 4-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 780.426769][T11053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.487167][T11053] usb 4-1: config 0 descriptor?? [ 780.681185][T11666] device hsr_slave_0 entered promiscuous mode [ 780.718622][T11666] device hsr_slave_1 entered promiscuous mode [ 780.763886][T11666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.809591][T11707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.821564][T11666] Cannot create hsr debugfs directory [ 781.649497][T11707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.858019][T11718] loop0: detected capacity change from 0 to 512 [ 781.916482][T11718] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 781.933288][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 782.696153][ T4312] usb 5-1: USB disconnect, device number 15 [ 782.710681][ T4312] option 5-1:7.0: device disconnected [ 782.944568][ T4257] usb 4-1: USB disconnect, device number 13 [ 784.363812][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 784.762434][T11725] loop4: detected capacity change from 0 to 40427 [ 784.846175][T11725] F2FS-fs (loop4): invalid crc value [ 784.879931][T11725] F2FS-fs (loop4): Found nat_bits in checkpoint [ 785.074162][T11725] F2FS-fs (loop4): Start checkpoint disabled! [ 785.137723][T11725] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 785.195324][T11725] syz.4.1758: attempt to access beyond end of device [ 785.195324][T11725] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 787.634905][T11759] loop4: detected capacity change from 0 to 256 [ 787.693427][T11759] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 787.737577][T11759] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 787.831712][T11759] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 790.395294][T11777] loop4: detected capacity change from 0 to 256 [ 790.443237][T11777] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 791.142357][T11666] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 791.515174][T11666] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 791.531077][T11790] loop4: detected capacity change from 0 to 256 [ 791.652953][T11666] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 791.838505][T11666] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 792.921022][T11801] loop4: detected capacity change from 0 to 1024 [ 796.142234][T11488] device hsr_slave_0 left promiscuous mode [ 796.204177][T11488] device hsr_slave_1 left promiscuous mode [ 796.217882][T11488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.640377][T11835] loop8: detected capacity change from 0 to 4096 [ 796.654575][T11835] EXT4-fs: Ignoring removed mblk_io_submit option [ 797.262289][T11835] EXT4-fs (loop8): Test dummy encryption mode enabled [ 797.453808][T11835] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 797.535728][T11488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.719887][T11835] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 797.825706][T11488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.937932][T11488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.022817][T11488] device bridge_slave_1 left promiscuous mode [ 798.084765][T11488] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.227926][T11488] device bridge_slave_0 left promiscuous mode [ 798.245021][T11488] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.563217][T11488] device veth1_macvtap left promiscuous mode [ 798.593072][T11488] device veth0_macvtap left promiscuous mode [ 798.626744][T11488] device veth1_vlan left promiscuous mode [ 798.632698][T11488] device veth0_vlan left promiscuous mode [ 799.449877][ T9537] EXT4-fs (loop8): unmounting filesystem. [ 799.775951][T11855] input: syz1 as /devices/virtual/input/input10 [ 801.285731][T11861] loop4: detected capacity change from 0 to 1024 [ 802.090651][T11863] hfsplus: xattr searching failed [ 802.418484][ T26] audit: type=1800 audit(1758866442.203:67): pid=11863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1782" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 802.862822][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 802.874401][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 802.884673][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 802.939427][T11872] loop9: detected capacity change from 0 to 7 [ 802.946113][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 802.974960][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 802.982576][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 803.000060][ T5960] Dev loop9: unable to read RDB block 7 [ 803.005702][ T5960] loop9: unable to read partition table [ 803.012363][ T5960] loop9: partition table beyond EOD, truncated [ 803.122115][T11872] Dev loop9: unable to read RDB block 7 [ 803.131169][T11872] loop9: unable to read partition table [ 803.137106][T11872] loop9: partition table beyond EOD, truncated [ 803.173729][T11872] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 803.173729][T11872] ) failed (rc=-5) [ 803.620688][T11867] loop4: detected capacity change from 0 to 32768 [ 803.831427][T11867] XFS (loop4): Mounting V5 Filesystem [ 803.982571][T11867] XFS (loop4): Ending clean mount [ 805.037744][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 805.204247][T11488] team0 (unregistering): Port device team_slave_1 removed [ 805.354682][T11488] team0 (unregistering): Port device team_slave_0 removed [ 805.493655][T11488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.611771][T11488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.418442][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 807.523115][T11488] bond0 (unregistering): Released all slaves [ 807.622684][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1784'. [ 807.632106][T11868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.639723][T11868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.657758][T11868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.665401][T11868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.881644][ T4268] XFS (loop4): Unmounting Filesystem [ 808.183129][T11666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.306583][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 808.316744][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 808.333902][ T4362] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 808.362461][T11666] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.415864][T11481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 808.456421][T11481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 808.523686][T11481] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.530938][T11481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.550207][ T4362] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.567366][ T4362] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.621182][ T4362] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.642713][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.649151][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.746693][ T4362] usb 9-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 808.772361][T11481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 808.784376][T11481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 808.797316][ T4362] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.885655][T11481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 808.894548][T11481] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.901786][T11481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.949289][T11481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 808.974966][T11481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 809.000882][ T4362] usb 9-1: config 0 descriptor?? [ 809.051880][T11900] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1789'. [ 809.064256][T11900] device gretap0 entered promiscuous mode [ 809.457755][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 809.812732][T11907] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1789'. [ 809.821892][T11907] 0XD: renamed from gretap0 [ 809.950607][T11907] device 30XD left promiscuous mode [ 809.958656][T11907] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 810.059525][T11666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 810.086152][ T4362] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x1 [ 810.120104][ T4362] smartjoyplus 0003:6666:8801.0007: hidraw0: USB HID v0.00 Device [HID 6666:8801] on usb-dummy_hcd.8-1/input0 [ 810.121859][T11666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 810.159753][ T4362] smartjoyplus 0003:6666:8801.0007: no output reports found [ 810.237117][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 810.668914][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 810.967214][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 811.368322][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 811.428944][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 811.475393][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 811.484446][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 811.493480][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 811.516640][T11869] chnl_net:caif_netlink_parms(): no params data found [ 811.527570][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 811.590953][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 811.604071][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 811.665995][ T127] usb 9-1: USB disconnect, device number 3 [ 813.037966][T11951] loop4: detected capacity change from 0 to 128 [ 813.056091][T11951] EXT4-fs (loop4): Test dummy encryption mode enabled [ 813.245118][T11951] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 813.255534][T11951] ext4 filesystem being mounted at /417/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 814.838551][T11488] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.217890][T11869] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.225032][T11869] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.237888][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 815.248866][T11869] device bridge_slave_0 entered promiscuous mode [ 815.269233][T11869] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.330174][T11869] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.390012][T11869] device bridge_slave_1 entered promiscuous mode [ 815.484724][T11488] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.644507][T11488] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.707264][T11869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.821038][T11980] loop8: detected capacity change from 0 to 256 [ 815.834484][T11488] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.889024][T11869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.989996][T11666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.011827][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 816.025964][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 816.123416][T11869] team0: Port device team_slave_0 added [ 816.170172][T11869] team0: Port device team_slave_1 added [ 817.239959][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 817.292349][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 817.329120][T11993] loop4: detected capacity change from 0 to 2048 [ 817.421554][T11993] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 817.430515][T11993] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.733354][T11869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.753901][T11869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.398524][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 818.528616][T11869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.544744][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 818.601367][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 818.652401][T11869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.680760][T11869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.747934][T11869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.798741][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 818.818575][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 818.862183][T11666] device veth0_vlan entered promiscuous mode [ 818.995858][T11666] device veth1_vlan entered promiscuous mode [ 819.044984][T12023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1809'. [ 819.072817][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1809'. [ 819.707685][T11869] device hsr_slave_0 entered promiscuous mode [ 819.928453][T11869] device hsr_slave_1 entered promiscuous mode [ 820.601005][T11666] device veth0_macvtap entered promiscuous mode [ 820.629610][T11666] device veth1_macvtap entered promiscuous mode [ 820.691981][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.787535][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.844082][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.907604][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.929847][T12032] loop4: detected capacity change from 0 to 128 [ 820.966680][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.050685][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.097864][ T26] audit: type=1800 audit(1758866461.143:68): pid=12032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1810" name="file1" dev="loop4" ino=1048695 res=0 errno=0 [ 821.129073][T11666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.657606][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 823.622581][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 823.632579][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 823.668523][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 823.691391][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 823.751578][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.770098][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.783707][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.800879][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.813164][T11666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.846272][T11666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.891346][T11666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.974654][T11666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.048420][T11666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.220169][T11666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.254384][T11666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.747768][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 824.757016][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 825.975031][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 827.785671][T12086] loop8: detected capacity change from 0 to 1024 [ 827.833400][T12084] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1821'. [ 827.849244][T12084] device 30XD entered promiscuous mode [ 827.858303][T12087] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1821'. [ 827.867459][T12087] 1XD: renamed from 30XD [ 827.883493][T12087] device 31XD left promiscuous mode [ 827.891870][T12087] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 827.905736][T12086] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 827.969646][T12086] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 827.984629][T12086] EXT4-fs error (device loop8): ext4_acquire_dquot:6816: comm syz.8.1822: Failed to acquire dquot type 0 [ 828.029889][T12086] EXT4-fs error (device loop8): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 828.067583][T12086] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #13: comm syz.8.1822: corrupted inode contents [ 828.107265][T12086] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #13: comm syz.8.1822: mark_inode_dirty error [ 828.178083][T12086] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #13: comm syz.8.1822: corrupted inode contents [ 828.213986][T12086] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #13: comm syz.8.1822: mark_inode_dirty error [ 828.281247][T12086] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #13: comm syz.8.1822: corrupted inode contents [ 828.378303][T12086] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 828.418965][T12086] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #13: comm syz.8.1822: corrupted inode contents [ 828.440951][T12086] EXT4-fs error (device loop8): ext4_truncate:4312: inode #13: comm syz.8.1822: mark_inode_dirty error [ 828.464089][T12086] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 828.545708][ T4882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.624916][ T4882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.640107][T12086] EXT4-fs (loop8): 1 truncate cleaned up [ 828.651105][T12086] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 829.432816][T12100] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 829.443665][T12100] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 829.453337][T12100] EXT4-fs error (device loop8): ext4_acquire_dquot:6816: comm syz.8.1822: Failed to acquire dquot type 0 [ 829.572879][T12101] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 829.583294][T12101] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 829.593084][T12101] EXT4-fs error (device loop8): ext4_acquire_dquot:6816: comm syz.8.1822: Failed to acquire dquot type 0 [ 830.310226][ T9537] EXT4-fs (loop8): unmounting filesystem. [ 830.445052][T12104] overlayfs: failed to resolve './file0': -2 [ 830.500610][T12108] loop8: detected capacity change from 0 to 128 [ 830.587077][T12108] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 830.664687][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 830.700854][T12108] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 830.964253][ T7728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.026585][ T7728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.097622][ T4257] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 831.307693][ T4257] usb 4-1: Using ep0 maxpacket: 8 [ 831.334540][ T4257] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 831.363576][ T4257] usb 4-1: config 0 has no interface number 0 [ 831.384591][ T4257] usb 4-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.430593][ T4257] usb 4-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.467631][ T4257] usb 4-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 831.494622][ T4257] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 831.521552][ T4257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.552837][ T4257] usb 4-1: config 0 descriptor?? [ 831.605647][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 831.997754][ T4257] sony 0003:1345:3008.0008: hiddev0,hidraw0: USB HID v80.04 Device [HID 1345:3008] on usb-dummy_hcd.3-1/input28 [ 832.023397][ T4257] sony 0003:1345:3008.0008: failed to claim input [ 832.184452][ T4257] usb 4-1: USB disconnect, device number 14 [ 832.402596][T12128] fido_id[12128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 834.327175][T12151] netlink: 'syz.3.1830': attribute type 16 has an invalid length. [ 834.350156][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1830'. [ 834.385002][T11869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 834.481351][T11488] device hsr_slave_0 left promiscuous mode [ 834.492294][T11488] device hsr_slave_1 left promiscuous mode [ 834.517978][T11488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.556334][T11488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.907079][T11488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.918235][T11488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.926303][T11488] device bridge_slave_1 left promiscuous mode [ 834.956063][T11488] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.834265][T11488] device bridge_slave_0 left promiscuous mode [ 836.867806][T11488] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.024686][T11488] device veth1_macvtap left promiscuous mode [ 837.077554][T11488] device veth0_macvtap left promiscuous mode [ 837.086436][T11488] device veth1_vlan left promiscuous mode [ 837.092942][T11488] device veth0_vlan left promiscuous mode [ 837.215432][ T9537] EXT4-fs (loop8): unmounting filesystem. [ 837.385011][T12169] loop4: detected capacity change from 0 to 256 [ 837.411090][T12167] loop8: detected capacity change from 0 to 512 [ 837.493228][T12167] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 837.518837][T12167] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.811930][ T9537] EXT4-fs (loop8): unmounting filesystem. [ 841.974380][T11488] team0 (unregistering): Port device team_slave_1 removed [ 842.122571][T11488] team0 (unregistering): Port device team_slave_0 removed [ 842.248792][T11488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.381759][T11488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.456911][T11488] bond0 (unregistering): Released all slaves [ 843.548350][T11869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 843.574947][T12195] netlink: 'syz.8.1840': attribute type 16 has an invalid length. [ 843.588235][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1840'. [ 843.687501][T11869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 843.755275][T11869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 843.820760][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 843.970894][T12204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 844.511521][T11869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.609617][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 844.624201][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 844.646068][T11869] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.701004][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 844.763202][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 844.822493][ T4882] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.830024][ T4882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.887537][ T4380] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 844.933440][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 844.965551][T12233] x_tables: duplicate underflow at hook 1 [ 845.107728][ T4380] usb 9-1: Using ep0 maxpacket: 8 [ 845.142610][ T4380] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 845.344541][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 845.361578][ T4380] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 845.374540][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 845.384100][ T7188] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.391324][ T7188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.396559][ T4380] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 845.406989][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 845.460394][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 845.498633][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 845.563762][ T4380] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 845.576323][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 845.588221][ T4380] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.596371][ T4380] usb 9-1: Product: syz [ 845.606267][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 845.618310][ T4380] usb 9-1: Manufacturer: Ф [ 845.622900][ T4380] usb 9-1: SerialNumber: syz [ 845.627136][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 845.636099][ T4312] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 845.665954][T12237] loop4: detected capacity change from 0 to 512 [ 845.681026][T12237] EXT4-fs: Ignoring removed orlov option [ 845.780890][T12237] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 845.809775][T11869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 845.914708][T12237] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 845.959226][T11869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 846.017811][T12237] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1850: corrupted in-inode xattr [ 846.107276][T12237] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1850: couldn't read orphan inode 15 (err -117) [ 846.181130][T12237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 846.182708][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 846.267585][ T4312] usb 2-1: Using ep0 maxpacket: 32 [ 846.275345][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.285912][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 846.313858][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 846.314005][ T4312] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 846.336482][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 846.365718][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 846.390425][ T4312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.406557][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 846.477870][ T4312] usb 2-1: config 0 descriptor?? [ 846.529920][ T4312] hub 2-1:0.0: bad descriptor, ignoring hub [ 846.535960][ T4312] hub: probe of 2-1:0.0 failed with error -5 [ 846.571226][ T4312] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 846.617967][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 847.144185][T12262] loop1: detected capacity change from 0 to 512 [ 847.483664][T12262] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1849: bad orphan inode 11862016 [ 847.506308][T12262] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 847.516346][T12262] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 849.934699][T11666] EXT4-fs (loop1): unmounting filesystem. [ 850.065130][ T4380] usb 9-1: 0:2 : does not exist [ 850.170774][ T4380] usb 9-1: USB disconnect, device number 4 [ 850.223284][ T127] usb 2-1: USB disconnect, device number 5 [ 850.463396][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1855'. [ 850.487105][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1855'. [ 850.509680][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 850.576875][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 850.607772][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 850.774561][T11869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.053500][T12294] overlayfs: failed to resolve './file0': -2 [ 851.569357][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 851.586855][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 851.771669][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 851.798974][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 851.836421][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 851.944881][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 852.047505][T12304] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 852.078433][T12304] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 852.115663][T12302] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1862'. [ 852.146856][T11869] device veth0_vlan entered promiscuous mode [ 852.197165][T11869] device veth1_vlan entered promiscuous mode [ 852.691370][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 852.731763][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 852.748230][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.768273][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 852.872519][T11869] device veth0_macvtap entered promiscuous mode [ 852.926317][T11869] device veth1_macvtap entered promiscuous mode [ 852.994439][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.027693][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.078492][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.089488][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.122042][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.150976][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.180713][T11869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.219732][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 853.255023][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 853.298245][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 853.327252][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.373089][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.457475][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.477479][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.507776][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.528497][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.621898][T11869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.633565][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 853.652571][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 853.711584][T11869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.731058][T11869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.777668][T11869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.812865][T11869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.827645][ T4380] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 854.076547][ T7728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.157593][ T4380] usb 4-1: Using ep0 maxpacket: 32 [ 854.163467][ T7728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.165035][ T4380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.197479][ T4380] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 854.206996][ T4380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.299701][ T4380] usb 4-1: config 0 descriptor?? [ 854.461238][ T4380] hub 4-1:0.0: bad descriptor, ignoring hub [ 855.042030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 855.049899][ T4380] hub: probe of 4-1:0.0 failed with error -5 [ 855.153789][ T4380] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 855.663742][ T7020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.791379][ T7020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.972787][T10770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 857.407175][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'. [ 857.418366][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1870'. [ 857.487758][ T8068] usb 4-1: USB disconnect, device number 15 [ 857.593824][T12359] fuse: Bad value for 'fd' [ 857.677100][T12362] loop1: detected capacity change from 0 to 256 [ 857.972231][T12366] overlayfs: failed to resolve './file0': -2 [ 858.823776][T12378] loop8: detected capacity change from 0 to 512 [ 858.920008][T12378] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 860.588820][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.947624][T11053] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 861.178945][T11053] usb 4-1: Using ep0 maxpacket: 32 [ 861.397838][T11053] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.697662][T11053] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 861.787587][T11053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.988615][T11053] usb 4-1: config 0 descriptor?? [ 863.530113][T11053] hub 4-1:0.0: bad descriptor, ignoring hub [ 863.536161][T11053] hub: probe of 4-1:0.0 failed with error -5 [ 863.559577][T11053] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 866.171926][T12440] loop8: detected capacity change from 0 to 16 [ 866.206434][T12440] erofs: (device loop8): mounted with root inode @ nid 36. [ 866.686193][T12442] erofs: (device loop8): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 869.371449][T12457] syz.8.1888[12457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 869.371973][T12457] syz.8.1888[12457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 869.464723][T12457] loop8: detected capacity change from 0 to 1024 [ 869.489614][T12457] EXT4-fs: Ignoring removed orlov option [ 870.965888][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.972308][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.549143][T12457] EXT4-fs warning (device loop8): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop8. [ 873.832265][T12468] binder: 12466:12468 unknown command 1074553619 [ 873.877675][T12468] binder: 12466:12468 ioctl c0306201 200000000540 returned -22 [ 873.965193][T12468] input: syz0 as /devices/virtual/input/input11 [ 874.137465][ T4380] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 874.238179][T12477] [ 874.241130][T12477] ============================= [ 874.246053][T12477] WARNING: suspicious RCU usage [ 874.251029][T12477] syzkaller #0 Not tainted [ 874.255490][T12477] ----------------------------- [ 874.260556][T12477] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 874.269226][T12477] [ 874.269226][T12477] other info that might help us debug this: [ 874.269226][T12477] [ 874.279714][T12477] [ 874.279714][T12477] rcu_scheduler_active = 2, debug_locks = 1 [ 874.287866][T12477] 1 lock held by syz.4.1893/12477: [ 874.293174][T12477] #0: ffffffff8cb2ad60 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 874.303535][T12477] [ 874.303535][T12477] stack backtrace: [ 874.309706][T12477] CPU: 0 PID: 12477 Comm: syz.4.1893 Not tainted syzkaller #0 [ 874.317206][T12477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 874.327310][T12477] Call Trace: [ 874.330611][T12477] [ 874.333561][T12477] dump_stack_lvl+0x168/0x22e [ 874.338530][T12477] ? show_regs_print_info+0x12/0x12 [ 874.343748][T12477] ? load_image+0x3b0/0x3b0 [ 874.348289][T12477] lockdep_rcu_suspicious+0x1dd/0x300 [ 874.353687][T12477] get_callchain_entry+0x2a5/0x3b0 [ 874.358820][T12477] get_perf_callchain+0x9f/0x480 [ 874.363791][T12477] ? put_callchain_entry+0xb0/0xb0 [ 874.369032][T12477] ? plist_add+0x3d4/0x480 [ 874.373573][T12477] ? verify_lock_unused+0x140/0x140 [ 874.378825][T12477] __bpf_get_stack+0x2ce/0x4f0 [ 874.383644][T12477] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 874.389825][T12477] ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 874.395496][T12477] bpf_get_stack_raw_tp+0x189/0x1c0 [ 874.400913][T12477] bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 874.406482][T12477] bpf_prog_run_pin_on_cpu+0xa4/0x140 [ 874.411874][T12477] bpf_prog_test_run_syscall+0x30d/0x490 [ 874.417615][T12477] ? sock_gen_cookie+0x60/0x60 [ 874.422420][T12477] ? sock_gen_cookie+0x60/0x60 [ 874.427297][T12477] bpf_prog_test_run+0x31e/0x390 [ 874.432280][T12477] __sys_bpf+0x593/0x6d0 [ 874.436547][T12477] ? bpf_link_show_fdinfo+0x340/0x340 [ 874.441958][T12477] ? lock_chain_count+0x20/0x20 [ 874.446839][T12477] __x64_sys_bpf+0x78/0x90 [ 874.451277][T12477] do_syscall_64+0x4c/0xa0 [ 874.455717][T12477] ? clear_bhb_loop+0x60/0xb0 [ 874.460413][T12477] ? clear_bhb_loop+0x60/0xb0 [ 874.465148][T12477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.471170][T12477] RIP: 0033:0x7f01c918eec9 [ 874.475623][T12477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.495262][T12477] RSP: 002b:00007f01ca0b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 874.503704][T12477] RAX: ffffffffffffffda RBX: 00007f01c93e5fa0 RCX: 00007f01c918eec9 [ 874.511722][T12477] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 874.519744][T12477] RBP: 00007f01c9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 874.527832][T12477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.535819][T12477] R13: 00007f01c93e6038 R14: 00007f01c93e5fa0 R15: 00007ffd77e272f8 [ 874.543831][T12477] [ 874.577471][ T4380] usb 2-1: Using ep0 maxpacket: 16 [ 874.585564][ T4380] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 874.604234][ T4380] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.818143][ T4380] usb 2-1: config 0 has no interface number 0 [ 876.935041][ T4380] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 876.957502][ T4380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.965673][ T4380] usb 2-1: Product: syz [ 876.984134][ T4380] usb 2-1: config 0 descriptor?? [ 877.015346][ T4380] usb 2-1: can't set config #0, error -71 [ 877.042965][ T4380] usb 2-1: USB disconnect, device number 6 [ 877.877776][ T8068] usb 4-1: USB disconnect, device number 16