last executing test programs: 3m36.439874191s ago: executing program 1 (id=387): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYBLOB=',wfdno']) 3m34.752386201s ago: executing program 1 (id=399): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @local}, {0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e24, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x7, 0xfffffffffffffffc, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x25, 0x20000004, 0x7f, 0x44233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m31.087272994s ago: executing program 1 (id=402): io_setup(0x1, &(0x7f0000000280)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x8, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast2, 0x700, 0x700, 0xa3c, 0x5}}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', 0x8800, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") creat(0x0, 0xa8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) 3m29.069076157s ago: executing program 0 (id=405): pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000022657a6e8b48b9000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10d00, 0xf) 3m28.920338778s ago: executing program 0 (id=406): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3m28.771855299s ago: executing program 0 (id=409): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x4, &(0x7f0000000000/0x4000)=nil, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x400) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000003c0)=""/126) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) 3m26.223509524s ago: executing program 1 (id=411): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x2000, 0x2000, &(0x7f0000012000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@alg, &(0x7f00000000c0)=0x8b, 0x80000) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0), 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @multicast2}, &(0x7f0000000280)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m26.061597575s ago: executing program 1 (id=412): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 3m24.699724013s ago: executing program 2 (id=414): pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000022657a6e8b48b9000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10d00, 0xf) 3m24.535764284s ago: executing program 2 (id=415): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc49, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3m24.474870335s ago: executing program 3 (id=416): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0xffffffffffffffff) 3m24.286316116s ago: executing program 2 (id=417): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000804}, 0x55) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x54}}, 0x0) 3m23.971300088s ago: executing program 3 (id=418): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) 3m22.592127966s ago: executing program 3 (id=419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000480)={@val={0xfd, 0x10}, @void, @eth={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x0, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) 3m22.431936878s ago: executing program 0 (id=420): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x2000, 0x2000, &(0x7f0000012000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@alg, &(0x7f00000000c0)=0x8b, 0x80000) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0), 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @multicast2}, &(0x7f0000000280)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m22.236223748s ago: executing program 1 (id=421): r0 = socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'ip6gretap0\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x7}}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0xee01, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) 3m22.184074249s ago: executing program 2 (id=422): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000240), 0xfffffffffffffff7, 0x8000) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000340)={0x15, "d23cfee610b65a47c8edd12f7b31922782613a90c0"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/109, 0x6d, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) socket$netlink(0x10, 0x3, 0x0) 3m22.076265509s ago: executing program 0 (id=423): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000022657a6e8b48b9000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 3m21.97400048s ago: executing program 3 (id=424): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) 3m21.004208746s ago: executing program 2 (id=425): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3m20.995072906s ago: executing program 0 (id=426): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0xf5e, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x4, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x9, 0x4, 0x50, 0x8, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) 3m20.974818466s ago: executing program 3 (id=427): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 3m20.736233148s ago: executing program 2 (id=428): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x4, &(0x7f0000000000/0x4000)=nil, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x400) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000003c0)=""/126) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) 3m20.668078048s ago: executing program 3 (id=429): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xee, 0x24a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071181a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x6}) clock_gettime(0x2, &(0x7f0000000300)) 3m4.555241987s ago: executing program 32 (id=426): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0xf5e, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x4, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x9, 0x4, 0x50, 0x8, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) 3m4.347656968s ago: executing program 33 (id=421): r0 = socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'ip6gretap0\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x7}}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0xee01, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) 3m4.209906769s ago: executing program 34 (id=428): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x4, &(0x7f0000000000/0x4000)=nil, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x400) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000003c0)=""/126) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) 3m4.09460727s ago: executing program 35 (id=429): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xee, 0x24a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071181a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x6}) clock_gettime(0x2, &(0x7f0000000300)) 19.65448525s ago: executing program 6 (id=722): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xfffb}, &(0x7f0000000140)=0x8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x24, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x49}, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000000), 0x0, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x5, 0x0, &(0x7f0000001bc0)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 17.631983532s ago: executing program 6 (id=725): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r1, 0x811, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4000040) 15.748021454s ago: executing program 6 (id=728): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x81) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000180)=0x4) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg$inet(r7, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x20004840) sendto$inet(r7, 0x0, 0x0, 0x80, 0x0, 0x0) sendto(r7, &(0x7f00000001c0)='zx', 0x2, 0x4040081, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 14.196259193s ago: executing program 6 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 12.923861391s ago: executing program 6 (id=733): r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, @in, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x2}, {0xffff, 0x50d, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x80000000}, {0x800, 0x0, 0x6}, 0x9}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x3}}, 0xe8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000775) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket(0x1d, 0x803, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) 10.545434026s ago: executing program 6 (id=736): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000240)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r1, 0x811, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4000040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 8.375925799s ago: executing program 7 (id=740): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}, 'bridge_slave_1\x00'}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) madvise(&(0x7f000052f000/0x4000)=nil, 0x4000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) 6.085886743s ago: executing program 4 (id=743): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 5.866951615s ago: executing program 7 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) unshare(0x60400) 5.423811687s ago: executing program 5 (id=745): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x2, [0x9, 0x80000001, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0x4, 0x39, 0x747d5e13, 0x7, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x3ff, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xf, 0x4, 0x2, 0x6, 0x8, 0x3, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x29, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x7fffffff, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xfffffffd, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x800, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0xe, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x200, 0x2854, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x24, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x42, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x49) bind$can_raw(r6, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x7ffffffe, 0x0, 0x0) 4.337255494s ago: executing program 4 (id=746): syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000401, &(0x7f0000000000)=ANY=[], 0x1, 0x235, &(0x7f0000001300)="$eJzsmD1rVE0Ux/9zX3efPIo2KWwsDBiR7GbvNmmCRhCsREh8q3Qx1xB3k5XNFcyCSLCx0c5CsLHwC1gETGVh5xcIaKGCoOAWFjZprpyZ2buzO4m7ubHz/IrhP3POzJxzdu4pFgzD/LN8+fzr05NzMwsQwP+YQKjXv7mAEEo7hv/H5/dOP5s9/+L1h1fvVg8/2Bo8j7akaf9C4Q/3ewDezrl4mN2U7d4hMaEnC3BIfyd9GQ5O6fWrEChpfRMOrmgdQ+C61ncM3ST/Uun2ciMu3Wo2FklM01ChIaKhOhhfZ0NgUc/T1IUw7Gvr7Xqt0YhbhvC0bRdTLpFdVh+36ucjQGfO8ZHFl6ZUxWuPH23QvFubaVU/SQUOKjqJKgTm9foMwm5tVEmM/I95vfNdK38725030pcMw5IsKDH7868Ui0QAJY5O5TtnktI5a5uOIE886N/lo2eiSo56jpvv6UjhDX+LZ/QPur8rxugBXBw1i6dFAAf6ccNdIvStlf1m0SfGO1vvbdNX2znsq1gqhl8hRn8/hVFj7n6I+ataRLvuHKRiewW2van6R/pS4KTRnzyjf5STlbvltfX21PJKbSleilejqBqOKZtsRGU5Wn2v15+Lsj/9Z5zv7+EbOAHu15KkVVFjIAIUkSStSM4j47OZ32z+uKG3JbgA4ISaUNsMshNd6w4RKB9H+pKatJ0YhmEYhmEYhmEYhmEYhmFycRxC/gtKbB9CpgeILknv3wEAAP//RnxVVg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000a40)={0xf8, 0x3, 0x601, 0x8}) 4.150216705s ago: executing program 7 (id=747): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xfffb}, &(0x7f0000000140)=0x8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x24, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x49}, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000000), 0x0, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x5, 0x0, &(0x7f0000001bc0)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 4.019898936s ago: executing program 5 (id=748): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) getdents64(r3, 0x0, 0x0) 3.901821107s ago: executing program 4 (id=749): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0xfdef, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000500000001000000000000070000000000612eb4"], 0x0, 0x29}, 0x20) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000847c5e0027b0000000000000000000000ddc26e92474ab22a801153e002ca9da43328825d18e6b7350010", @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000080)={@multicast1, @local, 0x1, "4c313039aa5f7697b71b6e6531315fe4c428e93e743a1e772d08941c415173f3", 0x1fc0000, 0x0, 0x9, 0x8}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) 3.740637108s ago: executing program 5 (id=750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) 3.100051381s ago: executing program 7 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, 0x0, 0x0) 2.500464085s ago: executing program 4 (id=752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000280)={[{@discard}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r2, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000080)=""/20, 0x14}], 0x2) 2.409878215s ago: executing program 5 (id=753): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x4, 0x273, &(0x7f0000000680)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f00000012c0)=[{&(0x7f0000000600)='.', 0x1}], 0x1, 0x10001, 0xfffffffd, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) renameat2(r0, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.991900468s ago: executing program 7 (id=754): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 1.63611945s ago: executing program 5 (id=755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}, {&(0x7f0000000300)=""/136, 0x88}], 0x2, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1.444891151s ago: executing program 4 (id=756): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001811000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 419.205748ms ago: executing program 5 (id=757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1a08700, &(0x7f0000000700)={[{@nodioread_nolock}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x0, 0x470, &(0x7f0000001040)="$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") 417.917668ms ago: executing program 7 (id=758): sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000240), 0x1004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x7a, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 0s ago: executing program 4 (id=759): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xfffb}, &(0x7f0000000140)=0x8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x24, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x49}, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000000), 0x0, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x5, 0x0, &(0x7f0000001bc0)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): 136.785552][ T6163] FAT-fs (loop3): Directory bread(block 71) failed [ 136.792867][ T6163] FAT-fs (loop3): Directory bread(block 72) failed [ 136.799586][ T6163] FAT-fs (loop3): Directory bread(block 73) failed [ 137.428401][ T6165] xt_l2tp: unknown flags: 17 [ 138.774401][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.840705][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.915624][ T6167] netlink: 'syz.1.77': attribute type 16 has an invalid length. [ 138.959611][ T6167] netlink: 'syz.1.77': attribute type 17 has an invalid length. [ 139.000381][ T6175] loop0: detected capacity change from 0 to 512 [ 139.115860][ T6175] EXT4-fs (loop0): 1 orphan inode deleted [ 139.116821][ T6177] loop3: detected capacity change from 0 to 512 [ 139.131195][ T6167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.153227][ T59] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 139.168081][ T6175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.181485][ T6177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.212107][ T59] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u4:4: Failed to release dquot type 1 [ 139.217672][ T6175] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.262843][ T6177] EXT4-fs error (device loop3): __ext4_fill_super:5497: inode #2: comm syz.3.81: inode has both inline data and extents flags [ 139.345845][ T6177] EXT4-fs (loop3): get root inode failed [ 139.399458][ T6177] EXT4-fs (loop3): mount failed [ 140.280079][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.147040][ T6215] loop0: detected capacity change from 0 to 512 [ 146.036248][ T6218] loop3: detected capacity change from 0 to 256 [ 146.634361][ T6218] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.645317][ T6218] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 146.663130][ T6215] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 147.708709][ T6218] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 151.162691][ T6238] wireguard0: entered promiscuous mode [ 151.168579][ T6238] wireguard0: entered allmulticast mode [ 152.412145][ T6243] loop0: detected capacity change from 0 to 4096 [ 152.451709][ T6243] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 152.734498][ T6253] loop2: detected capacity change from 0 to 512 [ 153.581019][ T6255] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 153.947021][ T6253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.970765][ T6253] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.126226][ T6243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.162588][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.719393][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.902109][ T6275] loop3: detected capacity change from 0 to 256 [ 156.940077][ T6275] exFAT-fs (loop3): bogus data start sector [ 156.947183][ T6275] exFAT-fs (loop3): failed to read boot sector [ 156.953426][ T6275] exFAT-fs (loop3): failed to recognize exfat type [ 161.446283][ T6297] loop2: detected capacity change from 0 to 512 [ 161.635430][ T6297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.649003][ T6297] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.557366][ T6304] loop3: detected capacity change from 0 to 256 [ 162.614150][ T6304] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.668180][ T6304] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 162.762551][ T6304] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 163.253970][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.934356][ T6330] loop2: detected capacity change from 0 to 1024 [ 167.456529][ T6330] fscrypt: Error allocating hmac(sha512): -2 [ 168.121031][ T6344] loop2: detected capacity change from 0 to 4096 [ 168.364774][ T6344] EXT4-fs (loop2): Test dummy encryption mode enabled [ 168.381762][ T6344] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 168.406896][ T6344] System zones: 0-5 [ 168.437487][ T6344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.877295][ T28] audit: type=1326 audit(1762582406.768:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 169.122918][ T28] audit: type=1326 audit(1762582406.778:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 169.233916][ T28] audit: type=1326 audit(1762582406.778:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 169.324856][ T28] audit: type=1326 audit(1762582406.778:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 169.385478][ T28] audit: type=1326 audit(1762582406.778:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 169.407916][ T28] audit: type=1326 audit(1762582406.778:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 169.414624][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.432557][ T28] audit: type=1326 audit(1762582406.778:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 169.466145][ T28] audit: type=1326 audit(1762582406.778:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 169.531882][ T28] audit: type=1326 audit(1762582406.788:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 169.606944][ T28] audit: type=1326 audit(1762582406.788:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 171.057253][ T6317] tipc: Enabling of bearer rejected, failed to enable media [ 171.411938][ T6374] loop3: detected capacity change from 0 to 1024 [ 171.427381][ T6374] EXT4-fs: Ignoring removed bh option [ 171.432992][ T6374] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.558774][ T6374] EXT4-fs (loop3): Test dummy encryption mode enabled [ 171.631312][ T6374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.935656][ T6375] loop2: detected capacity change from 0 to 512 [ 172.056726][ T6375] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 172.204568][ T6375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a017c11c, mo2=0002] [ 172.272347][ T6375] System zones: 1-12 [ 172.335699][ T6375] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.134: corrupted in-inode xattr: e_value size too large [ 172.365253][ T6381] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 172.394613][ T6375] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.134: couldn't read orphan inode 15 (err -117) [ 172.453772][ T6375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.069817][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.640580][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 174.640596][ T28] audit: type=1326 audit(1762582412.568:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 174.643494][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.650801][ T28] audit: type=1326 audit(1762582412.568:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 174.712032][ T28] audit: type=1326 audit(1762582412.568:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 174.825460][ T28] audit: type=1326 audit(1762582412.568:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 174.927191][ T28] audit: type=1326 audit(1762582412.568:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 175.069495][ T28] audit: type=1326 audit(1762582412.618:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 175.162553][ T28] audit: type=1326 audit(1762582412.618:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 175.211077][ T28] audit: type=1326 audit(1762582412.618:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 175.241650][ T28] audit: type=1326 audit(1762582412.618:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 175.265041][ T28] audit: type=1326 audit(1762582412.618:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 175.335699][ T6412] loop2: detected capacity change from 0 to 256 [ 175.484190][ T6412] FAT-fs (loop2): Directory bread(block 64) failed [ 175.508624][ T6412] FAT-fs (loop2): Directory bread(block 65) failed [ 175.515446][ T6412] FAT-fs (loop2): Directory bread(block 66) failed [ 175.575299][ T6412] FAT-fs (loop2): Directory bread(block 67) failed [ 175.616215][ T6412] FAT-fs (loop2): Directory bread(block 68) failed [ 175.674973][ T6412] FAT-fs (loop2): Directory bread(block 69) failed [ 175.710189][ T6412] FAT-fs (loop2): Directory bread(block 70) failed [ 175.730123][ T6412] FAT-fs (loop2): Directory bread(block 71) failed [ 175.775993][ T6412] FAT-fs (loop2): Directory bread(block 72) failed [ 175.836741][ T6412] FAT-fs (loop2): Directory bread(block 73) failed [ 181.076959][ T6435] loop2: detected capacity change from 0 to 512 [ 181.288455][ T6435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.302102][ T6435] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.198225][ T6429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.031347][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.202039][ T6452] loop3: detected capacity change from 0 to 256 [ 184.404024][ T6456] syz.2.157[6456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.404258][ T6456] syz.2.157[6456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.542777][ T6452] FAT-fs (loop3): Directory bread(block 64) failed [ 184.602149][ T6452] FAT-fs (loop3): Directory bread(block 65) failed [ 184.614577][ T6452] FAT-fs (loop3): Directory bread(block 66) failed [ 184.624315][ T6452] FAT-fs (loop3): Directory bread(block 67) failed [ 184.647948][ T6452] FAT-fs (loop3): Directory bread(block 68) failed [ 184.671902][ T6452] FAT-fs (loop3): Directory bread(block 69) failed [ 184.687541][ T6452] FAT-fs (loop3): Directory bread(block 70) failed [ 184.703742][ T6452] FAT-fs (loop3): Directory bread(block 71) failed [ 184.713503][ T6452] FAT-fs (loop3): Directory bread(block 72) failed [ 184.725753][ T6452] FAT-fs (loop3): Directory bread(block 73) failed [ 187.302886][ T6482] loop2: detected capacity change from 0 to 2048 [ 187.408681][ T6482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 187.746155][ T6486] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 187.897323][ T6486] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 188.003291][ T6486] EXT4-fs (loop2): This should not happen!! Data will be lost [ 188.003291][ T6486] [ 188.097128][ T6486] EXT4-fs (loop2): Total free blocks count 0 [ 188.123646][ T6486] EXT4-fs (loop2): Free/Dirty block details [ 188.153546][ T6486] EXT4-fs (loop2): free_blocks=2415919104 [ 188.180145][ T6486] EXT4-fs (loop2): dirty_blocks=16 [ 188.185440][ T6486] EXT4-fs (loop2): Block reservation details [ 188.211628][ T6486] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 188.761672][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 188.904053][ T6492] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 193.703855][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 193.703871][ T28] audit: type=1326 audit(1762582431.628:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d18f6c9 code=0x7ffc0000 [ 193.766716][ T28] audit: type=1326 audit(1762582431.628:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d18f6c9 code=0x7ffc0000 [ 193.816642][ T28] audit: type=1326 audit(1762582431.668:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe1d18f6c9 code=0x7ffc0000 [ 193.821543][ T6530] netlink: 96 bytes leftover after parsing attributes in process `syz.3.182'. [ 193.896939][ T28] audit: type=1326 audit(1762582431.668:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d18f6c9 code=0x7ffc0000 [ 193.946685][ T28] audit: type=1326 audit(1762582431.668:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d18f6c9 code=0x7ffc0000 [ 193.995955][ T28] audit: type=1326 audit(1762582431.668:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe1d18f6c9 code=0x7ffc0000 [ 194.020467][ T28] audit: type=1326 audit(1762582431.678:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d18f6c9 code=0x7ffc0000 [ 194.076676][ T28] audit: type=1326 audit(1762582431.678:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe1d18f6c9 code=0x7ffc0000 [ 194.143079][ T28] audit: type=1326 audit(1762582431.678:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d18f6c9 code=0x7ffc0000 [ 194.206711][ T28] audit: type=1326 audit(1762582431.678:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fbe1d18f6c9 code=0x7ffc0000 [ 194.675645][ T6545] loop2: detected capacity change from 0 to 40427 [ 194.700755][ T6545] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 194.717058][ T6545] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 194.740389][ T6559] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 194.765343][ T6545] F2FS-fs (loop2): invalid crc value [ 194.778215][ T6545] F2FS-fs (loop2): Found nat_bits in checkpoint [ 194.903423][ T6545] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 194.924493][ T6545] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.263070][ T5894] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 195.357238][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.363649][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.590738][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.619678][ T5894] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 49919, setting to 1024 [ 195.646718][ T5894] usb 1-1: config 1 interface 1 has no altsetting 0 [ 195.698434][ T5894] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.716641][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.724713][ T5894] usb 1-1: Product: syz [ 195.752340][ T5894] usb 1-1: Manufacturer: syz [ 195.762081][ T5894] usb 1-1: SerialNumber: syz [ 196.074539][ T6577] syz.2.193[6577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.074759][ T6577] syz.2.193[6577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.599267][ T5894] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 197.650478][ T5894] usb 1-1: found format II with max.bitrate = 2418, frame size=7 [ 197.669412][ T5894] usb 1-1: 2:1: All rates were zero [ 197.867516][ T5894] usb 1-1: USB disconnect, device number 2 [ 199.029293][ T6604] process 'syz.3.203' launched './file1' with NULL argv: empty string added [ 200.036884][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 200.246789][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 200.269981][ T23] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 200.286693][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.303550][ T23] usb 3-1: config 0 descriptor?? [ 200.547460][ T146] usb 3-1: USB disconnect, device number 2 [ 200.974389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 200.983683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 201.076939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 201.085912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 201.566466][ T6639] loop3: detected capacity change from 0 to 512 [ 201.625679][ T6639] EXT4-fs (loop3): 1 orphan inode deleted [ 201.636847][ T49] __quota_error: 1 callbacks suppressed [ 201.636864][ T49] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 201.650305][ T6639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.665204][ T49] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:3: Failed to release dquot type 1 [ 201.687026][ T6639] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.921570][ T5909] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 202.139488][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.363394][ T5909] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 202.525156][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.561733][ T5909] usb 1-1: config 0 descriptor?? [ 202.715327][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.141110][ T6664] loop3: detected capacity change from 0 to 256 [ 203.431486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 203.738671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 207.978877][ T5909] usbhid 1-1:0.0: can't add hid device: -32 [ 207.985417][ T5909] usbhid: probe of 1-1:0.0 failed with error -32 [ 208.097486][ T6664] FAT-fs (loop3): Directory bread(block 64) failed [ 208.104476][ T6664] FAT-fs (loop3): Directory bread(block 65) failed [ 208.111272][ T6664] FAT-fs (loop3): Directory bread(block 66) failed [ 208.117859][ T6664] FAT-fs (loop3): Directory bread(block 67) failed [ 208.124544][ T6664] FAT-fs (loop3): Directory bread(block 68) failed [ 208.131468][ T6664] FAT-fs (loop3): Directory bread(block 69) failed [ 208.138204][ T6664] FAT-fs (loop3): Directory bread(block 70) failed [ 208.145131][ T6664] FAT-fs (loop3): Directory bread(block 71) failed [ 208.152121][ T6664] FAT-fs (loop3): Directory bread(block 72) failed [ 208.158710][ T6664] FAT-fs (loop3): Directory bread(block 73) failed [ 208.176849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 208.203299][ T5909] usb 1-1: USB disconnect, device number 3 [ 208.636034][ T28] audit: type=1326 audit(1762582446.558:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd698f6c9 code=0x7ffc0000 [ 208.931219][ T28] audit: type=1326 audit(1762582446.558:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd698f6c9 code=0x7ffc0000 [ 209.362168][ T28] audit: type=1326 audit(1762582446.778:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cd698f6c9 code=0x7ffc0000 [ 209.421614][ T28] audit: type=1326 audit(1762582446.818:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd698f6c9 code=0x7ffc0000 [ 209.455411][ T28] audit: type=1326 audit(1762582446.838:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd698f6c9 code=0x7ffc0000 [ 209.483897][ T28] audit: type=1326 audit(1762582446.978:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cd698f6c9 code=0x7ffc0000 [ 209.514194][ T28] audit: type=1326 audit(1762582447.068:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd698f6c9 code=0x7ffc0000 [ 209.541135][ T28] audit: type=1326 audit(1762582447.228:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cd698f6c9 code=0x7ffc0000 [ 209.577847][ T28] audit: type=1326 audit(1762582447.228:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd698f6c9 code=0x7ffc0000 [ 209.606827][ T28] audit: type=1326 audit(1762582447.228:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd698f6c9 code=0x7ffc0000 [ 212.096753][ T6701] Zero length message leads to an empty skb [ 212.636762][ T6701] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 215.043497][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 215.043513][ T28] audit: type=1326 audit(1762582452.968:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 215.183116][ T28] audit: type=1326 audit(1762582452.968:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 215.279485][ T28] audit: type=1326 audit(1762582452.998:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 215.302812][ T28] audit: type=1326 audit(1762582452.998:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 215.353414][ T28] audit: type=1326 audit(1762582452.998:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 215.894071][ T28] audit: type=1326 audit(1762582453.008:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 216.182845][ T28] audit: type=1326 audit(1762582453.008:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 216.675981][ T28] audit: type=1326 audit(1762582453.008:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 216.930978][ T28] audit: type=1326 audit(1762582453.008:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 217.063320][ T28] audit: type=1326 audit(1762582453.008:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 218.243084][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 218.249221][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 218.255488][ T5109] Bluetooth: hci3: command 0x0406 tx timeout [ 218.262882][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 220.397439][ T6763] tipc: Started in network mode [ 220.402616][ T6763] tipc: Node identity ac14140f, cluster identity 4711 [ 220.417001][ T6763] tipc: New replicast peer: 255.255.255.255 [ 220.425718][ T6763] tipc: Enabled bearer , priority 10 [ 221.325889][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.257'. [ 221.538690][ T23] tipc: Node number set to 2886997007 [ 226.720669][ T6843] tipc: Started in network mode [ 226.729497][ T6843] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 226.752368][ T6843] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 226.763809][ T6843] tipc: Enabled bearer , priority 10 [ 226.852337][ T6848] loop3: detected capacity change from 0 to 256 [ 226.859987][ T6848] exfat: Unknown parameter 'fsmagic' [ 228.216456][ T146] tipc: Node number set to 1 [ 229.540322][ T6852] tty tty23: ldisc open failed (-12), clearing slot 22 [ 230.411130][ T6876] veth0_vlan: entered allmulticast mode [ 231.277297][ T6878] veth0_vlan: left promiscuous mode [ 231.283582][ T6878] veth0_vlan: entered promiscuous mode [ 232.103478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 232.393978][ T6891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.296'. [ 234.828492][ T6925] loop3: detected capacity change from 0 to 512 [ 234.932191][ T6925] EXT4-fs (loop3): 1 orphan inode deleted [ 234.957397][ T3474] __quota_error: 12 callbacks suppressed [ 234.957417][ T3474] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 234.996369][ T6925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.061344][ T3474] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:11: Failed to release dquot type 1 [ 235.084743][ T6925] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.894814][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.215267][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 252.405315][ T7063] overlay: ./file1 is not a directory [ 253.369064][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 255.027903][ T7084] loop3: detected capacity change from 0 to 512 [ 255.082110][ T7084] EXT4-fs (loop3): 1 orphan inode deleted [ 255.108139][ T7084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.120925][ T2923] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 255.157026][ T2923] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:8: Failed to release dquot type 1 [ 255.157633][ T28] audit: type=1326 audit(1762582493.088:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 255.193680][ T7084] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.336838][ T28] audit: type=1326 audit(1762582493.138:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 255.431935][ T28] audit: type=1326 audit(1762582493.158:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 255.456100][ T28] audit: type=1326 audit(1762582493.158:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 255.493582][ T28] audit: type=1326 audit(1762582493.158:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 255.652077][ T28] audit: type=1326 audit(1762582493.158:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 255.782245][ T28] audit: type=1326 audit(1762582493.178:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 255.935294][ T28] audit: type=1326 audit(1762582493.178:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 256.010948][ T28] audit: type=1326 audit(1762582493.178:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952cd8f6c9 code=0x7ffc0000 [ 256.039320][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.680505][ T5860] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 256.792473][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.799931][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.924067][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 256.967117][ T5860] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 256.985216][ T5860] usb 3-1: config 0 has no interface number 0 [ 257.002317][ T5860] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 257.024750][ T5860] usb 3-1: config 0 interface 196 has no altsetting 0 [ 257.060921][ T9] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 257.074328][ T5860] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 257.083851][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.092498][ T5860] usb 3-1: Product: syz [ 257.101870][ T5860] usb 3-1: Manufacturer: syz [ 257.106846][ T5860] usb 3-1: SerialNumber: syz [ 257.114294][ T5860] usb 3-1: config 0 descriptor?? [ 257.131406][ T7100] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 257.287104][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 257.317087][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.345736][ T9] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.396568][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.403350][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0fc5, bcdDevice= 0.00 [ 257.423065][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.454484][ T9] usb 4-1: config 0 descriptor?? [ 257.903120][ T9] wacom 0003:056A:0FC5.0001: Unknown device_type for 'HID 056a:0fc5'. Ignoring. [ 258.011979][ T5860] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 258.091297][ T5843] usb 4-1: USB disconnect, device number 2 [ 259.073465][ T7131] loop3: detected capacity change from 0 to 512 [ 259.308815][ T7131] EXT4-fs (loop3): 1 orphan inode deleted [ 259.332890][ T7131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.355491][ T2912] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:7: Failed to release dquot type 1 [ 259.461706][ T7131] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.441237][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.716480][ T7135] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 261.727995][ T7135] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 261.736712][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 261.736730][ T28] audit: type=1800 audit(1762582499.638:145): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.375" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 261.737614][ T7135] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 261.860687][ T5860] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 261.893604][ T5860] usb 3-1: USB disconnect, device number 3 [ 262.145083][ T7150] loop3: detected capacity change from 0 to 256 [ 262.159894][ T5860] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 264.411468][ T28] audit: type=1326 audit(1762582502.328:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 264.461202][ T28] audit: type=1326 audit(1762582502.338:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 264.531219][ T28] audit: type=1326 audit(1762582502.338:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 264.585651][ T28] audit: type=1326 audit(1762582502.338:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 264.748194][ T28] audit: type=1326 audit(1762582502.338:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 264.830089][ T28] audit: type=1326 audit(1762582502.338:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 264.892581][ T28] audit: type=1326 audit(1762582502.338:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 264.981784][ T28] audit: type=1326 audit(1762582502.338:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 265.035032][ T28] audit: type=1326 audit(1762582502.338:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af098f6c9 code=0x7ffc0000 [ 265.354493][ T7188] 9pnet_fd: Insufficient options for proto=fd [ 276.139875][ T7255] loop3: detected capacity change from 0 to 512 [ 276.261801][ T7255] EXT4-fs (loop3): 1 orphan inode deleted [ 276.278224][ T7255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.291259][ T3449] __quota_error: 13 callbacks suppressed [ 276.291274][ T3449] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 276.449279][ T3449] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:10: Failed to release dquot type 1 [ 276.456994][ T7255] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.575744][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.631011][ T7282] tipc: Enabled bearer , priority 0 [ 279.708111][ T7289] input: syz1 as /devices/virtual/input/input11 [ 297.551473][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.569478][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.580169][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.596086][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.607215][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 297.621716][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.658020][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.668828][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.677200][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.685640][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.696951][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 297.706749][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.030143][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.039891][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.073507][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.088576][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.103865][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 298.120121][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.134644][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.145840][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.169864][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.180821][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.188962][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 298.196460][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.418266][ T7305] chnl_net:caif_netlink_parms(): no params data found [ 299.444323][ T7304] chnl_net:caif_netlink_parms(): no params data found [ 299.471451][ T7309] chnl_net:caif_netlink_parms(): no params data found [ 299.576862][ T7311] chnl_net:caif_netlink_parms(): no params data found [ 299.699663][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.707056][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.714333][ T7305] bridge_slave_0: entered allmulticast mode [ 299.722612][ T7305] bridge_slave_0: entered promiscuous mode [ 299.746679][ T5795] Bluetooth: hci4: command tx timeout [ 299.783422][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.792932][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.800821][ T7305] bridge_slave_1: entered allmulticast mode [ 299.809561][ T7305] bridge_slave_1: entered promiscuous mode [ 299.827205][ T5795] Bluetooth: hci5: command tx timeout [ 299.895905][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.907402][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.914576][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.922876][ T7304] bridge_slave_0: entered allmulticast mode [ 299.930064][ T7304] bridge_slave_0: entered promiscuous mode [ 299.939641][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.947034][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.954287][ T7304] bridge_slave_1: entered allmulticast mode [ 299.961711][ T7304] bridge_slave_1: entered promiscuous mode [ 299.969290][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.976414][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.983963][ T7309] bridge_slave_0: entered allmulticast mode [ 299.991299][ T7309] bridge_slave_0: entered promiscuous mode [ 300.017061][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.054529][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.062543][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.070091][ T7309] bridge_slave_1: entered allmulticast mode [ 300.078085][ T7309] bridge_slave_1: entered promiscuous mode [ 300.086395][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.093666][ T7311] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.103318][ T7311] bridge_slave_0: entered allmulticast mode [ 300.111041][ T7311] bridge_slave_0: entered promiscuous mode [ 300.138704][ T7305] team0: Port device team_slave_0 added [ 300.174688][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.182073][ T7311] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.189577][ T7311] bridge_slave_1: entered allmulticast mode [ 300.196780][ T7311] bridge_slave_1: entered promiscuous mode [ 300.212399][ T7305] team0: Port device team_slave_1 added [ 300.230824][ T5795] Bluetooth: hci1: command tx timeout [ 300.249259][ T7304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.304035][ T7304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.317075][ T5795] Bluetooth: hci3: command tx timeout [ 300.335306][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.342967][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.370658][ T7305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.383853][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.391332][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.419455][ T7305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.435622][ T7309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.480956][ T7304] team0: Port device team_slave_0 added [ 300.499230][ T7309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.525133][ T7311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.538993][ T7311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.550000][ T7304] team0: Port device team_slave_1 added [ 300.607169][ T7309] team0: Port device team_slave_0 added [ 300.649068][ T7311] team0: Port device team_slave_0 added [ 300.671284][ T7309] team0: Port device team_slave_1 added [ 300.691704][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.699212][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.726927][ T7304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.740228][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.747339][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.773892][ T7304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.789019][ T7311] team0: Port device team_slave_1 added [ 300.815101][ T7305] hsr_slave_0: entered promiscuous mode [ 300.822180][ T7305] hsr_slave_1: entered promiscuous mode [ 300.830376][ T7305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.840421][ T7305] Cannot create hsr debugfs directory [ 300.896790][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.903794][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.932122][ T7311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.945638][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.953571][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.979702][ T7309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.993373][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.000566][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.028080][ T7309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.067259][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.074259][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.100493][ T7311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.158028][ T7304] hsr_slave_0: entered promiscuous mode [ 301.164812][ T7304] hsr_slave_1: entered promiscuous mode [ 301.171732][ T7304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.180285][ T7304] Cannot create hsr debugfs directory [ 301.258066][ T7311] hsr_slave_0: entered promiscuous mode [ 301.264735][ T7311] hsr_slave_1: entered promiscuous mode [ 301.272866][ T7311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.282925][ T7311] Cannot create hsr debugfs directory [ 301.408128][ T7309] hsr_slave_0: entered promiscuous mode [ 301.414792][ T7309] hsr_slave_1: entered promiscuous mode [ 301.421565][ T7309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.431291][ T7309] Cannot create hsr debugfs directory [ 301.824289][ T7305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.827796][ T5795] Bluetooth: hci4: command tx timeout [ 301.844074][ T7305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 301.868268][ T7305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 301.879029][ T7305] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 301.907267][ T5795] Bluetooth: hci5: command tx timeout [ 301.982294][ T7311] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 301.997235][ T7311] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 302.013070][ T7311] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 302.023153][ T7311] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 302.172760][ T7304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 302.187104][ T7304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 302.211058][ T7304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 302.221937][ T7304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 302.307155][ T5795] Bluetooth: hci1: command tx timeout [ 302.307505][ T7305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.364089][ T7309] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 302.387730][ T5795] Bluetooth: hci3: command tx timeout [ 302.405042][ T7309] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 302.420104][ T7309] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 302.431284][ T7309] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 302.470176][ T7305] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.503744][ T7311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.526607][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.533772][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.589674][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.596912][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.626254][ T7311] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.685307][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.692581][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.792322][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.799571][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.985393][ T7304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.037813][ T7305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.110435][ T7304] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.139263][ T7309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.162799][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.170023][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.240019][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.247393][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.264810][ T7309] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.333161][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.340424][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.391904][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.399156][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.596352][ T7311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.908599][ T5795] Bluetooth: hci4: command tx timeout [ 303.989164][ T5795] Bluetooth: hci5: command tx timeout [ 304.010326][ T7305] veth0_vlan: entered promiscuous mode [ 304.035790][ T7305] veth1_vlan: entered promiscuous mode [ 304.117778][ T7304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.202062][ T7305] veth0_macvtap: entered promiscuous mode [ 304.217505][ T7309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.259999][ T7305] veth1_macvtap: entered promiscuous mode [ 304.327074][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.343266][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.354369][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.366098][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.379302][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.390163][ T5795] Bluetooth: hci1: command tx timeout [ 304.396258][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.408308][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.418921][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.431027][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.467836][ T5795] Bluetooth: hci3: command tx timeout [ 304.483714][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.526957][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.548275][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.576612][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.600317][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.622263][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.643105][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.656065][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.669006][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.714433][ T7305] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.727914][ T7305] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.746619][ T7305] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.755392][ T7305] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.865781][ T7311] veth0_vlan: entered promiscuous mode [ 304.919483][ T7311] veth1_vlan: entered promiscuous mode [ 305.032800][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.060479][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.091616][ T7304] veth0_vlan: entered promiscuous mode [ 305.134697][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.135815][ T7311] veth0_macvtap: entered promiscuous mode [ 305.155918][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.181846][ T7304] veth1_vlan: entered promiscuous mode [ 305.189282][ T7309] veth0_vlan: entered promiscuous mode [ 305.208578][ T7309] veth1_vlan: entered promiscuous mode [ 305.249510][ T7311] veth1_macvtap: entered promiscuous mode [ 305.333745][ T7309] veth0_macvtap: entered promiscuous mode [ 305.361300][ T7304] veth0_macvtap: entered promiscuous mode [ 305.380677][ T7309] veth1_macvtap: entered promiscuous mode [ 305.407960][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.436942][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.447379][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.460152][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.477318][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.488048][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.498226][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.508825][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.518884][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.532856][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.545853][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.575743][ T7304] veth1_macvtap: entered promiscuous mode [ 305.590647][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.602780][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.617312][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.629408][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.639815][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.650400][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.660321][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.671364][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.681519][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.692070][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.705671][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.744559][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.760656][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.792188][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.806256][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.828269][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.848899][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.886634][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.901980][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.923023][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.939383][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.949721][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.962093][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.974979][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.983988][ T7311] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.987675][ T5795] Bluetooth: hci4: command tx timeout [ 305.997903][ T7311] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.010078][ T7311] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.018988][ T7311] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.046083][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.067517][ T5795] Bluetooth: hci5: command tx timeout [ 306.072376][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.083377][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.094655][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.104826][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.115584][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.139169][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.186636][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.214754][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.225750][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.258028][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.278803][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.298094][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.326686][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.351811][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.372778][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.400431][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.411516][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.422143][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.432443][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.443030][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.455014][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.491211][ T5795] Bluetooth: hci1: command tx timeout [ 306.547574][ T5795] Bluetooth: hci3: command tx timeout [ 306.610247][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.665768][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.720971][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.785471][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.868215][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.954046][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.110738][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.142312][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.166652][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.196730][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.208285][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.219083][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.229034][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.239891][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.250012][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.260688][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.272741][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.283290][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.293471][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.304606][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.328679][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.340915][ T7309] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.362595][ T7309] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.376372][ T7309] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.386575][ T7309] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.417165][ T7304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.425935][ T7304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.438746][ T7304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.447817][ T7304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.542158][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.557088][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.725615][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.750599][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.824196][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.844826][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.868065][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.875706][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.949010][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.970917][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.104895][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.131025][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.410438][ T7416] loop5: detected capacity change from 0 to 40427 [ 308.911960][ T7416] F2FS-fs (loop5): build fault injection attr: rate: 25, type: 0x7ffff [ 309.103123][ T7416] F2FS-fs (loop5): invalid crc value [ 309.203203][ T7416] F2FS-fs (loop5): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4552/0x6c20 [ 309.254385][ T28] audit: type=1326 audit(1762582547.178:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.6.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 309.267553][ T7416] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12) [ 309.365378][ T28] audit: type=1326 audit(1762582547.178:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.6.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 309.442848][ T28] audit: type=1326 audit(1762582547.238:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.6.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 309.472120][ T7432] loop7: detected capacity change from 0 to 256 [ 309.536079][ T7432] exfat: Bad value for 'gid' [ 309.581747][ T28] audit: type=1326 audit(1762582547.238:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.6.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 309.641858][ T28] audit: type=1326 audit(1762582547.238:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.6.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 309.694884][ T7429] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.755443][ T28] audit: type=1326 audit(1762582547.238:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.6.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 309.887232][ T28] audit: type=1326 audit(1762582547.238:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.6.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 309.962080][ T28] audit: type=1326 audit(1762582547.238:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.6.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 310.019813][ T28] audit: type=1326 audit(1762582547.238:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.6.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 310.376696][ T28] audit: type=1326 audit(1762582547.238:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.6.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 317.223226][ T7474] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 317.232726][ T7474] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 317.242403][ T7474] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 317.380199][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 317.380474][ T28] audit: type=1800 audit(1762582555.148:201): pid=7474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.450" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 317.973996][ T28] audit: type=1326 audit(1762582555.898:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 318.066783][ T28] audit: type=1326 audit(1762582555.898:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 318.126667][ T28] audit: type=1326 audit(1762582555.898:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 318.152938][ T7481] loop5: detected capacity change from 0 to 256 [ 318.206741][ T7481] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 318.245699][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.258160][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.276730][ T7481] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 318.497357][ T7481] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 319.819209][ T7492] loop4: detected capacity change from 0 to 128 [ 321.445399][ T7502] xt_bpf: check failed: parse error [ 322.984210][ T7515] mmap: syz.4.459 (7515) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 324.596886][ T27] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 325.002454][ T27] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.130506][ T7528] netlink: 'syz.4.464': attribute type 3 has an invalid length. [ 325.144527][ T7528] netlink: 'syz.4.464': attribute type 3 has an invalid length. [ 325.279398][ T27] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.612501][ T27] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.633455][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.646567][ T27] usb 8-1: Product: syz [ 325.650893][ T27] usb 8-1: Manufacturer: syz [ 325.655617][ T27] usb 8-1: SerialNumber: syz [ 326.038754][ T7534] loop4: detected capacity change from 0 to 8192 [ 326.094329][ T27] usb 8-1: 0:2 : does not exist [ 326.112198][ T27] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 326.224260][ T27] usb 8-1: USB disconnect, device number 2 [ 327.250131][ T28] audit: type=1326 audit(1762582565.138:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 327.358163][ T28] audit: type=1326 audit(1762582565.138:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 328.297561][ T28] audit: type=1326 audit(1762582565.138:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 328.362221][ T7300] udevd[7300]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.611323][ T28] audit: type=1326 audit(1762582565.138:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 328.636603][ T28] audit: type=1326 audit(1762582565.158:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 328.695106][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.471'. [ 328.723478][ T28] audit: type=1326 audit(1762582565.158:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 329.377515][ T28] audit: type=1326 audit(1762582565.158:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 329.408690][ T7554] loop4: detected capacity change from 0 to 128 [ 329.507554][ T28] audit: type=1326 audit(1762582565.168:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 329.661820][ T28] audit: type=1326 audit(1762582565.168:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 329.701956][ T28] audit: type=1326 audit(1762582565.168:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.5.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 334.294704][ T7592] loop6: detected capacity change from 0 to 128 [ 334.405397][ T7596] loop4: detected capacity change from 0 to 512 [ 334.455535][ T7596] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 334.537861][ T7596] EXT4-fs (loop4): 1 truncate cleaned up [ 334.563843][ T1076] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.591089][ T7596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.746348][ T7596] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.484: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 334.895295][ T7596] EXT4-fs (loop4): Remounting filesystem read-only [ 334.923249][ T7596] EXT4-fs warning (device loop4): ext4_rename_delete:3778: inode #2: comm syz.4.484: Deleting old file: nlink 4, error=-117 [ 336.438684][ T1076] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.472961][ T7304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.647547][ T7608] tipc: Started in network mode [ 336.652551][ T7608] tipc: Node identity ac14141b, cluster identity 4711 [ 336.661228][ T7608] tipc: New replicast peer: 255.255.255.255 [ 336.669415][ T7608] tipc: Enabled bearer , priority 10 [ 336.835738][ T1076] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.676813][ T5896] tipc: Node number set to 2886997019 [ 337.758564][ T1076] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.861429][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.490'. [ 337.937359][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 338.152013][ T7627] loop7: detected capacity change from 0 to 256 [ 339.787509][ T7639] loop5: detected capacity change from 0 to 128 [ 340.499111][ T7646] loop4: detected capacity change from 0 to 512 [ 341.012163][ T7646] EXT4-fs (loop4): 1 orphan inode deleted [ 341.025879][ T7646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.056427][ T7646] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.706628][ T5919] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 341.946892][ T5919] usb 6-1: No LPM exit latency info found, disabling LPM. [ 341.994986][ T5919] usb 6-1: config 0 has no interfaces? [ 342.047929][ T5919] usb 6-1: config 0 has no interfaces? [ 342.058710][ T5919] usb 6-1: config 0 has no interfaces? [ 342.097578][ T5919] usb 6-1: config 0 has no interfaces? [ 342.142227][ T5919] usb 6-1: config 0 has no interfaces? [ 342.190943][ T5919] usb 6-1: string descriptor 0 read error: -22 [ 342.203327][ T5919] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.263901][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.328670][ T5919] usb 6-1: config 0 descriptor?? [ 342.577817][ T7505] __quota_error: 38 callbacks suppressed [ 342.577835][ T7505] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 342.647745][ T7467] usb 6-1: USB disconnect, device number 2 [ 342.676843][ T7505] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u4:15: Failed to release dquot type 1 [ 342.751370][ T7304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.416782][ T7668] syz.6.499: attempt to access beyond end of device [ 343.416782][ T7668] loop13: rw=0, sector=0, nr_sectors = 1 limit=0 [ 343.429890][ T7668] FAT-fs (loop13): unable to read boot sector [ 344.691829][ T7684] loop5: detected capacity change from 0 to 128 [ 345.278636][ T7694] veth1_macvtap: left promiscuous mode [ 345.312758][ T7694] macsec0: entered promiscuous mode [ 346.032582][ T7707] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 346.993716][ T7705] loop5: detected capacity change from 0 to 256 [ 347.002806][ T7705] exfat: Deprecated parameter 'utf8' [ 347.008366][ T7705] exfat: Deprecated parameter 'utf8' [ 347.097769][ T7705] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 347.220647][ T7715] overlayfs: failed to resolve './bus': -2 [ 347.390869][ T1076] hsr_slave_0: left promiscuous mode [ 347.414986][ T1076] hsr_slave_1: left promiscuous mode [ 347.475888][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.488174][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.519315][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.544365][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.567668][ T1076] bridge_slave_1: left allmulticast mode [ 347.576564][ T1076] bridge_slave_1: left promiscuous mode [ 347.583090][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.647733][ T1076] bridge_slave_0: left allmulticast mode [ 347.656559][ T1076] bridge_slave_0: left promiscuous mode [ 347.664345][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.889935][ T7724] loop6: detected capacity change from 0 to 128 [ 347.999390][ T1076] veth1_macvtap: left promiscuous mode [ 348.005603][ T1076] veth0_macvtap: left promiscuous mode [ 348.032036][ T1076] veth1_vlan: left promiscuous mode [ 348.056768][ T1076] veth0_vlan: left promiscuous mode [ 349.625522][ T7740] loop5: detected capacity change from 0 to 512 [ 349.635060][ T7740] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 349.765427][ T7740] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 349.782473][ T7740] EXT4-fs (loop5): 1 truncate cleaned up [ 349.789985][ T7740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.554671][ T1076] team0 (unregistering): Port device team_slave_1 removed [ 351.615578][ T1076] team0 (unregistering): Port device team_slave_0 removed [ 351.667487][ T1076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.731547][ T1076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.364998][ T1076] bond0 (unregistering): Released all slaves [ 352.607397][ T7746] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 352.717983][ T7305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.923808][ T7755] loop4: detected capacity change from 0 to 128 [ 353.714011][ T7771] loop4: detected capacity change from 0 to 128 [ 353.821306][ T7771] EXT4-fs (loop4): Test dummy encryption mode enabled [ 353.829825][ T7771] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (65119!=39978) [ 353.840068][ T7771] EXT4-fs (loop4): group descriptors corrupted! [ 355.045639][ T7780] netlink: 'syz.7.530': attribute type 12 has an invalid length. [ 355.073713][ T7780] loop7: detected capacity change from 0 to 16 [ 355.116571][ T7780] erofs: (device loop7): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 357.021856][ T1076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.324704][ T7797] netlink: 64 bytes leftover after parsing attributes in process `syz.5.533'. [ 357.467482][ T1076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.824642][ T1076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.467586][ T7807] loop5: detected capacity change from 0 to 128 [ 358.507714][ T7806] netlink: 'syz.7.534': attribute type 3 has an invalid length. [ 358.515785][ T7806] netlink: 'syz.7.534': attribute type 3 has an invalid length. [ 358.683053][ T7811] xt_hashlimit: size too large, truncated to 1048576 [ 358.739271][ T1076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.746372][ T7809] loop4: detected capacity change from 0 to 2048 [ 358.775492][ T28] audit: type=1326 audit(1762582596.698:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 358.852506][ T7809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 358.862426][ T28] audit: type=1326 audit(1762582596.698:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 358.979581][ T28] audit: type=1326 audit(1762582596.728:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 359.059255][ T28] audit: type=1326 audit(1762582596.728:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 359.172399][ T28] audit: type=1326 audit(1762582596.728:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 359.302008][ T28] audit: type=1326 audit(1762582596.728:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 359.401536][ T28] audit: type=1326 audit(1762582596.728:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 359.430548][ T1076] tipc: Disabling bearer [ 359.447574][ T1076] tipc: Left network mode [ 359.559755][ T28] audit: type=1326 audit(1762582596.728:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 359.727458][ T7809] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 359.745895][ T28] audit: type=1326 audit(1762582596.728:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 359.776875][ T7809] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 992 with error 28 [ 359.846302][ T7809] EXT4-fs (loop4): This should not happen!! Data will be lost [ 359.846302][ T7809] [ 359.857144][ T28] audit: type=1326 audit(1762582596.728:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.5.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 359.896294][ T7809] EXT4-fs (loop4): Total free blocks count 0 [ 359.924333][ T7809] EXT4-fs (loop4): Free/Dirty block details [ 359.982584][ T7809] EXT4-fs (loop4): free_blocks=2415919104 [ 360.017120][ T7809] EXT4-fs (loop4): dirty_blocks=992 [ 360.022412][ T7809] EXT4-fs (loop4): Block reservation details [ 360.096664][ T7809] EXT4-fs (loop4): i_reserved_data_blocks=62 [ 360.431278][ T7304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 362.421923][ T7860] netlink: 'syz.5.546': attribute type 3 has an invalid length. [ 362.433257][ T7860] netlink: 'syz.5.546': attribute type 3 has an invalid length. [ 362.980273][ T7863] loop5: detected capacity change from 0 to 128 [ 363.757073][ T1076] hsr_slave_0: left promiscuous mode [ 363.787993][ T1076] hsr_slave_1: left promiscuous mode [ 363.818049][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.825553][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.870596][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.917938][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.964848][ T1076] bridge_slave_1: left allmulticast mode [ 363.986630][ T1076] bridge_slave_1: left promiscuous mode [ 364.017266][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.067588][ T1076] bridge_slave_0: left allmulticast mode [ 364.073422][ T1076] bridge_slave_0: left promiscuous mode [ 364.117021][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.657394][ T1076] veth1_macvtap: left promiscuous mode [ 365.472949][ T1076] veth0_macvtap: left promiscuous mode [ 365.511338][ T1076] veth1_vlan: left promiscuous mode [ 365.534556][ T1076] veth0_vlan: left promiscuous mode [ 366.972978][ T7893] loop4: detected capacity change from 0 to 256 [ 367.017955][ T7893] exfat: Deprecated parameter 'utf8' [ 367.023462][ T7893] exfat: Deprecated parameter 'namecase' [ 367.101661][ T7893] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 368.618616][ T1076] team0 (unregistering): Port device team_slave_1 removed [ 368.686263][ T1076] team0 (unregistering): Port device team_slave_0 removed [ 368.750202][ T1076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.818934][ T1076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.654478][ T1076] bond0 (unregistering): Released all slaves [ 369.921852][ T7904] netlink: 'syz.4.555': attribute type 3 has an invalid length. [ 369.929964][ T7904] netlink: 'syz.4.555': attribute type 3 has an invalid length. [ 370.037142][ T7907] 9pnet_fd: Insufficient options for proto=fd [ 371.351596][ T7925] loop5: detected capacity change from 0 to 128 [ 372.530977][ T1076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.403290][ T7946] sch_fq: defrate 0 ignored. [ 373.663343][ T1076] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.737944][ T7953] loop6: detected capacity change from 0 to 512 [ 374.266681][ T7953] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.564: inode has both inline data and extents flags [ 374.563069][ T7953] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.564: couldn't read orphan inode 15 (err -117) [ 374.621499][ T7953] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.670237][ T1076] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.784889][ T7959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.920402][ T1076] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.937912][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 374.937927][ T28] audit: type=1326 audit(1762582612.868:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 375.001219][ T28] audit: type=1326 audit(1762582612.868:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 375.051534][ T7953] EXT4-fs (loop6): shut down requested (0) [ 375.058776][ T28] audit: type=1326 audit(1762582612.958:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 375.100001][ T28] audit: type=1326 audit(1762582612.958:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 375.116698][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 375.183805][ T28] audit: type=1326 audit(1762582612.958:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 375.233594][ T28] audit: type=1326 audit(1762582612.968:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 375.313099][ T28] audit: type=1326 audit(1762582612.968:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 375.363937][ T28] audit: type=1326 audit(1762582612.968:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 375.398873][ T27] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 375.403540][ T28] audit: type=1326 audit(1762582612.968:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 375.435831][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.467790][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.483964][ T28] audit: type=1326 audit(1762582612.968:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 375.526599][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 375.577547][ T7309] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.606980][ T27] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 375.616104][ T27] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 375.656748][ T27] usb 5-1: Manufacturer: syz [ 375.887999][ T27] usb 5-1: config 0 descriptor?? [ 376.889774][ T27] usbhid 5-1:0.0: can't add hid device: -71 [ 376.903334][ T27] usbhid: probe of 5-1:0.0 failed with error -71 [ 376.926996][ T27] usb 5-1: USB disconnect, device number 2 [ 377.017950][ T7986] loop6: detected capacity change from 0 to 1024 [ 377.050356][ T7986] EXT4-fs: inline encryption not supported [ 377.088453][ T7986] EXT4-fs: Ignoring removed i_version option [ 377.122744][ T7986] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 377.508624][ T7986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.515153][ T8004] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4031: comm syz.6.573: Allocating blocks 497-513 which overlap fs metadata [ 378.534695][ T8004] EXT4-fs (loop6): pa ffff888078171570: logic 624, phys. 113, len 25 [ 378.544479][ T8004] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5372: group 0, free 24, pa_free 25 [ 378.739633][ T7309] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.158703][ T8013] loop4: detected capacity change from 0 to 1024 [ 379.172310][ T8013] EXT4-fs: Ignoring removed mblk_io_submit option [ 379.282842][ T8013] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 379.408658][ T8013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.747645][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.754327][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.521936][ T7304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.758522][ T8024] loop4: detected capacity change from 0 to 128 [ 382.235391][ T8030] capability: warning: `syz.6.580' uses deprecated v2 capabilities in a way that may be insecure [ 383.903141][ T8043] loop7: detected capacity change from 0 to 256 [ 383.915621][ T8043] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 383.926427][ T8043] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 383.996037][ T8043] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 388.168405][ T1076] hsr_slave_0: left promiscuous mode [ 388.301718][ T1076] hsr_slave_1: left promiscuous mode [ 388.569120][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.889604][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.009502][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.074122][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.225755][ T1076] bridge_slave_1: left allmulticast mode [ 389.233810][ T8061] loop7: detected capacity change from 0 to 4096 [ 389.251704][ T1076] bridge_slave_1: left promiscuous mode [ 389.263253][ T8061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 389.301086][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.325387][ T8061] EXT4-fs (loop7): Test dummy encryption mode enabled [ 389.351153][ T8066] loop5: detected capacity change from 0 to 256 [ 389.387453][ T8066] exfat: Deprecated parameter 'utf8' [ 389.547722][ T8061] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 389.671027][ T8066] exfat: Deprecated parameter 'namecase' [ 389.731966][ T8061] System zones: 0-5 [ 389.990135][ T1076] bridge_slave_0: left allmulticast mode [ 390.015151][ T8061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.016956][ T8066] exfat: Deprecated parameter 'namecase' [ 390.037845][ T1076] bridge_slave_0: left promiscuous mode [ 390.043684][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.060034][ T8061] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.072536][ T8066] exfat: Deprecated parameter 'utf8' [ 390.143640][ T8066] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 390.230313][ T1076] veth1_macvtap: left promiscuous mode [ 390.260674][ T1076] veth0_macvtap: left promiscuous mode [ 390.266416][ T1076] veth1_vlan: left promiscuous mode [ 390.291023][ T1076] veth0_vlan: left promiscuous mode [ 394.452123][ T1076] team0 (unregistering): Port device team_slave_1 removed [ 394.607679][ T1076] team0 (unregistering): Port device team_slave_0 removed [ 394.719980][ T1076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.900634][ T8105] loop7: detected capacity change from 0 to 1024 [ 394.913575][ T8105] EXT4-fs: Ignoring removed i_version option [ 394.974564][ T8105] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 395.122382][ T8105] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:478: comm syz.7.596: Invalid block bitmap block 0 in block_group 0 [ 395.143927][ T8105] __quota_error: 35 callbacks suppressed [ 395.143979][ T8105] Quota error (device loop7): write_blk: dquota write failed [ 395.158068][ T8105] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 395.168656][ T8105] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.596: Failed to acquire dquot type 0 [ 395.190741][ T8105] EXT4-fs error (device loop7): ext4_free_blocks:6676: comm syz.7.596: Freeing blocks not in datazone - block = 0, count = 4096 [ 395.210979][ T8105] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.596: Invalid inode bitmap blk 0 in block_group 0 [ 395.229922][ T8105] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 395.242059][ T8105] EXT4-fs (loop7): 1 orphan inode deleted [ 395.256668][ T8105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.777330][ T1127] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 395.940076][ T8105] syz.7.596 (8105) used greatest stack depth: 19624 bytes left [ 396.000159][ T1127] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u4:6: Failed to release dquot type 0 [ 396.149124][ T1076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.281979][ T1076] bond0 (unregistering): Released all slaves [ 397.282545][ T7311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.403973][ T8111] loop7: detected capacity change from 0 to 128 [ 397.443075][ T8094] netlink: 'syz.4.594': attribute type 3 has an invalid length. [ 397.451213][ T8094] netlink: 'syz.4.594': attribute type 3 has an invalid length. [ 400.306245][ T28] audit: type=1326 audit(1762582638.228:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643b38f6c9 code=0x7ffc0000 [ 400.439941][ T28] audit: type=1326 audit(1762582638.228:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643b38f6c9 code=0x7ffc0000 [ 400.556767][ T28] audit: type=1326 audit(1762582638.228:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f643b38f6c9 code=0x7ffc0000 [ 400.676796][ T28] audit: type=1326 audit(1762582638.228:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643b38f6c9 code=0x7ffc0000 [ 400.843624][ T28] audit: type=1326 audit(1762582638.338:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643b38f6c9 code=0x7ffc0000 [ 401.987794][ T5909] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 402.389077][ T5909] usb 6-1: device descriptor read/64, error -71 [ 402.727038][ T5909] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 403.217035][ T5909] usb 6-1: device descriptor read/64, error -71 [ 403.357509][ T5909] usb usb6-port1: attempt power cycle [ 403.476337][ T8163] netlink: 'syz.6.608': attribute type 3 has an invalid length. [ 403.484448][ T8163] netlink: 'syz.6.608': attribute type 3 has an invalid length. [ 404.553768][ T28] audit: type=1326 audit(1762582642.478:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.5.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 404.629563][ T28] audit: type=1326 audit(1762582642.478:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.5.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 404.728346][ T28] audit: type=1326 audit(1762582642.478:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.5.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 404.809871][ T28] audit: type=1326 audit(1762582642.508:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.5.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 406.407525][ T8192] netlink: 'syz.6.614': attribute type 12 has an invalid length. [ 407.639202][ T8201] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 410.462112][ T8216] netlink: 'syz.7.617': attribute type 3 has an invalid length. [ 410.470593][ T8216] netlink: 'syz.7.617': attribute type 3 has an invalid length. [ 412.440663][ T8221] netlink: 'syz.6.619': attribute type 12 has an invalid length. [ 413.261451][ T8228] loop4: detected capacity change from 0 to 1024 [ 413.327024][ T8232] loop7: detected capacity change from 0 to 128 [ 413.429071][ T8228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.842519][ T7304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.036628][ T28] audit: type=1326 audit(1762582654.958:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.5.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 417.164401][ T28] audit: type=1326 audit(1762582654.958:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.5.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 417.188307][ T28] audit: type=1326 audit(1762582654.998:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.5.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 417.212715][ T28] audit: type=1326 audit(1762582654.998:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.5.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 417.285835][ T28] audit: type=1326 audit(1762582654.998:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.5.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 417.451266][ T8272] netlink: 'syz.6.629': attribute type 4 has an invalid length. [ 417.459187][ T8272] netlink: 17 bytes leftover after parsing attributes in process `syz.6.629'. [ 418.301832][ T28] audit: type=1326 audit(1762582654.998:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.5.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b07f8f6c9 code=0x7ffc0000 [ 418.394379][ T8276] netlink: 'syz.4.630': attribute type 3 has an invalid length. [ 418.411532][ T8276] netlink: 'syz.4.630': attribute type 3 has an invalid length. [ 418.944524][ T8282] loop4: detected capacity change from 0 to 128 [ 419.721335][ T8295] netlink: 'syz.5.634': attribute type 12 has an invalid length. [ 419.944323][ T8296] loop5: detected capacity change from 0 to 16 [ 420.019538][ T8296] erofs: (device loop5): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 423.369478][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 423.375698][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 423.382693][ T5804] Bluetooth: hci5: command 0x0406 tx timeout [ 423.392447][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 425.636699][ T8329] netlink: 'syz.7.640': attribute type 3 has an invalid length. [ 425.645733][ T8329] netlink: 'syz.7.640': attribute type 3 has an invalid length. [ 427.347092][ T8358] loop7: detected capacity change from 0 to 256 [ 427.367151][ T8358] FAT-fs (loop7): Unrecognized mount option "ÿ0x0000000000000003" or missing value [ 427.458437][ T8233] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 427.776915][ T28] audit: type=1800 audit(1762582665.698:330): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.646" name="/" dev="fuse" ino=1 res=0 errno=0 [ 429.113436][ T8377] loop5: detected capacity change from 0 to 128 [ 432.857473][ T8396] netlink: 20 bytes leftover after parsing attributes in process `syz.7.655'. [ 432.995543][ T7506] Bluetooth: hci0: Frame reassembly failed (-84) [ 433.386596][ T5833] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 433.618363][ T5833] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.646590][ T5833] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.677386][ T5833] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 433.692658][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 433.706509][ T5833] usb 8-1: SerialNumber: syz [ 433.960247][ T5833] usb 8-1: 0:2 : does not exist [ 433.965394][ T5833] usb 8-1: unit 255 not found! [ 434.040399][ T5833] usb 8-1: 5:0: cannot get min/max values for control 4 (id 5) [ 434.106935][ T5833] usb 8-1: USB disconnect, device number 3 [ 434.218012][ T8233] udevd[8233]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.234784][ T5109] Bluetooth: hci0: command 0x1003 tx timeout [ 435.242169][ T51] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 435.905109][ T8446] loop4: detected capacity change from 0 to 512 [ 435.974223][ T8449] netlink: 'syz.7.663': attribute type 12 has an invalid length. [ 436.521854][ T8446] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 437.156669][ T8446] EXT4-fs (loop4): 1 truncate cleaned up [ 437.199304][ T8446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.478093][ T7304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.522043][ T8470] loop4: detected capacity change from 0 to 128 [ 440.950949][ T8506] netlink: 24 bytes leftover after parsing attributes in process `syz.7.675'. [ 440.957469][ T8509] loop5: detected capacity change from 0 to 256 [ 441.005876][ T8509] FAT-fs (loop5): Unrecognized mount option "ÿ0x0000000000000003" or missing value [ 441.187927][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.236555][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.449545][ T8510] xt_TCPMSS: Only works on TCP SYN packets [ 441.530308][ T8517] loop4: detected capacity change from 0 to 2048 [ 441.581754][ T8517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 441.947028][ T8520] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 442.188507][ T28] audit: type=1326 audit(1762582680.068:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.7.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc918f6c9 code=0x7ffc0000 [ 442.534316][ T28] audit: type=1326 audit(1762582680.068:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.7.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc918f6c9 code=0x7ffc0000 [ 442.975785][ T28] audit: type=1326 audit(1762582680.168:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.7.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3bc918f6c9 code=0x7ffc0000 [ 442.998742][ T28] audit: type=1326 audit(1762582680.208:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.7.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc918f6c9 code=0x7ffc0000 [ 443.104401][ T28] audit: type=1326 audit(1762582680.218:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.7.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc918f6c9 code=0x7ffc0000 [ 443.198913][ T28] audit: type=1326 audit(1762582680.388:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.7.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f3bc918f6c9 code=0x7ffc0000 [ 443.221628][ T28] audit: type=1326 audit(1762582680.388:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.7.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc918f6c9 code=0x7ffc0000 [ 443.244211][ T28] audit: type=1326 audit(1762582680.388:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.7.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc918f6c9 code=0x7ffc0000 [ 443.461517][ T8549] loop5: detected capacity change from 0 to 2048 [ 443.500139][ T8549] loop5: p1 < > p4 [ 443.505394][ T8517] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 850 with error 28 [ 443.526939][ T8549] loop5: p4 size 8388608 extends beyond EOD, truncated [ 443.537552][ T8544] can: request_module (can-proto-0) failed. [ 443.556952][ T8517] EXT4-fs (loop4): This should not happen!! Data will be lost [ 443.556952][ T8517] [ 443.586561][ T8517] EXT4-fs (loop4): Total free blocks count 0 [ 443.592728][ T8517] EXT4-fs (loop4): Free/Dirty block details [ 443.642738][ T8517] EXT4-fs (loop4): free_blocks=2415919104 [ 443.668908][ T8517] EXT4-fs (loop4): dirty_blocks=864 [ 443.685729][ T8517] EXT4-fs (loop4): Block reservation details [ 443.692328][ T8517] EXT4-fs (loop4): i_reserved_data_blocks=54 [ 443.910927][ T8558] loop5: detected capacity change from 0 to 128 [ 443.974614][ T7304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 444.050462][ T8233] udevd[8233]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 444.070529][ T8242] udevd[8242]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 444.302888][ T8563] loop4: detected capacity change from 0 to 256 [ 444.323788][ T8563] FAT-fs (loop4): Unrecognized mount option "ÿ0x0000000000000003" or missing value [ 449.971381][ T8616] loop7: detected capacity change from 0 to 128 [ 451.495049][ T28] audit: type=1326 audit(1762582689.418:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 451.560184][ T28] audit: type=1326 audit(1762582689.418:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 451.666745][ T28] audit: type=1326 audit(1762582689.488:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 451.743277][ T28] audit: type=1326 audit(1762582689.488:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 452.404712][ T28] audit: type=1326 audit(1762582689.488:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 452.881317][ T28] audit: type=1326 audit(1762582689.488:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 452.954126][ T28] audit: type=1326 audit(1762582689.488:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 452.981748][ T28] audit: type=1326 audit(1762582689.488:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 453.028502][ T28] audit: type=1326 audit(1762582689.488:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 453.169527][ T28] audit: type=1326 audit(1762582689.488:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0a38f6c9 code=0x7ffc0000 [ 455.206205][ T8682] netlink: 'syz.7.712': attribute type 12 has an invalid length. [ 455.525185][ T788] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 456.381506][ T788] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 456.406219][ T788] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 456.436675][ T788] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 456.455802][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.484348][ T8676] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 458.125875][ T8668] loop4: detected capacity change from 0 to 8186 [ 458.266163][ T788] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 458.347463][ T788] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input12 [ 458.783494][ T788] usb 5-1: USB disconnect, device number 3 [ 458.783560][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 459.335382][ T8708] loop5: detected capacity change from 0 to 1024 [ 459.362482][ T8708] EXT4-fs: Ignoring removed i_version option [ 459.452999][ T8708] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 459.495591][ T8711] loop4: detected capacity change from 0 to 128 [ 459.643235][ T8708] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.717: Invalid block bitmap block 0 in block_group 0 [ 459.726920][ T8708] __quota_error: 23 callbacks suppressed [ 459.726942][ T8708] Quota error (device loop5): write_blk: dquota write failed [ 459.796603][ T8708] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 459.835856][ T8708] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.717: Failed to acquire dquot type 0 [ 459.856729][ T8708] EXT4-fs error (device loop5): ext4_free_blocks:6676: comm syz.5.717: Freeing blocks not in datazone - block = 0, count = 4096 [ 459.901758][ T8708] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.717: Invalid inode bitmap blk 0 in block_group 0 [ 459.935213][ T1076] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 459.955688][ T1076] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u4:5: Failed to release dquot type 0 [ 459.976498][ T8708] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 459.995833][ T8708] EXT4-fs (loop5): 1 orphan inode deleted [ 460.008296][ T8708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.185757][ T7305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.731166][ T8746] xt_CONNSECMARK: invalid mode: 66 [ 461.751021][ T8746] loop5: detected capacity change from 0 to 1024 [ 461.758848][ T8746] EXT4-fs: Ignoring removed bh option [ 461.764354][ T8746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 461.788391][ T8746] EXT4-fs (loop5): Test dummy encryption mode enabled [ 462.825570][ T8746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.848731][ T8744] syz.5.723[8744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.848872][ T8744] syz.5.723[8744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 463.200900][ T7305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.622831][ T8759] block device autoloading is deprecated and will be removed. [ 466.977394][ T8784] loop4: detected capacity change from 0 to 256 [ 467.003161][ T8784] exfat: Unknown parameter 'fsmagic' [ 467.256851][ T5843] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 467.846582][ T5843] usb 6-1: Using ep0 maxpacket: 16 [ 467.860861][ T5843] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.885498][ T5843] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.747316][ T5843] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.765203][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.774831][ T5843] usb 6-1: Product: syz [ 469.788214][ T5843] usb 6-1: Manufacturer: syz [ 469.792904][ T5843] usb 6-1: SerialNumber: syz [ 469.799626][ T8801] can: request_module (can-proto-0) failed. [ 470.277849][ T5843] usb 6-1: 0:2 : does not exist [ 471.207939][ T8820] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 471.722574][ T5843] usb 6-1: USB disconnect, device number 6 [ 471.775777][ T8823] loop5: detected capacity change from 0 to 512 [ 472.078785][ T8233] udevd[8233]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.102553][ T8823] EXT4-fs (loop5): 1 orphan inode deleted [ 472.112589][ T8823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.122197][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 472.152278][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u4:1: Failed to release dquot type 1 [ 472.214147][ T8823] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.363529][ T8836] netlink: 'syz.7.740': attribute type 12 has an invalid length. [ 474.062451][ T7305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.243781][ T8871] loop4: detected capacity change from 0 to 16 [ 476.285788][ T8871] erofs: (device loop4): mounted with root inode @ nid 36. [ 477.141370][ T8889] loop4: detected capacity change from 0 to 512 [ 477.199664][ T8889] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 477.244285][ T8889] EXT4-fs (loop4): orphan cleanup on readonly fs [ 477.301735][ T8889] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.749: bad orphan inode 15 [ 477.394272][ T8889] ext4_test_bit(bit=14, block=18) = 1 [ 477.428090][ T8889] is_bad_inode(inode)=0 [ 477.432596][ T8889] NEXT_ORPHAN(inode)=1023 [ 477.448623][ T8889] max_ino=32 [ 477.452232][ T8889] i_nlink=0 [ 477.485098][ T8889] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.749: bg 0: block 161: padding at end of block bitmap is not set [ 477.645041][ T8889] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 477.699249][ T8889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 477.989214][ T7304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.120852][ T8904] loop4: detected capacity change from 0 to 128 [ 478.159409][ T8904] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.177553][ T8904] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 478.232935][ T788] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 478.258526][ T788] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 478.351651][ T8908] loop5: detected capacity change from 0 to 128 [ 478.486528][ T28] audit: type=1800 audit(1762582716.408:372): pid=8908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.753" name="bus" dev="loop5" ino=1048638 res=0 errno=0 [ 479.046916][ T7304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.232815][ T8927] loop5: detected capacity change from 0 to 512 [ 480.614274][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.7.758'. [ 480.626262][ T8935] bridge_slave_1: left allmulticast mode [ 480.633515][ T8935] bridge_slave_1: left promiscuous mode [ 480.642630][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.678201][ T8927] ------------[ cut here ]------------ [ 480.684872][ T8927] EA inode 11 i_nlink=2 [ 480.764516][ T8935] bridge_slave_0: left allmulticast mode [ 480.774803][ T8935] bridge_slave_0: left promiscuous mode [ 480.781788][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.088888][ T8927] WARNING: CPU: 0 PID: 8927 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 481.099311][ T8927] Modules linked in: [ 481.103286][ T8927] CPU: 0 PID: 8927 Comm: syz.5.757 Not tainted syzkaller #0 [ 481.111980][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 481.123118][ T8927] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 481.129973][ T8927] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 c6 3b 9a ff 49 8b 37 48 c7 c7 a0 c3 be 8a 89 da e8 c5 5d 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 6f 1d 2c 08 [ 481.150967][ T8927] RSP: 0018:ffffc9000d3871c0 EFLAGS: 00010246 [ 481.157548][ T8927] RAX: 1052c09284801c00 RBX: 0000000000000002 RCX: 0000000000080000 [ 481.165611][ T8927] RDX: ffffc900196d2000 RSI: 0000000000042fea RDI: 0000000000042feb [ 481.174017][ T8927] RBP: ffffc9000d3872b8 R08: ffffc9000d386dc7 R09: 1ffff92001a70db8 [ 481.182153][ T8927] R10: dffffc0000000000 R11: fffff52001a70db9 R12: dffffc0000000000 [ 481.190243][ T8927] R13: ffff8880504136a8 R14: ffff8880504134b0 R15: ffff888050413500 [ 481.198579][ T8927] FS: 00007f0b08df46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 481.208274][ T8927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.214933][ T8927] CR2: 00005590cd401008 CR3: 0000000063d64000 CR4: 00000000003506f0 [ 481.223242][ T8927] Call Trace: [ 481.226630][ T8927] [ 481.229725][ T8927] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 481.235450][ T8927] ? ext4_xattr_inode_iget+0x3df/0x600 [ 481.241135][ T8927] ext4_xattr_set_entry+0xcda/0x1e90 [ 481.247739][ T8927] ext4_xattr_ibody_set+0x254/0x6a0 [ 481.253035][ T8927] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 481.259458][ T8927] __ext4_expand_extra_isize+0x306/0x400 [ 481.265193][ T8927] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 481.270987][ T8927] ext4_evict_inode+0x7ed/0xea0 [ 481.276034][ T8927] ? _raw_spin_unlock+0x28/0x40 [ 481.281144][ T8927] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 481.287606][ T8927] ? do_raw_spin_unlock+0x121/0x230 [ 481.293074][ T8927] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 481.299695][ T8927] evict+0x486/0x870 [ 481.303850][ T8927] ? __lock_acquire+0x7c80/0x7c80 [ 481.309199][ T8927] ? proc_nr_inodes+0x230/0x230 [ 481.314430][ T8927] ? do_raw_spin_unlock+0x121/0x230 [ 481.319944][ T8927] ? _raw_spin_unlock+0x28/0x40 [ 481.325041][ T8927] ? iput+0x70a/0x920 [ 481.329463][ T8927] ext4_orphan_cleanup+0xbd4/0x1400 [ 481.334789][ T8927] ? ext4_orphan_del+0xba0/0xba0 [ 481.339859][ T8927] ? ext4_register_li_request+0x183/0x940 [ 481.346789][ T8927] ? errseq_check_and_advance+0x66/0x120 [ 481.352561][ T8927] ext4_fill_super+0x5de4/0x66c0 [ 481.358422][ T8927] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 481.364844][ T8927] ? __might_sleep+0xe0/0xe0 [ 481.369693][ T8927] ? read_lock_is_recursive+0x20/0x20 [ 481.375179][ T8927] ? snprintf+0xdb/0x120 [ 481.379577][ T8927] ? vscnprintf+0x80/0x80 [ 481.384344][ T8927] ? down_write+0x162/0x1f0 [ 481.389712][ T8927] ? down_read_killable+0x340/0x340 [ 481.395040][ T8927] ? setup_bdev_super+0x56b/0x660 [ 481.400233][ T8927] get_tree_bdev+0x3e4/0x510 [ 481.404934][ T8927] ? vfs_parse_fs_string+0x160/0x160 [ 481.410338][ T8927] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 481.416891][ T8927] ? setup_bdev_super+0x660/0x660 [ 481.422094][ T8927] ? apparmor_capable+0x137/0x1a0 [ 481.427389][ T8927] ? bpf_lsm_capable+0x9/0x10 [ 481.432237][ T8927] ? security_capable+0x89/0xb0 [ 481.437307][ T8927] vfs_get_tree+0x8c/0x280 [ 481.441793][ T8927] do_new_mount+0x24b/0xa40 [ 481.446483][ T8927] __se_sys_mount+0x2da/0x3c0 [ 481.452444][ T8927] ? __x64_sys_mount+0xc0/0xc0 [ 481.457617][ T8927] ? lockdep_hardirqs_on+0x98/0x150 [ 481.462927][ T8927] ? __x64_sys_mount+0x20/0xc0 [ 481.467826][ T8927] do_syscall_64+0x55/0xb0 [ 481.472349][ T8927] ? clear_bhb_loop+0x40/0x90 [ 481.477203][ T8927] ? clear_bhb_loop+0x40/0x90 [ 481.481975][ T8927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.487997][ T8927] RIP: 0033:0x7f0b07f90e6a [ 481.492490][ T8927] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.512445][ T8927] RSP: 002b:00007f0b08df3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 481.521153][ T8927] RAX: ffffffffffffffda RBX: 00007f0b08df3ef0 RCX: 00007f0b07f90e6a [ 481.529237][ T8927] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f0b08df3eb0 [ 481.537404][ T8927] RBP: 0000200000000180 R08: 00007f0b08df3ef0 R09: 0000000001a08700 [ 481.545545][ T8927] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 481.554864][ T8927] R13: 00007f0b08df3eb0 R14: 0000000000000470 R15: 0000200000000700 [ 481.563124][ T8927] [ 481.566310][ T8927] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 481.573724][ T8927] CPU: 0 PID: 8927 Comm: syz.5.757 Not tainted syzkaller #0 [ 481.581297][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 481.591473][ T8927] Call Trace: [ 481.594782][ T8927] [ 481.597746][ T8927] dump_stack_lvl+0x16c/0x230 [ 481.602485][ T8927] ? show_regs_print_info+0x20/0x20 [ 481.607794][ T8927] ? load_image+0x3b0/0x3b0 [ 481.612351][ T8927] panic+0x2c0/0x710 [ 481.616419][ T8927] ? bpf_jit_dump+0xd0/0xd0 [ 481.621249][ T8927] __warn+0x2e0/0x470 [ 481.625303][ T8927] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 481.631452][ T8927] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 481.637567][ T8927] report_bug+0x2be/0x4f0 [ 481.641929][ T8927] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 481.647948][ T8927] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 481.654077][ T8927] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 481.660189][ T8927] handle_bug+0xcf/0x120 [ 481.664546][ T8927] exc_invalid_op+0x1a/0x50 [ 481.669084][ T8927] asm_exc_invalid_op+0x1a/0x20 [ 481.673964][ T8927] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 481.680618][ T8927] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 c6 3b 9a ff 49 8b 37 48 c7 c7 a0 c3 be 8a 89 da e8 c5 5d 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 6f 1d 2c 08 [ 481.700276][ T8927] RSP: 0018:ffffc9000d3871c0 EFLAGS: 00010246 [ 481.706393][ T8927] RAX: 1052c09284801c00 RBX: 0000000000000002 RCX: 0000000000080000 [ 481.714488][ T8927] RDX: ffffc900196d2000 RSI: 0000000000042fea RDI: 0000000000042feb [ 481.722568][ T8927] RBP: ffffc9000d3872b8 R08: ffffc9000d386dc7 R09: 1ffff92001a70db8 [ 481.730645][ T8927] R10: dffffc0000000000 R11: fffff52001a70db9 R12: dffffc0000000000 [ 481.738809][ T8927] R13: ffff8880504136a8 R14: ffff8880504134b0 R15: ffff888050413500 [ 481.747206][ T8927] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 481.752968][ T8927] ? ext4_xattr_inode_iget+0x3df/0x600 [ 481.758467][ T8927] ext4_xattr_set_entry+0xcda/0x1e90 [ 481.763843][ T8927] ext4_xattr_ibody_set+0x254/0x6a0 [ 481.769252][ T8927] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 481.775211][ T8927] __ext4_expand_extra_isize+0x306/0x400 [ 481.780883][ T8927] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 481.786479][ T8927] ext4_evict_inode+0x7ed/0xea0 [ 481.791355][ T8927] ? _raw_spin_unlock+0x28/0x40 [ 481.796488][ T8927] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 481.802623][ T8927] ? do_raw_spin_unlock+0x121/0x230 [ 481.807863][ T8927] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 481.813982][ T8927] evict+0x486/0x870 [ 481.817996][ T8927] ? __lock_acquire+0x7c80/0x7c80 [ 481.823150][ T8927] ? proc_nr_inodes+0x230/0x230 [ 481.828085][ T8927] ? do_raw_spin_unlock+0x121/0x230 [ 481.833935][ T8927] ? _raw_spin_unlock+0x28/0x40 [ 481.838811][ T8927] ? iput+0x70a/0x920 [ 481.842855][ T8927] ext4_orphan_cleanup+0xbd4/0x1400 [ 481.848159][ T8927] ? ext4_orphan_del+0xba0/0xba0 [ 481.853164][ T8927] ? ext4_register_li_request+0x183/0x940 [ 481.858939][ T8927] ? errseq_check_and_advance+0x66/0x120 [ 481.864625][ T8927] ext4_fill_super+0x5de4/0x66c0 [ 481.869648][ T8927] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 481.876128][ T8927] ? __might_sleep+0xe0/0xe0 [ 481.880845][ T8927] ? read_lock_is_recursive+0x20/0x20 [ 481.886246][ T8927] ? snprintf+0xdb/0x120 [ 481.890525][ T8927] ? vscnprintf+0x80/0x80 [ 481.895053][ T8927] ? down_write+0x162/0x1f0 [ 481.899607][ T8927] ? down_read_killable+0x340/0x340 [ 481.904878][ T8927] ? setup_bdev_super+0x56b/0x660 [ 481.909928][ T8927] get_tree_bdev+0x3e4/0x510 [ 481.914550][ T8927] ? vfs_parse_fs_string+0x160/0x160 [ 481.919869][ T8927] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 481.926236][ T8927] ? setup_bdev_super+0x660/0x660 [ 481.931572][ T8927] ? apparmor_capable+0x137/0x1a0 [ 481.936991][ T8927] ? bpf_lsm_capable+0x9/0x10 [ 481.941721][ T8927] ? security_capable+0x89/0xb0 [ 481.946869][ T8927] vfs_get_tree+0x8c/0x280 [ 481.951378][ T8927] do_new_mount+0x24b/0xa40 [ 481.956029][ T8927] __se_sys_mount+0x2da/0x3c0 [ 481.960767][ T8927] ? __x64_sys_mount+0xc0/0xc0 [ 481.965589][ T8927] ? lockdep_hardirqs_on+0x98/0x150 [ 481.970816][ T8927] ? __x64_sys_mount+0x20/0xc0 [ 481.975604][ T8927] do_syscall_64+0x55/0xb0 [ 481.980051][ T8927] ? clear_bhb_loop+0x40/0x90 [ 481.984774][ T8927] ? clear_bhb_loop+0x40/0x90 [ 481.989630][ T8927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.995662][ T8927] RIP: 0033:0x7f0b07f90e6a [ 482.000374][ T8927] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.020363][ T8927] RSP: 002b:00007f0b08df3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 482.029075][ T8927] RAX: ffffffffffffffda RBX: 00007f0b08df3ef0 RCX: 00007f0b07f90e6a [ 482.037359][ T8927] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f0b08df3eb0 [ 482.045508][ T8927] RBP: 0000200000000180 R08: 00007f0b08df3ef0 R09: 0000000001a08700 [ 482.053527][ T8927] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 482.061702][ T8927] R13: 00007f0b08df3eb0 R14: 0000000000000470 R15: 0000200000000700 [ 482.070083][ T8927] [ 482.073417][ T8927] Kernel Offset: disabled [ 482.077907][ T8927] Rebooting in 86400 seconds..