last executing test programs: 1m11.835507391s ago: executing program 2 (id=1276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000005da3477fdb00b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950026a7219f000000000021c4210600bf91000000ffffffffffffffff0000008500000085000000b7000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c000000ac14141c000000000000000000000000fcffffffffffffff0000000000000000000000000000000003000000f8ffffff00000000000000000000000000000000fdffffffffffff0f0000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001063500000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m8.986786595s ago: executing program 2 (id=1281): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m7.9976835s ago: executing program 2 (id=1285): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1m7.781050494s ago: executing program 2 (id=1287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000240), &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') lseek(r3, 0x10000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001800090400000000000000000a000000000000000000000037d4330f0c69e9c158bc8033d0acf62b0e6c38b0c9726d1aa5b7a1330d6f5c7989486cb4497d26e0212a2d7daf01707be39911f2ff6bd6b750596b5ac9e08003536cd206e9252b2025390ffead4b0f46b7f07244757a39"], 0x1c}}, 0x0) socket(0x29, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[{0x560d, 0x3, 0xfb, 0x10001}, {0x1, 0x7, 0x4, 0x7fff}, {0x4, 0x52, 0x5, 0xff}, {0x7, 0x3, 0x57, 0xea1}, {0x8, 0x2, 0x8, 0x5}]}) 1m6.872951158s ago: executing program 2 (id=1293): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") 1m6.71777891s ago: executing program 2 (id=1297): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='nonumtail=0,nonumtail=0,nfs,uni_xlate=0,utf8=0,quiet,shortname=lower,uni_xlate=1,rodir,iocharset=utf8,utf8=0,utf8=0,check=strict,codepage=775,iocharset=cp864,nonumtail=0,dmask=000000000000000000004,uni_xlate=0,\x00\x00\x00'], 0x6, 0x2b8, &(0x7f0000000640)="$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") r4 = syz_open_procfs(0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (fail_nth: 1) 49.755935645s ago: executing program 32 (id=1297): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='nonumtail=0,nonumtail=0,nfs,uni_xlate=0,utf8=0,quiet,shortname=lower,uni_xlate=1,rodir,iocharset=utf8,utf8=0,utf8=0,check=strict,codepage=775,iocharset=cp864,nonumtail=0,dmask=000000000000000000004,uni_xlate=0,\x00\x00\x00'], 0x6, 0x2b8, &(0x7f0000000640)="$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") r4 = syz_open_procfs(0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (fail_nth: 1) 13.636519628s ago: executing program 1 (id=1421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000580)="089ce68cb7612c19fa8ceb10a7147111fa43b365d657b9788360f23de4105a7243f79cd6ace89f0b0288ff22236445c8e380356e7e3e4f15c3c8f3ed287917663a8df2eb6d74cfe56dfb92", &(0x7f0000000280)=@udp6=r2, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) 13.46593256s ago: executing program 1 (id=1423): getdents(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000600)={r4, r5+10000000}, &(0x7f0000000640)={[0x2]}, 0x8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003010000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 9.505187372s ago: executing program 1 (id=1432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x1c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x10000004}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0xf}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 9.481068082s ago: executing program 5 (id=1433): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00rlimit +rlimit +blkio -cpuset +freezer +rdma -r$ma '], 0x34) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x6, 0x9, 0xa4, 0xffb, 0x7, 0x2, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x1000005, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x400, 0x7, 0xf, 0x101, 0xd9, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x82, 0xd, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0x10b, 0x5, 0x80000001, 0x5, 0x2, 0xb, 0x84ac, 0xd99, 0x5, 0x82a2, 0xfff, 0x3, 0x2, 0x5, 0x8, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = syz_socket_connect_nvme_tcp() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) capset(0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r7}, &(0x7f0000001c00), &(0x7f0000001c40)}, 0x20) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/fib_trie\x00') read$FUSE(r8, &(0x7f0000006180)={0x2020}, 0x202d) close(r3) 9.439771933s ago: executing program 1 (id=1434): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001000000010001600020000000100000000000001000000004d0079060000"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x802, 0x400) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x0, 0x0, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fstat(r7, &(0x7f0000000b80)) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) 8.936512631s ago: executing program 4 (id=1437): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x6) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 8.532362427s ago: executing program 5 (id=1441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xdc) 8.499226148s ago: executing program 5 (id=1442): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001000000010001600020000000100000000000001000000004d0079060000"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x802, 0x400) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x0, 0x0, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) fstat(0xffffffffffffffff, &(0x7f0000000b80)) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0) 7.899008327s ago: executing program 1 (id=1446): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001000000010001600020000000100000000000001000000004d0079060000"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x802, 0x400) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x0, 0x0, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) fstat(0xffffffffffffffff, &(0x7f0000000b80)) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0) 7.094032489s ago: executing program 5 (id=1449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000005da3477fdb00b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950026a7219f000000000021c4210600bf91000000ffffffffffffffff0000008500000085000000b7000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ff020000000000000000000000000001000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c000000ac14141c000000000000000000000000fcffffffffffffff0000000000000000000000000000000003000000f8ffffff00000000000000000000000000000000fdffffffffffff0f0000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001063500000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.50242843s ago: executing program 0 (id=1450): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) capset(0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r8}, &(0x7f0000001c00), &(0x7f0000001c40)=r9}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') 4.50134189s ago: executing program 3 (id=1451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000000c0), 0x1800) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x32600, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f0000000280)={0x18, 0xffffffffffffffda, r2, {0xffff}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) write$cgroup_devices(r7, 0x0, 0xffdd) open(0x0, 0x14927e, 0x44) 4.50037262s ago: executing program 5 (id=1452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000280)={0xb4c5, 0x18a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000580)="b808008ed0dd3a0f18dd2ef3a5b9800000c00f326635008000000f30670fc72e66b9800000c00f326635001000000f30ba4200ed0fc7a9635c66b9b00a00000f32", 0x41}], 0x1, 0x3c, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x20023d, 0x100000001, 0x800000000, 0x20, 0x0, 0x40000000000000, 0x2004cc, 0x5, 0x1, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x3, 0x9, 0x4000000000000004, 0x769], 0xeeef0000, 0xc0086}) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x10042, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x10003, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x2000) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000004c0)=0xe5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.5000361s ago: executing program 4 (id=1453): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x5, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x2f6d1f27}, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x3, 0x0, r2, 0x200, '\x00', 0x0, r2, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x1, 0x9, 0x1, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xbd0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x91c4a948, 0x0, 0x0, 0x40f00, 0x20, '\x00', r3, 0x0, r2, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xc, 0x7, 0xdf88}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r4, r5, r2, r6, r2, r2, r2], 0x0, 0x10, 0x5, @void, @value}, 0x94) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) 2.990598664s ago: executing program 3 (id=1454): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) (fail_nth: 1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 2.669433949s ago: executing program 0 (id=1455): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRESOCT=r0], 0xf7) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000500)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x6, 0xfc1b2d1c1df0e1b3, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x6, {0xfffffffffffffffd, 0x200, 0x0, {0x0, 0x3, 0x0, 0x7fd, 0xbb7, 0xfffffffffffffff9, 0x12b, 0xba9d, 0x5, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000001400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000001c0)={0x20, 0xfffffffffffffff5, r5, {0x9, 0x4, 0x9, 0xae77}}, 0x20) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x40000}, 0x1c) 2.322153964s ago: executing program 3 (id=1456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x1c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x10000004}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0xf}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.320580194s ago: executing program 4 (id=1457): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = inotify_init1(0x800) r6 = fcntl$dupfd(r4, 0x406, r5) accept$packet(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0xfffffffe, {0x0, 0x0, 0x0, r10, 0x52844, 0x21194}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xffffffff, 0x6}}]}]}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408001b}, 0x20000000) preadv(r8, &(0x7f0000000080)=[{&(0x7f0000003640)=""/4092, 0xffc}], 0x1, 0x18, 0x2) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x10) ppoll(&(0x7f0000000500)=[{r12}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x7, 0x7fff, 0x7, 0x4000, 0xb, r14, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r14]) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', r14, 0xee01) 2.319856444s ago: executing program 3 (id=1458): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001000000010001600020000000100000000000001000000004d0079060000"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x802, 0x400) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x0, 0x0, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) fstat(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002400)=ANY=[@ANYRES32=r8, @ANYBLOB="76cea1141d65e7fa31fbec3d815e2980581b183cd8fbbf52361757df7c239bd2fe6b881941dea120e60f5d952985cf01e6bd37b53c921bd13439b9150d6b1df8bf5043ecd1c0ed04cbefbe9eb0d65fe6ed9434a1f4aa76ec44685c765337c953434480ab88606966be2cb64416dfea9d9eda649ee1268ef17efa754856f8a99cf61805fba721d93b23a5a37ab9e0d62d07540cea047d39cc5b80b9f225aea77f273306949bf31f7ba38d8af4af552006e00b99c0", @ANYRES64=0x0, @ANYBLOB="b0ed086982ae288c0ded88b546ef1c1e703d8f9c10354ca909cb45bfc2f978a7aedaae1ce91bb7cea3a037dd1cffbea6890ea96b05173bb55c37129d8a1763fb7c5ae6e47efff4f65eaa937effbb44a202528799b7421ce9c6a23ed76fce3919300aa25e9cd22ce700114242a870e3a1", @ANYRESHEX=0x0, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRESHEX=r8, @ANYBLOB="67f5da103353c8ef38b5b38e5b904e7c50624d0355647a0fb6fc8b71c4f25a5e0b98c9af789957e9299343aad54047ccdc965110151195a0e8a06c7a9c0ade0e1242e7cbe79f18945363747a0430f424df8627c34f11df7504aae464d007de8d880719f3772e12d4528bbe0815188ede3b25b6bf34869699bd226a11298f53ade3d97636d4b0112ea833d44628c612506ced2d2c226cdf90f647c2f988941081193ae81aa168a1028bb9f040c1d332d094e652f78f4f9c971df85d241ce2d6a62f8a37dd8c25e5d146979e477bc4164f719c3bf307a3ccc6360ae7384649e675a916109360e03c4b5e0b40dffc79450da14ea5499fbf2c0517daafe7d05d7ebc75da9fd2d2f23004603d82af2d6f84767447eb7cbacd20911db9710b50ad07b42a755aaf775c2401f71f6d57e4f5e851705bf8f7948973198c", @ANYRES32=r7], 0x2, 0x1d3, &(0x7f00000008c0)="$eJzsmb2vEkEUxc/M7oPnizGxsbDRxJeIEZbdRQ0NBSb2JuBXJ5GVoAsYWBMgsSA2NpYWJrb+AxYWVBZ2drZaqImJhZTWa2YYdsflQ4ghkrz7S5g9M3Nn5s4FTgEgCOLI8u3rry/PrxarWQDHcYi0Gv9hxDFci//88vHFF6Vrr958ev2+feLJOLkfAxCG659vAnhXNhCofhj+ufpQPavgkb4BjgtK3wKDpfRdcNxU2gPDHaUfaLpzTAnfs+51/Pr9pu/ZonFE44qmkMxvMmKoA9hX+TFtvjcYPqz5vtdNir1wds7c1KbiL/UzJ2WOklY/8X7dfvZ0JPqz2tha/RxwOEoXwFBRuog0LMuKS6Ld/7QZ72+sc/9dECdzq2KyO5Ahif8gWHJEfKGjkVOT8Yf5Vd+3mdjZ7V5ZGheAuamPB/+2c0qZwMKY2D+F5Z7X/MmEGflHPmg9yvcGw1yzVWt4Da/tuoUr9iXbvuzmpRFN2xX+ty/96UDbf29JbIql0K8FQdfpA0HXifrutNUct/K281Ou4dL/ODLnpnuIj4q8dnrxGUy9uHwKlTGWJk8QBEEQBEEQBEEQBEEQBLERZ8Dkr6Dqj6pwCe51Gf07AAD//8+DaM4=") newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) 2.119497257s ago: executing program 5 (id=1459): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001000000010001600020000000100000000000001000000004d0079060000"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x802, 0x400) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x0, 0x0, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) fstat(0xffffffffffffffff, &(0x7f0000000b80)) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0) 1.161071422s ago: executing program 1 (id=1460): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001000000010001600020000000100000000000001000000004d0079060000"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x802, 0x400) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x0, 0x0, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fstat(r6, &(0x7f0000000b80)) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) 1.160431172s ago: executing program 0 (id=1461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x4c}}, 0x0) 1.160079142s ago: executing program 0 (id=1462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x70}}, 0x0) 1.100544193s ago: executing program 0 (id=1463): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00rlimit +rlimit +blkio -cpuset +freezer +rdma -r$ma '], 0x34) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x6, 0x9, 0xa4, 0xffb, 0x7, 0x2, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x1000005, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x400, 0x7, 0xf, 0x101, 0xd9, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x82, 0xd, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0x10b, 0x5, 0x80000001, 0x5, 0x2, 0xb, 0x84ac, 0xd99, 0x5, 0x82a2, 0xfff, 0x3, 0x2, 0x5, 0x8, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = syz_socket_connect_nvme_tcp() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) capset(0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r7}, &(0x7f0000001c00), &(0x7f0000001c40)=r8}, 0x20) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/fib_trie\x00') read$FUSE(r9, &(0x7f0000006180)={0x2020}, 0x202d) close(r3) 1.066507863s ago: executing program 3 (id=1464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000280)={0xb4c5, 0x18a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000580)="b808008ed0dd3a0f18dd2ef3a5b9800000c00f326635008000000f30670fc72e66b9800000c00f326635001000000f30ba4200ed0fc7a9635c66b9b00a00000f32", 0x41}], 0x1, 0x3c, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x20023d, 0x100000001, 0x800000000, 0x20, 0x0, 0x40000000000000, 0x2004cc, 0x5, 0x1, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x3, 0x9, 0x4000000000000004, 0x769], 0xeeef0000, 0xc0086}) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x10042, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x10003, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x2000) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000004c0)=0xe5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.056915194s ago: executing program 4 (id=1465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x104, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) fgetxattr(r3, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r4, &(0x7f0000000d40), 0x0}, 0x20) 1.037763274s ago: executing program 4 (id=1466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000005da3477fdb00b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950026a7219f000000000021c4210600bf91000000ffffffffffffffff0000008500000085000000b7000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ff020000000000000000000000000001000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c000000ac14141c000000000000000000000000fcffffffffffffff0000000000000000000000000000000003000000f8ffffff00000000000000000000000000000000fdffffffffffff0f0000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001063500000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 298.994945ms ago: executing program 0 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000fdff07000800000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000068ef00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/76}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000000), 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) 43.603369ms ago: executing program 4 (id=1468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000fdff07000800000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000068ef00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/76}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000000), 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) 0s ago: executing program 3 (id=1469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000005da3477fdb00b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950026a7219f000000000021c4210600bf91000000ffffffffffffffff0000008500000085000000b7000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ff020000000000000000000000000001000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c000000ac14141c000000000000000000000000fcffffffffffffff0000000000000000000000000000000003000000f8ffffff00000000000000000000000000000000fdffffffffffff0f0000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001063500000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): 44][ T1031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.541228][ T1031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.551249][ T1031] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 124.561366][ T1031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.572747][ T1031] usb 5-1: config 0 descriptor?? [ 124.990679][ T1031] hid-steam 0003:28DE:1142.0001: unbalanced delimiter at end of report description [ 125.000404][ T1031] hid-steam 0003:28DE:1142.0001: steam_probe:parse of hid interface failed [ 125.009076][ T1031] hid-steam: probe of 0003:28DE:1142.0001 failed with error -22 [ 125.194047][ T1120] usb 5-1: USB disconnect, device number 9 [ 125.225369][ T286] EXT4-fs (loop2): unmounting filesystem. [ 125.347952][ T1206] Bluetooth: hci0: command 0x1003 tx timeout [ 125.354055][ T1205] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.390605][ T2204] loop0: detected capacity change from 0 to 512 [ 125.397288][ T2204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.468317][ T2204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.481558][ T2204] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 125.509196][ T2204] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 125.523385][ T2204] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 125.539506][ T2204] EXT4-fs (loop0): 1 truncate cleaned up [ 125.545299][ T2204] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.908383][ T2217] netlink: 2 bytes leftover after parsing attributes in process `syz.1.620'. [ 125.919060][ T304] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 125.931912][ T1206] Bluetooth: hci0: sending frame failed (-49) [ 125.938086][ T1205] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 125.938155][ T304] EXT4-fs (loop4): This should not happen!! Data will be lost [ 125.938155][ T304] [ 125.954912][ T304] EXT4-fs (loop4): Total free blocks count 0 [ 125.955304][ T285] EXT4-fs (loop0): unmounting filesystem. [ 125.987509][ T304] EXT4-fs (loop4): Free/Dirty block details [ 125.994861][ T304] EXT4-fs (loop4): free_blocks=16 [ 126.001145][ T2219] xt_socket: unknown flags 0xc [ 126.006860][ T2219] loop0: detected capacity change from 0 to 16 [ 126.013471][ T2219] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 126.019989][ T304] EXT4-fs (loop4): dirty_blocks=16 [ 126.049103][ T2221] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 126.055029][ T304] EXT4-fs (loop4): Block reservation details [ 126.086709][ T304] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 126.103150][ T283] EXT4-fs (loop4): unmounting filesystem. [ 126.116474][ T2199] FAULT_INJECTION: forcing a failure. [ 126.116474][ T2199] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 126.126841][ T2225] loop1: detected capacity change from 0 to 512 [ 126.160833][ T2227] loop4: detected capacity change from 0 to 2048 [ 126.168438][ T2199] CPU: 1 PID: 2199 Comm: syz.2.614 Not tainted 6.1.138-syzkaller-00013-gf6c21bc9a693 #0 [ 126.168591][ T2225] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.178281][ T2199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.178296][ T2199] Call Trace: [ 126.178302][ T2199] [ 126.178310][ T2199] __dump_stack+0x21/0x24 [ 126.178344][ T2199] dump_stack_lvl+0xee/0x150 [ 126.213506][ T2199] ? __cfi_dump_stack_lvl+0x8/0x8 [ 126.218584][ T2199] dump_stack+0x15/0x24 [ 126.221828][ T2225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 126.222796][ T2199] should_fail_ex+0x3d4/0x520 [ 126.231247][ T2225] System zones: [ 126.235369][ T2199] should_fail_alloc_page+0x61/0x90 [ 126.235413][ T2225] 1-12 [ 126.238951][ T2199] prepare_alloc_pages+0x148/0x5f0 [ 126.238980][ T2199] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 126.244884][ T2225] [ 126.246971][ T2199] __alloc_pages+0x115/0x3a0 [ 126.247004][ T2199] ? xas_destroy+0x95/0xa0 [ 126.253611][ T2225] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.625: corrupted in-inode xattr [ 126.257347][ T2199] ? __cfi___alloc_pages+0x10/0x10 [ 126.257384][ T2199] __folio_alloc+0x12/0x40 [ 126.260473][ T2225] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.625: couldn't read orphan inode 15 (err -117) [ 126.264490][ T2199] handle_mm_fault+0x18ef/0x2640 [ 126.270333][ T2225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 126.280918][ T2199] ? __cfi_handle_mm_fault+0x10/0x10 [ 126.280954][ T2199] ? down_read_trylock+0x273/0x640 [ 126.280995][ T2199] ? lock_mm_and_find_vma+0x9e/0x320 [ 126.309123][ T2225] futex_wake_op: syz.1.625 tries to shift op by -1; fix this program [ 126.316675][ T2199] ? do_user_addr_fault+0x2ee/0x1050 [ 126.316712][ T2199] do_user_addr_fault+0x63b/0x1050 [ 126.351181][ T2199] exc_page_fault+0x51/0xb0 [ 126.355816][ T2199] asm_exc_page_fault+0x27/0x30 [ 126.360795][ T2199] RIP: 0010:__put_user_nocheck_8+0x3/0x21 [ 126.367603][ T2199] Code: 00 00 48 39 d9 73 34 0f 01 cb 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f 00 00 48 39 d9 73 14 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 0f 01 ca b9 f2 ff ff ff [ 126.388024][ T2199] RSP: 0018:ffffc90012d8f998 EFLAGS: 00050293 [ 126.395081][ T2199] RAX: 0000000000003000 RBX: 00007fffffffeff9 RCX: 0000200000000060 [ 126.403268][ T2199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 126.411275][ T2199] RBP: ffffc90012d8fe80 R08: dffffc0000000000 R09: ffffed102077732b [ 126.419281][ T2199] R10: ffffed102077732b R11: 1ffff1102077732a R12: 0000000000003000 [ 126.427264][ T2199] R13: 0000200000000000 R14: 0000000000000000 R15: ffff888103bb9900 [ 126.435275][ T2199] ? userfaultfd_ioctl+0x3c03/0x43d0 [ 126.440581][ T2199] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 126.446047][ T2199] ? do_vfs_ioctl+0xc36/0x1c80 [ 126.450821][ T2199] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 126.456549][ T2199] ? trace_buffer_unlock_commit_regs+0x152/0x630 [ 126.462898][ T2199] ? ioctl_has_perm+0x391/0x4c0 [ 126.467859][ T2199] ? has_cap_mac_admin+0x330/0x330 [ 126.473092][ T2199] ? bpf_bprintf_cleanup+0x9f/0xc0 [ 126.478238][ T2199] ? bpf_trace_printk+0x120/0x250 [ 126.483386][ T2199] ? slab_free_freelist_hook+0xc2/0x190 [ 126.489153][ T2199] ? __cfi_bpf_trace_printk+0x10/0x10 [ 126.494556][ T2199] ? selinux_file_ioctl+0x377/0x480 [ 126.499769][ T2199] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 126.505443][ T2199] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 126.511095][ T2199] ? __fget_files+0x2d5/0x330 [ 126.515933][ T2199] ? security_file_ioctl+0x95/0xc0 [ 126.521339][ T2199] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 126.527014][ T2199] __se_sys_ioctl+0x12f/0x1b0 [ 126.531701][ T2199] __x64_sys_ioctl+0x7b/0x90 [ 126.536304][ T2199] x64_sys_call+0x58b/0x9a0 [ 126.541045][ T2199] do_syscall_64+0x4c/0xa0 [ 126.545642][ T2199] ? clear_bhb_loop+0x15/0x70 [ 126.550585][ T2199] ? clear_bhb_loop+0x15/0x70 [ 126.555279][ T2199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.561367][ T2199] RIP: 0033:0x7fa58478e929 [ 126.566291][ T2199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.586251][ T2199] RSP: 002b:00007fa5855b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.594673][ T2199] RAX: ffffffffffffffda RBX: 00007fa5849b5fa0 RCX: 00007fa58478e929 [ 126.602748][ T2199] RDX: 0000200000000040 RSI: 00000000c028aa05 RDI: 0000000000000005 [ 126.610753][ T2199] RBP: 00007fa5855b2090 R08: 0000000000000000 R09: 0000000000000000 [ 126.618838][ T2199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.626827][ T2199] R13: 0000000000000000 R14: 00007fa5849b5fa0 R15: 00007ffd177864f8 [ 126.634914][ T2199] [ 126.656392][ T284] EXT4-fs (loop1): unmounting filesystem. [ 126.687137][ T2227] loop4: p1 < > p4 [ 126.696352][ T2227] loop4: p4 size 8388608 extends beyond EOD, truncated [ 126.704998][ T318] Bluetooth: hci0: Frame reassembly failed (-84) [ 126.811703][ T2245] loop4: detected capacity change from 0 to 512 [ 126.825946][ T2245] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.864410][ T2245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 126.872937][ T2245] System zones: 1-12 [ 126.881743][ T2245] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.629: corrupted in-inode xattr [ 127.110777][ T2245] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.629: couldn't read orphan inode 15 (err -117) [ 127.180148][ T2245] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.213675][ T2245] futex_wake_op: syz.4.629 tries to shift op by -1; fix this program [ 127.223354][ T2245] FAULT_INJECTION: forcing a failure. [ 127.223354][ T2245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.224662][ T2255] loop0: detected capacity change from 0 to 512 [ 127.238462][ T2245] CPU: 0 PID: 2245 Comm: syz.4.629 Not tainted 6.1.138-syzkaller-00013-gf6c21bc9a693 #0 [ 127.254948][ T2245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.265019][ T2245] Call Trace: [ 127.268405][ T2245] [ 127.271352][ T2245] __dump_stack+0x21/0x24 [ 127.275719][ T2245] dump_stack_lvl+0xee/0x150 [ 127.280874][ T2245] ? __cfi_dump_stack_lvl+0x8/0x8 [ 127.285936][ T2245] dump_stack+0x15/0x24 [ 127.290137][ T2245] should_fail_ex+0x3d4/0x520 [ 127.294833][ T2245] should_fail+0xb/0x10 [ 127.298998][ T2245] should_fail_usercopy+0x1a/0x20 [ 127.304056][ T2245] _copy_to_user+0x1e/0x90 [ 127.308495][ T2245] simple_read_from_buffer+0xe9/0x160 [ 127.313908][ T2245] proc_fail_nth_read+0x19a/0x210 [ 127.318952][ T2245] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 127.324524][ T2245] ? security_file_permission+0x94/0xb0 [ 127.330083][ T2245] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 127.336168][ T2245] vfs_read+0x26e/0x8c0 [ 127.340341][ T2245] ? __cfi_vfs_read+0x10/0x10 [ 127.345034][ T2245] ? __kasan_check_write+0x14/0x20 [ 127.350167][ T2245] ? mutex_lock+0x8d/0x1a0 [ 127.354601][ T2245] ? __cfi_mutex_lock+0x10/0x10 [ 127.359459][ T2245] ? __fdget_pos+0x2cd/0x380 [ 127.364068][ T2245] ? ksys_read+0x71/0x240 [ 127.368447][ T2245] ksys_read+0x140/0x240 [ 127.372712][ T2245] ? __cfi_ksys_read+0x10/0x10 [ 127.377489][ T2245] ? fpregs_restore_userregs+0x128/0x260 [ 127.383130][ T2245] __x64_sys_read+0x7b/0x90 [ 127.387652][ T2245] x64_sys_call+0x2f/0x9a0 [ 127.392098][ T2245] do_syscall_64+0x4c/0xa0 [ 127.396667][ T2245] ? clear_bhb_loop+0x15/0x70 [ 127.401357][ T2245] ? clear_bhb_loop+0x15/0x70 [ 127.406131][ T2245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.412038][ T2245] RIP: 0033:0x7ff029f8d33c [ 127.416519][ T2245] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.436222][ T2245] RSP: 002b:00007ff02aec5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.444651][ T2245] RAX: ffffffffffffffda RBX: 00007ff02a1b5fa0 RCX: 00007ff029f8d33c [ 127.452637][ T2245] RDX: 000000000000000f RSI: 00007ff02aec50a0 RDI: 0000000000000005 [ 127.460789][ T2245] RBP: 00007ff02aec5090 R08: 0000000000000000 R09: 00000000ffffff01 [ 127.469372][ T2245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.477349][ T2245] R13: 0000000000000000 R14: 00007ff02a1b5fa0 R15: 00007ffdeedbd528 [ 127.485337][ T2245] [ 127.496814][ T283] EXT4-fs (loop4): unmounting filesystem. [ 127.505527][ T2255] EXT4-fs (loop0): 1 orphan inode deleted [ 127.512569][ T2255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 127.521893][ T10] __quota_error: 45 callbacks suppressed [ 127.521908][ T10] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 127.522055][ T2255] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.527742][ T10] EXT4-fs error (device loop0): ext4_release_dquot:6825: comm kworker/u4:1: Failed to release dquot type 1 [ 127.585492][ T2259] netlink: 2 bytes leftover after parsing attributes in process `syz.4.633'. [ 127.604854][ T2261] xt_socket: unknown flags 0xc [ 127.607465][ T304] Bluetooth: hci1: Frame reassembly failed (-84) [ 127.617391][ T2261] loop3: detected capacity change from 0 to 16 [ 127.618882][ T45] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 127.625318][ T2261] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 127.691547][ T2265] loop3: detected capacity change from 0 to 512 [ 127.710058][ T2265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.720867][ T2265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.734287][ T2265] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 127.744553][ T2265] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 127.753265][ T2265] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 127.762308][ T2265] EXT4-fs (loop3): 1 truncate cleaned up [ 127.768416][ T2265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 127.798085][ T287] EXT4-fs (loop3): unmounting filesystem. [ 127.839698][ T285] EXT4-fs (loop0): unmounting filesystem. [ 128.141061][ T304] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 128.152949][ T304] EXT4-fs error (device loop0): ext4_release_dquot:6825: comm kworker/u4:3: Failed to release dquot type 1 [ 128.208157][ T28] audit: type=1400 audit(1750515658.034:708): avc: denied { create } for pid=2271 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 128.238256][ T2275] loop3: detected capacity change from 0 to 128 [ 128.291672][ T2275] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 128.300368][ T28] audit: type=1400 audit(1750515658.124:709): avc: denied { read } for pid=2277 comm="syz.0.639" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 128.309446][ T2275] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.344167][ T28] audit: type=1400 audit(1750515658.124:710): avc: denied { open } for pid=2277 comm="syz.0.639" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 128.610886][ T2285] loop1: detected capacity change from 0 to 512 [ 128.669114][ T2285] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.678219][ T2285] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.707943][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 128.707942][ T1205] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.730847][ T287] EXT4-fs (loop3): unmounting filesystem. [ 128.754461][ T2285] EXT4-fs: Ignoring removed orlov option [ 128.768167][ T2285] EXT4-fs: Cannot specify journal on remount [ 128.804939][ T28] audit: type=1400 audit(1750515658.584:711): avc: denied { remount } for pid=2284 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 128.852642][ T284] EXT4-fs (loop1): unmounting filesystem. [ 129.239694][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.388078][ T1161] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 129.447392][ T2306] device syzkaller0 entered promiscuous mode [ 129.567956][ T1161] usb 2-1: Using ep0 maxpacket: 16 [ 129.574937][ T1161] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 129.583816][ T1161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.598700][ T1161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.609667][ T1161] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.619011][ T1161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.627123][ T1161] usb 2-1: Product: syz [ 129.631804][ T1161] usb 2-1: Manufacturer: syz [ 129.636505][ T1161] usb 2-1: SerialNumber: syz [ 129.668012][ T2092] Bluetooth: hci1: command 0x1003 tx timeout [ 129.674101][ T1206] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 130.107969][ T380] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.140673][ T1161] usb 2-1: 0:2 : does not exist [ 130.287942][ T380] usb 5-1: Using ep0 maxpacket: 16 [ 130.295364][ T380] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 130.306138][ T380] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.317732][ T380] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.330079][ T380] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.339306][ T380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.347997][ T380] usb 5-1: Product: syz [ 130.353794][ T380] usb 5-1: Manufacturer: syz [ 130.358627][ T380] usb 5-1: SerialNumber: syz [ 130.571560][ T1161] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 130.589900][ T1161] usb 2-1: USB disconnect, device number 5 [ 130.731631][ T2330] loop2: detected capacity change from 0 to 1024 [ 130.741611][ T2330] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.824794][ T1755] udevd[1755]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.887084][ T2330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.267936][ T1205] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.274244][ T1206] Bluetooth: hci0: command 0x1003 tx timeout [ 131.329378][ T380] usb 5-1: 0:2 : does not exist [ 131.380119][ T286] EXT4-fs (loop2): unmounting filesystem. [ 131.556260][ T2346] device syzkaller0 entered promiscuous mode [ 132.163022][ T380] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 132.178275][ T380] usb 5-1: USB disconnect, device number 10 [ 132.188231][ T2361] loop0: detected capacity change from 0 to 512 [ 132.197468][ T1755] udevd[1755]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.231616][ T2361] EXT4-fs warning (device loop0): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 132.247633][ T2361] EXT4-fs (loop0): mount failed [ 132.350099][ T2367] loop4: detected capacity change from 0 to 512 [ 132.395376][ T2367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.412390][ T2367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.430048][ T2367] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 132.637723][ T2367] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 132.697051][ T2367] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 132.747771][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.774807][ T2367] EXT4-fs (loop4): 1 truncate cleaned up [ 132.790452][ T2367] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.841283][ T283] EXT4-fs (loop4): unmounting filesystem. [ 132.890324][ T2384] loop4: detected capacity change from 0 to 512 [ 132.897240][ T2384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.904020][ T2384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.912452][ T2384] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 132.925206][ T2384] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 132.934200][ T2384] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 132.935287][ T2386] device syzkaller0 entered promiscuous mode [ 132.943489][ T2384] EXT4-fs (loop4): 1 truncate cleaned up [ 132.954368][ T2384] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.978984][ T2384] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 4: comm syz.4.677: lblock 0 mapped to illegal pblock 4 (length 1) [ 132.993833][ T2384] EXT4-fs (loop4): Remounting filesystem read-only [ 133.006720][ T283] EXT4-fs (loop4): unmounting filesystem. [ 133.557985][ T1631] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 133.748409][ T1631] usb 5-1: Using ep0 maxpacket: 16 [ 133.754818][ T1631] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 133.763615][ T1631] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.773894][ T1631] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.784333][ T1631] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.793503][ T1631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.801922][ T1631] usb 5-1: Product: syz [ 133.806134][ T1631] usb 5-1: Manufacturer: syz [ 133.810803][ T1631] usb 5-1: SerialNumber: syz [ 134.009212][ T2417] loop0: detected capacity change from 0 to 512 [ 134.016979][ T2417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.024093][ T2417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.032013][ T2417] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 134.035911][ T2419] loop2: detected capacity change from 0 to 512 [ 134.048222][ T2419] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.057122][ T2417] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 134.066657][ T2417] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 134.075606][ T2419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 134.085544][ T2419] System zones: 1-12 [ 134.085883][ T2417] EXT4-fs (loop0): 1 truncate cleaned up [ 134.098134][ T2419] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.690: corrupted in-inode xattr [ 134.099124][ T2417] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.113388][ T2419] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.690: couldn't read orphan inode 15 (err -117) [ 134.135312][ T2419] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.148025][ T2419] futex_wake_op: syz.2.690 tries to shift op by -1; fix this program [ 134.162581][ T285] EXT4-fs (loop0): unmounting filesystem. [ 134.169253][ T286] EXT4-fs (loop2): unmounting filesystem. [ 134.189887][ T2423] loop0: detected capacity change from 0 to 512 [ 134.214029][ T2423] EXT4-fs warning (device loop0): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 134.221218][ T2425] device syzkaller0 entered promiscuous mode [ 134.230154][ T2423] EXT4-fs (loop0): mount failed [ 134.239830][ T1631] usb 5-1: 0:2 : does not exist [ 134.766143][ T1631] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 134.798160][ T1205] Bluetooth: hci0: command 0x1003 tx timeout [ 134.798187][ T2092] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.870949][ T1631] usb 5-1: USB disconnect, device number 11 [ 135.333791][ T1755] udevd[1755]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 135.582981][ T2458] loop4: detected capacity change from 0 to 512 [ 135.598271][ T2458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.618013][ T2458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.632512][ T2458] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 135.656339][ T2458] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 135.664622][ T2458] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 135.674131][ T2458] EXT4-fs (loop4): 1 truncate cleaned up [ 135.680334][ T2458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.699473][ T283] EXT4-fs (loop4): unmounting filesystem. [ 135.757352][ T2473] loop2: detected capacity change from 0 to 512 [ 135.781643][ T2473] EXT4-fs warning (device loop2): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 135.799045][ T2473] EXT4-fs (loop2): mount failed [ 136.701157][ T2499] loop2: detected capacity change from 0 to 512 [ 136.708724][ T2499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.715549][ T2499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.722920][ T2499] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 136.733733][ T2499] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 136.742370][ T2499] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 136.751379][ T2499] EXT4-fs (loop2): 1 truncate cleaned up [ 136.757238][ T2499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 136.776366][ T286] EXT4-fs (loop2): unmounting filesystem. [ 136.968096][ T1031] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.297905][ T1031] usb 2-1: Using ep0 maxpacket: 16 [ 137.304353][ T1031] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 137.319345][ T1031] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.329845][ T1031] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.340313][ T1031] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.349762][ T1031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.357833][ T1031] usb 2-1: Product: syz [ 137.362434][ T1031] usb 2-1: Manufacturer: syz [ 137.367262][ T1031] usb 2-1: SerialNumber: syz [ 137.734730][ T2524] loop2: detected capacity change from 0 to 512 [ 137.748043][ T1205] Bluetooth: hci0: command 0x1003 tx timeout [ 137.748930][ T2092] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.767010][ T2524] EXT4-fs warning (device loop2): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 137.788516][ T1031] usb 2-1: 0:2 : does not exist [ 137.789666][ T2524] EXT4-fs (loop2): mount failed [ 137.914053][ T28] audit: type=1326 audit(1750515667.744:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2539 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff029f8e929 code=0x7ffc0000 [ 137.937627][ T28] audit: type=1326 audit(1750515667.744:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2539 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff029f2ab19 code=0x7ffc0000 [ 137.961222][ T28] audit: type=1326 audit(1750515667.744:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2539 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff029f2ab19 code=0x7ffc0000 [ 137.985292][ T28] audit: type=1326 audit(1750515667.744:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2539 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff029f2ab19 code=0x7ffc0000 [ 138.047376][ T28] audit: type=1326 audit(1750515667.744:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2539 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff029f2ab19 code=0x7ffc0000 [ 138.165020][ T28] audit: type=1326 audit(1750515667.744:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2539 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff029f2ab19 code=0x7ffc0000 [ 138.196803][ T28] audit: type=1326 audit(1750515667.744:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2539 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff029f2ab19 code=0x7ffc0000 [ 138.220504][ T28] audit: type=1326 audit(1750515667.744:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2539 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff029f2ab19 code=0x7ffc0000 [ 138.244223][ T28] audit: type=1326 audit(1750515667.744:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2539 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff029f2ab19 code=0x7ffc0000 [ 138.277814][ T28] audit: type=1326 audit(1750515667.744:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2539 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff029f2ab19 code=0x7ffc0000 [ 138.306628][ T1031] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 138.336849][ T1031] usb 2-1: USB disconnect, device number 6 [ 139.254247][ T2572] FAULT_INJECTION: forcing a failure. [ 139.254247][ T2572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.268310][ T2574] loop1: detected capacity change from 0 to 512 [ 139.270916][ T2572] CPU: 0 PID: 2572 Comm: syz.4.745 Not tainted 6.1.138-syzkaller-00013-gf6c21bc9a693 #0 [ 139.284474][ T2572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.294642][ T2572] Call Trace: [ 139.298117][ T2572] [ 139.301065][ T2572] __dump_stack+0x21/0x24 [ 139.305426][ T2572] dump_stack_lvl+0xee/0x150 [ 139.310038][ T2572] ? __cfi_dump_stack_lvl+0x8/0x8 [ 139.315093][ T2572] dump_stack+0x15/0x24 [ 139.319270][ T2572] should_fail_ex+0x3d4/0x520 [ 139.323958][ T2572] should_fail+0xb/0x10 [ 139.328122][ T2572] should_fail_usercopy+0x1a/0x20 [ 139.333158][ T2572] _copy_from_user+0x1e/0xc0 [ 139.337856][ T2572] strndup_user+0xb6/0x150 [ 139.342295][ T2572] __se_sys_mount+0x9c/0x380 [ 139.346897][ T2572] ? fput+0x154/0x1a0 [ 139.350891][ T2572] ? __x64_sys_mount+0xd0/0xd0 [ 139.355679][ T2572] ? __cfi_ksys_write+0x10/0x10 [ 139.360631][ T2572] __x64_sys_mount+0xbf/0xd0 [ 139.365236][ T2572] x64_sys_call+0x65d/0x9a0 [ 139.369751][ T2572] do_syscall_64+0x4c/0xa0 [ 139.374275][ T2572] ? clear_bhb_loop+0x15/0x70 [ 139.378964][ T2572] ? clear_bhb_loop+0x15/0x70 [ 139.383735][ T2572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.389721][ T2572] RIP: 0033:0x7ff029f8e929 [ 139.394142][ T2572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.413753][ T2572] RSP: 002b:00007ff02aec5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.422352][ T2572] RAX: ffffffffffffffda RBX: 00007ff02a1b5fa0 RCX: 00007ff029f8e929 [ 139.430334][ T2572] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 139.438336][ T2572] RBP: 00007ff02aec5090 R08: 0000200000000580 R09: 0000000000000000 [ 139.446317][ T2572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.454741][ T2572] R13: 0000000000000000 R14: 00007ff02a1b5fa0 R15: 00007ffdeedbd528 [ 139.462743][ T2572] [ 139.495368][ T2574] EXT4-fs warning (device loop1): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 139.512944][ T2574] EXT4-fs (loop1): mount failed [ 140.058026][ T1556] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 140.308297][ T1556] usb 1-1: Using ep0 maxpacket: 16 [ 140.333191][ T1556] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 140.358697][ T1556] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.443657][ T2630] syz.1.768 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 140.465679][ T1556] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.491981][ T1556] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.503912][ T1556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.512240][ T1556] usb 1-1: Product: syz [ 140.513829][ T2637] loop3: detected capacity change from 0 to 512 [ 140.516803][ T1556] usb 1-1: Manufacturer: syz [ 140.528687][ T1556] usb 1-1: SerialNumber: syz [ 140.539727][ T2637] EXT4-fs warning (device loop3): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 140.555441][ T2637] EXT4-fs (loop3): mount failed [ 140.940425][ T1556] usb 1-1: 0:2 : does not exist [ 141.501664][ T2664] loop2: detected capacity change from 0 to 512 [ 142.544302][ T1556] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 142.696204][ T2664] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.776: bad orphan inode 15 [ 142.707227][ T2664] ext4_test_bit(bit=14, block=18) = 1 [ 142.712710][ T2664] is_bad_inode(inode)=0 [ 142.716919][ T2664] NEXT_ORPHAN(inode)=1023 [ 142.721419][ T2664] max_ino=32 [ 142.724712][ T2664] i_nlink=0 [ 142.729271][ T2664] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2934: inode #15: comm syz.2.776: corrupted xattr block 19 [ 142.742097][ T2664] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 142.751656][ T2664] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 142.761280][ T2664] ext4 filesystem being mounted at /159/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 142.872929][ T1556] usb 1-1: USB disconnect, device number 10 [ 143.089957][ T2679] netlink: 2 bytes leftover after parsing attributes in process `syz.3.786'. [ 143.269286][ T286] EXT4-fs (loop2): unmounting filesystem. [ 143.323093][ T2686] xt_socket: unknown flags 0xc [ 143.334181][ T1755] udevd[1755]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 143.837968][ T1556] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.067932][ T1556] usb 3-1: Using ep0 maxpacket: 16 [ 144.074636][ T1556] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.087448][ T1556] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.103985][ T1556] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.112168][ T1556] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 144.124205][ T1556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.134192][ T1556] usb 3-1: config 0 descriptor?? [ 144.522604][ T2705] xt_socket: unknown flags 0xc [ 144.562263][ T2704] loop3: detected capacity change from 0 to 512 [ 144.666758][ T2704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.746832][ T2704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.781468][ T1556] usbhid 3-1:0.0: can't add hid device: -71 [ 144.804573][ T1556] usbhid: probe of 3-1:0.0 failed with error -71 [ 144.822926][ T2704] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 144.883220][ T1556] usb 3-1: USB disconnect, device number 5 [ 144.955129][ T2704] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 145.036464][ T2704] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 145.084737][ T2704] EXT4-fs (loop3): 1 truncate cleaned up [ 145.141485][ T2704] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 145.308658][ T287] EXT4-fs (loop3): unmounting filesystem. [ 145.319757][ T2710] xt_socket: unknown flags 0xc [ 145.325519][ T2710] loop1: detected capacity change from 0 to 16 [ 145.332865][ T2710] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 145.430222][ T1755] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.466088][ T1120] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 145.837916][ T1120] usb 5-1: Using ep0 maxpacket: 16 [ 145.844298][ T1120] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 145.855136][ T1120] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.864897][ T1120] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.877587][ T1120] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.886760][ T1120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.895016][ T1120] usb 5-1: Product: syz [ 145.899229][ T1120] usb 5-1: Manufacturer: syz [ 145.903856][ T1120] usb 5-1: SerialNumber: syz [ 145.957920][ T380] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.137915][ T380] usb 3-1: Using ep0 maxpacket: 16 [ 146.144472][ T380] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 146.154510][ T380] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.165036][ T380] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.176478][ T380] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.185642][ T380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.193791][ T380] usb 3-1: Product: syz [ 146.198133][ T380] usb 3-1: Manufacturer: syz [ 146.202786][ T380] usb 3-1: SerialNumber: syz [ 146.311819][ T1120] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 146.579675][ T2739] xt_socket: unknown flags 0xc [ 147.489755][ T1120] usb 5-1: USB disconnect, device number 12 [ 147.499589][ T380] usb 3-1: 0:2 : does not exist [ 147.676152][ T2754] xt_socket: unknown flags 0xc [ 147.682216][ T2754] loop3: detected capacity change from 0 to 16 [ 147.700380][ T2754] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 147.716607][ T380] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 147.786267][ T2755] xt_socket: unknown flags 0xc [ 148.988387][ T380] usb 3-1: USB disconnect, device number 6 [ 149.340751][ T2740] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 149.530162][ T2740] usb 2-1: Using ep0 maxpacket: 16 [ 149.541187][ T2740] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.554413][ T2005] udevd[2005]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 149.582825][ T2740] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.611083][ T2740] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.633515][ T2740] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 149.643005][ T2740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.656253][ T2740] usb 2-1: config 0 descriptor?? [ 149.951718][ T2784] xt_socket: unknown flags 0xc [ 150.269425][ T2740] usbhid 2-1:0.0: can't add hid device: -71 [ 150.368216][ T2740] usbhid: probe of 2-1:0.0 failed with error -71 [ 150.577963][ T1488] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 150.603997][ T2791] device syzkaller0 entered promiscuous mode [ 150.788255][ T1488] usb 1-1: Using ep0 maxpacket: 16 [ 150.808426][ T1488] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 150.859138][ T1488] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.968895][ T2740] usb 2-1: USB disconnect, device number 7 [ 151.158648][ T2808] xt_socket: unknown flags 0xc [ 151.997921][ T1488] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.009087][ T1488] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.022502][ T1488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.031028][ T1488] usb 1-1: Product: syz [ 152.035272][ T1488] usb 1-1: Manufacturer: syz [ 152.040209][ T1488] usb 1-1: SerialNumber: syz [ 152.225799][ T2820] xt_socket: unknown flags 0xc [ 152.231625][ T2820] loop2: detected capacity change from 0 to 16 [ 152.238514][ T2820] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 152.301641][ T1755] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.531462][ T1488] usb 1-1: 0:2 : does not exist [ 152.883805][ T2829] device syzkaller0 entered promiscuous mode [ 152.934556][ T1488] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 152.951501][ T1488] usb 1-1: USB disconnect, device number 11 [ 153.081755][ T1631] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.636403][ T2845] xt_socket: unknown flags 0xc [ 153.668094][ T1631] usb 4-1: Using ep0 maxpacket: 16 [ 153.687235][ T1631] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.706473][ T1631] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.718142][ T1631] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.725027][ T1631] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 153.764974][ T1631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.840170][ T1631] usb 4-1: config 0 descriptor?? [ 154.450496][ T2856] xt_socket: unknown flags 0xc [ 154.620736][ T1631] usbhid 4-1:0.0: can't add hid device: -71 [ 154.629606][ T1631] usbhid: probe of 4-1:0.0 failed with error -71 [ 154.727882][ T1631] usb 4-1: USB disconnect, device number 10 [ 154.860580][ T2862] device syzkaller0 entered promiscuous mode [ 156.008476][ T2890] xt_socket: unknown flags 0xc [ 156.065832][ T2886] xt_socket: unknown flags 0xc [ 156.230724][ T2886] loop2: detected capacity change from 0 to 16 [ 156.291202][ T2886] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 156.604310][ T2900] device syzkaller0 entered promiscuous mode [ 157.085393][ T2915] xt_socket: unknown flags 0xc [ 157.167963][ T1556] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 157.431242][ T1556] usb 5-1: Using ep0 maxpacket: 16 [ 157.439315][ T1556] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.804924][ T1556] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.827264][ T1556] usb 5-1: config 0 interface 0 has no altsetting 0 [ 157.840197][ T1556] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 157.849571][ T1556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.861659][ T1556] usb 5-1: config 0 descriptor?? [ 158.064854][ T2929] device syzkaller0 entered promiscuous mode [ 158.322338][ T1556] usbhid 5-1:0.0: can't add hid device: -71 [ 158.328608][ T1556] usbhid: probe of 5-1:0.0 failed with error -71 [ 158.337439][ T1556] usb 5-1: USB disconnect, device number 13 [ 158.626319][ T2945] xt_socket: unknown flags 0xc [ 159.467571][ T2960] xt_socket: unknown flags 0xc [ 159.473486][ T2960] loop4: detected capacity change from 0 to 16 [ 159.480132][ T2960] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 159.530044][ T1755] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.312915][ T2968] xt_socket: unknown flags 0xc [ 162.282167][ T1488] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 162.468004][ T1488] usb 1-1: Using ep0 maxpacket: 16 [ 162.477145][ T1488] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.526007][ T2998] xt_socket: unknown flags 0xc [ 162.559623][ T1488] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.569936][ T1488] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.577001][ T1488] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 162.586421][ T1488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.675819][ T1488] usb 1-1: config 0 descriptor?? [ 163.777993][ T3004] xt_socket: unknown flags 0xc [ 164.096611][ T3004] loop1: detected capacity change from 0 to 16 [ 164.103940][ T3004] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 164.128975][ T1624] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.142570][ T1488] usbhid 1-1:0.0: can't add hid device: -71 [ 164.149372][ T1488] usbhid: probe of 1-1:0.0 failed with error -71 [ 164.201411][ T1488] usb 1-1: USB disconnect, device number 12 [ 164.984915][ T3020] xt_socket: unknown flags 0xc [ 165.681113][ T1488] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 165.871498][ T1488] usb 1-1: device descriptor read/64, error -71 [ 166.202864][ T1488] usb 1-1: device descriptor read/64, error -71 [ 166.356024][ T3057] xt_socket: unknown flags 0xc [ 167.457972][ T3059] xt_socket: unknown flags 0xc [ 167.513263][ T3059] loop4: detected capacity change from 0 to 16 [ 167.519889][ T3059] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 167.554441][ T1755] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.598127][ T1488] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 167.757976][ T1488] usb 1-1: device descriptor read/64, error -71 [ 168.037898][ T1488] usb 1-1: device descriptor read/64, error -71 [ 168.076763][ T1120] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 168.158004][ T1488] usb usb1-port1: attempt power cycle [ 168.262265][ T3080] xt_socket: unknown flags 0xc [ 170.265991][ T3095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 170.317883][ T3103] xt_socket: unknown flags 0xc [ 170.606881][ T3118] xt_socket: unknown flags 0xc [ 170.663987][ T3118] loop4: detected capacity change from 0 to 16 [ 170.682027][ T3118] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 170.751394][ T1120] usb 4-1: device not accepting address 11, error -71 [ 171.127885][ T1120] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 171.307912][ T1120] usb 4-1: device descriptor read/64, error -71 [ 171.807980][ T1120] usb 4-1: device descriptor read/64, error -71 [ 171.814359][ T303] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.937976][ T1120] usb usb4-port1: attempt power cycle [ 171.944554][ T3137] xt_socket: unknown flags 0xc [ 171.997880][ T303] usb 2-1: Using ep0 maxpacket: 16 [ 172.004396][ T303] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.006566][ T3143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.960'. [ 172.015598][ T303] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.036474][ T303] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.043250][ T303] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 172.087689][ T303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.097327][ T303] usb 2-1: config 0 descriptor?? [ 172.231091][ T3150] xt_socket: unknown flags 0xc [ 172.367922][ T1120] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 172.399380][ T1120] usb 4-1: device descriptor read/8, error -71 [ 172.510546][ T303] usbhid 2-1:0.0: can't add hid device: -71 [ 172.516645][ T303] usbhid: probe of 2-1:0.0 failed with error -71 [ 172.524579][ T303] usb 2-1: USB disconnect, device number 8 [ 172.549335][ T1120] usb 4-1: device descriptor read/8, error -71 [ 173.069410][ T1120] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 173.115670][ T1120] usb 4-1: device descriptor read/8, error -71 [ 173.249502][ T3170] xt_socket: unknown flags 0xc [ 173.262927][ T3170] loop2: detected capacity change from 0 to 16 [ 173.270387][ T1120] usb 4-1: device descriptor read/8, error -71 [ 173.282106][ T3170] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 173.325862][ T3173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.972'. [ 173.341135][ T1755] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 173.388014][ T1120] usb usb4-port1: unable to enumerate USB device [ 174.397057][ T3190] xt_socket: unknown flags 0xc [ 174.569748][ T3197] xt_socket: unknown flags 0xc [ 174.707901][ T1120] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 174.808022][ T1488] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 174.888183][ T1120] usb 4-1: Using ep0 maxpacket: 16 [ 174.894691][ T1120] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.907112][ T1120] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.918167][ T1120] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.929171][ T1120] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 174.938359][ T1120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.947277][ T1120] usb 4-1: config 0 descriptor?? [ 174.978005][ T1488] usb 1-1: device descriptor read/64, error -71 [ 175.487963][ T1488] usb 1-1: device descriptor read/64, error -71 [ 175.497489][ T1120] usbhid 4-1:0.0: can't add hid device: -71 [ 175.503818][ T1120] usbhid: probe of 4-1:0.0 failed with error -71 [ 175.511590][ T1120] usb 4-1: USB disconnect, device number 15 [ 175.770445][ T1488] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 175.889942][ T3227] xt_socket: unknown flags 0xc [ 175.899959][ T3227] loop2: detected capacity change from 0 to 16 [ 175.907178][ T3227] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 175.937893][ T1488] usb 1-1: device descriptor read/64, error -71 [ 176.240129][ T1488] usb 1-1: device descriptor read/64, error -71 [ 176.306873][ T3239] xt_socket: unknown flags 0xc [ 176.357964][ T1488] usb usb1-port1: attempt power cycle [ 176.362908][ T3238] xt_socket: unknown flags 0xc [ 176.793183][ T1488] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 176.828981][ T1488] usb 1-1: device descriptor read/8, error -71 [ 176.989758][ T1488] usb 1-1: device descriptor read/8, error -71 [ 177.599509][ T3269] loop0: detected capacity change from 0 to 512 [ 177.614651][ T3269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.631188][ T3269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.639612][ T3269] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 177.655253][ T3269] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 177.664076][ T3269] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 177.672747][ T3269] EXT4-fs (loop0): 1 truncate cleaned up [ 177.678963][ T3269] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 177.697072][ T285] EXT4-fs (loop0): unmounting filesystem. [ 177.747947][ T1120] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 177.860932][ T3282] xt_socket: unknown flags 0xc [ 177.927883][ T1120] usb 4-1: Using ep0 maxpacket: 16 [ 177.934311][ T1120] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.945614][ T1120] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.955717][ T1120] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.962591][ T1120] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 177.971899][ T1120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.987428][ T1120] usb 4-1: config 0 descriptor?? [ 178.398400][ T1120] usbhid 4-1:0.0: can't add hid device: -71 [ 178.406992][ T3290] xt_socket: unknown flags 0xc [ 178.413376][ T3290] loop0: detected capacity change from 0 to 16 [ 178.420041][ T3290] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 178.437548][ T1120] usbhid: probe of 4-1:0.0 failed with error -71 [ 178.456706][ T1120] usb 4-1: USB disconnect, device number 16 [ 178.658601][ T1624] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.830223][ T3296] xt_socket: unknown flags 0xc [ 179.020983][ T3308] loop3: detected capacity change from 0 to 512 [ 179.051515][ T3308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.059061][ T3308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.204764][ T3308] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 179.314144][ T3308] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 179.319737][ T380] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 179.334848][ T3308] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 179.344434][ T3308] EXT4-fs (loop3): 1 truncate cleaned up [ 179.350508][ T3308] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 179.386052][ T287] EXT4-fs (loop3): unmounting filesystem. [ 179.487938][ T380] usb 2-1: device descriptor read/64, error -71 [ 179.530269][ T3320] xt_socket: unknown flags 0xc [ 179.757904][ T380] usb 2-1: device descriptor read/64, error -71 [ 180.027953][ T380] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 180.117905][ T2740] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.178030][ T380] usb 2-1: device descriptor read/64, error -71 [ 180.305893][ T3333] loop3: detected capacity change from 0 to 512 [ 180.328063][ T2740] usb 3-1: Using ep0 maxpacket: 16 [ 180.334826][ T2740] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.335241][ T3333] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 180.359879][ T3333] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.360567][ T2740] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.392864][ T28] kauditd_printk_skb: 873 callbacks suppressed [ 180.392881][ T28] audit: type=1326 audit(1750515710.224:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3332 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b38e929 code=0x7ffc0000 [ 180.423628][ T28] audit: type=1326 audit(1750515710.234:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3332 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b38e929 code=0x7ffc0000 [ 180.431723][ T2740] usb 3-1: config 0 interface 0 has no altsetting 0 [ 180.447269][ T28] audit: type=1326 audit(1750515710.234:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3332 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a6b38d290 code=0x7ffc0000 [ 180.454768][ T380] usb 2-1: device descriptor read/64, error -71 [ 180.484743][ T2740] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 180.494083][ T2740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.498566][ T28] audit: type=1326 audit(1750515710.234:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3332 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a6b38e52b code=0x7ffc0000 [ 180.523781][ T2740] usb 3-1: config 0 descriptor?? [ 180.526131][ T28] audit: type=1326 audit(1750515710.234:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3332 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a6b38e52b code=0x7ffc0000 [ 180.553940][ T28] audit: type=1326 audit(1750515710.234:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3332 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a6b38e52b code=0x7ffc0000 [ 180.580464][ T28] audit: type=1326 audit(1750515710.234:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3332 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a6b38e52b code=0x7ffc0000 [ 180.608296][ T380] usb usb2-port1: attempt power cycle [ 180.793480][ T3341] xt_socket: unknown flags 0xc [ 180.799451][ T3341] loop4: detected capacity change from 0 to 16 [ 180.806243][ T3341] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 180.816129][ T1120] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 180.888228][ T28] audit: type=1326 audit(1750515710.664:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3332 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a6b38e52b code=0x7ffc0000 [ 180.953245][ T2740] usbhid 3-1:0.0: can't add hid device: -71 [ 180.964131][ T2740] usbhid: probe of 3-1:0.0 failed with error -71 [ 180.971676][ T28] audit: type=1326 audit(1750515710.664:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3332 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a6b38e52b code=0x7ffc0000 [ 181.012728][ T2740] usb 3-1: USB disconnect, device number 7 [ 181.018792][ T1120] usb 4-1: Using ep0 maxpacket: 16 [ 181.025467][ T1120] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 181.034605][ T380] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 181.061820][ T1120] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.073326][ T380] usb 2-1: device descriptor read/8, error -71 [ 181.089893][ T28] audit: type=1326 audit(1750515710.854:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3332 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a6b38e52b code=0x7ffc0000 [ 181.113904][ T1120] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.135150][ T1120] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.153734][ T1120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.170214][ T1120] usb 4-1: Product: syz [ 181.179634][ T1120] usb 4-1: Manufacturer: syz [ 181.189552][ T1120] usb 4-1: SerialNumber: syz [ 181.228986][ T380] usb 2-1: device descriptor read/8, error -71 [ 181.697282][ T3350] xt_socket: unknown flags 0xc [ 181.868502][ T1120] usb 4-1: 0:2 : does not exist [ 182.315668][ T3333] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #18: comm syz.3.1037: corrupted inode contents [ 182.331293][ T3333] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #18: comm syz.3.1037: mark_inode_dirty error [ 182.353441][ T3333] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #18: comm syz.3.1037: corrupted inode contents [ 182.392481][ T3333] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2963: inode #18: comm syz.3.1037: mark_inode_dirty error [ 182.405167][ T3333] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2966: inode #18: comm syz.3.1037: mark inode dirty (error -117) [ 182.432096][ T3368] loop4: detected capacity change from 0 to 512 [ 182.437971][ T3333] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 182.457164][ T1120] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 182.478969][ T1120] usb 4-1: USB disconnect, device number 17 [ 182.485852][ T3364] xt_socket: unknown flags 0xc [ 182.496390][ T3368] EXT4-fs warning (device loop4): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 182.512195][ T3368] EXT4-fs (loop4): mount failed [ 183.309759][ T287] EXT4-fs (loop3): unmounting filesystem. [ 183.362002][ T3005] Bluetooth: hci0: Frame reassembly failed (-84) [ 183.487889][ T303] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 183.609360][ T3387] xt_socket: unknown flags 0xc [ 183.615192][ T3387] loop1: detected capacity change from 0 to 16 [ 183.621823][ T3387] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 183.647936][ T303] usb 1-1: device descriptor read/64, error -71 [ 183.654359][ T380] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 183.666064][ T1755] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.111388][ T3391] xt_socket: unknown flags 0xc [ 184.137888][ T380] usb 4-1: Using ep0 maxpacket: 16 [ 184.144348][ T380] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.155901][ T380] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.166213][ T380] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.173078][ T380] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 184.182489][ T380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.195387][ T380] usb 4-1: config 0 descriptor?? [ 184.267936][ T303] usb 1-1: device descriptor read/64, error -71 [ 184.537913][ T303] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 184.613050][ T380] usbhid 4-1:0.0: can't add hid device: -71 [ 184.624305][ T380] usbhid: probe of 4-1:0.0 failed with error -71 [ 184.657486][ T380] usb 4-1: USB disconnect, device number 18 [ 184.687973][ T303] usb 1-1: device descriptor read/64, error -71 [ 185.043537][ T3408] xt_socket: unknown flags 0xc [ 185.396147][ T3412] loop3: detected capacity change from 0 to 512 [ 185.425152][ T3412] EXT4-fs warning (device loop3): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 185.440317][ T1205] Bluetooth: hci0: command 0x1003 tx timeout [ 185.446421][ T2092] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 185.453996][ T3412] EXT4-fs (loop3): mount failed [ 185.527946][ T303] usb 1-1: device descriptor read/64, error -71 [ 186.564260][ T303] usb usb1-port1: attempt power cycle [ 186.923349][ T3439] xt_socket: unknown flags 0xc [ 186.980362][ T3449] xt_socket: unknown flags 0xc [ 186.996059][ T3449] loop1: detected capacity change from 0 to 16 [ 187.030834][ T3449] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 187.078638][ T303] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 187.118871][ T303] usb 1-1: Using ep0 maxpacket: 16 [ 187.125252][ T303] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.146587][ T303] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.169619][ T303] usb 1-1: config 0 interface 0 has no altsetting 0 [ 187.176290][ T303] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 187.201820][ T303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.230662][ T303] usb 1-1: config 0 descriptor?? [ 187.319594][ T3455] xt_socket: unknown flags 0xc [ 187.825250][ T303] usbhid 1-1:0.0: can't add hid device: -71 [ 187.831337][ T303] usbhid: probe of 1-1:0.0 failed with error -71 [ 187.844942][ T303] usb 1-1: USB disconnect, device number 22 [ 188.339682][ T3463] loop0: detected capacity change from 0 to 512 [ 188.368691][ T1631] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 188.379800][ T3463] EXT4-fs warning (device loop0): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 188.395422][ T3463] EXT4-fs (loop0): mount failed [ 188.532631][ T1631] usb 5-1: device descriptor read/64, error -71 [ 189.453648][ T1205] Bluetooth: hci0: command 0x1003 tx timeout [ 189.468098][ T2092] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 189.775128][ T1631] usb 5-1: device descriptor read/64, error -71 [ 189.893292][ T3490] xt_socket: unknown flags 0xc [ 190.057878][ T1631] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 190.257876][ T1631] usb 5-1: device descriptor read/64, error -71 [ 190.537928][ T1631] usb 5-1: device descriptor read/64, error -71 [ 190.601103][ T3500] loop1: detected capacity change from 0 to 512 [ 190.657977][ T1631] usb usb5-port1: attempt power cycle [ 190.668927][ T3500] EXT4-fs warning (device loop1): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 190.690196][ T3500] EXT4-fs (loop1): mount failed [ 190.870660][ T303] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 191.241904][ T303] usb 1-1: Using ep0 maxpacket: 16 [ 191.263992][ T1631] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 191.423901][ T303] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.438896][ T303] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.395101][ T3525] xt_socket: unknown flags 0xc [ 192.516210][ T303] usb 1-1: config 0 interface 0 has no altsetting 0 [ 192.529727][ T3527] xt_socket: unknown flags 0xc [ 192.745202][ T3527] loop2: detected capacity change from 0 to 16 [ 192.757917][ T1631] usb 5-1: device not accepting address 16, error -71 [ 192.780184][ T303] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 192.791363][ T303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.808486][ T303] usb 1-1: config 0 descriptor?? [ 192.834887][ T3527] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 193.463572][ T303] usbhid 1-1:0.0: can't add hid device: -71 [ 193.469629][ T303] usbhid: probe of 1-1:0.0 failed with error -71 [ 193.476921][ T303] usb 1-1: USB disconnect, device number 23 [ 193.787007][ T3558] xt_socket: unknown flags 0xc [ 193.907213][ T3563] loop1: detected capacity change from 0 to 512 [ 194.063785][ T3563] EXT4-fs warning (device loop1): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 194.079762][ T3563] EXT4-fs (loop1): mount failed [ 194.102449][ T3577] device syzkaller0 entered promiscuous mode [ 194.117889][ T1631] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 194.317926][ T1631] usb 5-1: Using ep0 maxpacket: 16 [ 194.325134][ T1631] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 194.452991][ T1631] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.543972][ T1631] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.580622][ T1631] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.623803][ T1631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.660485][ T1631] usb 5-1: Product: syz [ 194.672267][ T1631] usb 5-1: Manufacturer: syz [ 194.677115][ T1631] usb 5-1: SerialNumber: syz [ 194.877609][ T3592] xt_socket: unknown flags 0xc [ 194.991422][ T3609] device syzkaller0 entered promiscuous mode [ 195.125294][ T3618] loop0: detected capacity change from 0 to 512 [ 195.134856][ T3614] xt_socket: unknown flags 0xc [ 195.145507][ T1631] usb 5-1: 0:2 : does not exist [ 195.218993][ T3618] EXT4-fs warning (device loop0): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 195.246036][ T3618] EXT4-fs (loop0): mount failed [ 196.936850][ T380] usb 5-1: USB disconnect, device number 18 [ 197.008277][ T3638] xt_socket: unknown flags 0xc [ 198.067223][ T3651] xt_socket: unknown flags 0xc [ 198.291676][ T3650] device syzkaller0 entered promiscuous mode [ 200.387253][ T3686] xt_socket: unknown flags 0xc [ 200.484599][ T1631] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 200.500720][ T3700] device syzkaller0 entered promiscuous mode [ 200.738368][ T1631] usb 1-1: Using ep0 maxpacket: 16 [ 201.388379][ T3707] xt_socket: unknown flags 0xc [ 201.394221][ T3707] loop2: detected capacity change from 0 to 16 [ 201.401322][ T3707] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 201.705691][ T1631] usb 1-1: unable to read config index 0 descriptor/all [ 201.720887][ T1631] usb 1-1: can't read configurations, error -71 [ 202.758516][ T3736] device syzkaller0 entered promiscuous mode [ 203.248999][ T3747] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1183'. [ 203.269796][ T429] Bluetooth: hci0: Frame reassembly failed (-84) [ 203.284319][ T1205] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 203.517957][ T1631] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 203.837585][ T3759] xt_socket: unknown flags 0xc [ 204.148471][ T3759] loop1: detected capacity change from 0 to 16 [ 204.155125][ T3759] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 204.326054][ T1755] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 204.337746][ T1631] usb 5-1: Using ep0 maxpacket: 16 [ 204.365796][ T1631] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 204.554884][ T1631] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.586803][ T1631] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.598592][ T1631] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.622212][ T1631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.641099][ T1631] usb 5-1: Product: syz [ 204.648205][ T1631] usb 5-1: Manufacturer: syz [ 204.652854][ T1631] usb 5-1: SerialNumber: syz [ 204.670708][ T3771] device syzkaller0 entered promiscuous mode [ 205.016615][ T3005] Bluetooth: hci1: Frame reassembly failed (-84) [ 205.118764][ T1631] usb 5-1: 0:2 : does not exist [ 205.347928][ T2092] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.354135][ T1206] Bluetooth: hci0: command 0x1003 tx timeout [ 206.203649][ T3807] device syzkaller0 entered promiscuous mode [ 206.435849][ T3811] xt_socket: unknown flags 0xc [ 206.446742][ T3811] loop0: detected capacity change from 0 to 16 [ 206.455449][ T3811] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 206.793246][ T1488] usb 5-1: USB disconnect, device number 19 [ 207.028005][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 207.028038][ T1205] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 207.560328][ T1755] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.740838][ T3831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1212'. [ 207.749897][ T3831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1212'. [ 207.783320][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 207.783340][ T28] audit: type=1400 audit(1750515737.594:1642): avc: denied { write } for pid=3825 comm="syz.2.1212" name="usbmon1" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 208.065650][ T28] audit: type=1326 audit(1750515737.594:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.2.1212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa58478e929 code=0x0 [ 208.119128][ T28] audit: type=1400 audit(1750515737.854:1644): avc: denied { getopt } for pid=3838 comm="syz.0.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 208.172877][ T3844] device syzkaller0 entered promiscuous mode [ 209.090408][ T3853] loop1: detected capacity change from 0 to 512 [ 209.306390][ T1488] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 209.339070][ T3853] EXT4-fs (loop1): orphan cleanup on readonly fs [ 209.345559][ T3853] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 209.359152][ T3853] EXT4-fs (loop1): 1 truncate cleaned up [ 209.364894][ T3853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 209.527879][ T1488] usb 1-1: Using ep0 maxpacket: 16 [ 209.534208][ T1488] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 209.554835][ T1488] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.624229][ T3877] xt_socket: unknown flags 0xc [ 209.635013][ T3877] loop3: detected capacity change from 0 to 16 [ 209.643762][ T3877] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 209.686865][ T284] EXT4-fs (loop1): unmounting filesystem. [ 209.786943][ T1488] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.997678][ T1488] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.140177][ T1488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.244056][ T1488] usb 1-1: Product: syz [ 210.372961][ T1488] usb 1-1: Manufacturer: syz [ 210.377621][ T1488] usb 1-1: SerialNumber: syz [ 210.467955][ T3884] device syzkaller0 entered promiscuous mode [ 210.856255][ T1488] usb 1-1: 0:2 : does not exist [ 211.071633][ T429] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.687942][ T1488] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 211.837955][ T1488] usb 3-1: device descriptor read/64, error -71 [ 212.041043][ T3921] xt_socket: unknown flags 0xc [ 212.052099][ T3921] loop1: detected capacity change from 0 to 16 [ 212.060663][ T3921] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 212.138105][ T1488] usb 3-1: device descriptor read/64, error -71 [ 212.418011][ T1488] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 212.482130][ T24] usb 1-1: USB disconnect, device number 26 [ 212.617988][ T1488] usb 3-1: device descriptor read/64, error -71 [ 212.917998][ T1488] usb 3-1: device descriptor read/64, error -71 [ 212.940641][ T3923] device syzkaller0 entered promiscuous mode [ 212.998464][ T1755] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.038036][ T1488] usb usb3-port1: attempt power cycle [ 213.107873][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 213.107901][ T1205] Bluetooth: hci0: command 0x1003 tx timeout [ 213.322232][ T3943] loop1: detected capacity change from 0 to 512 [ 213.379802][ T3943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.461262][ T3943] EXT4-fs (loop1): orphan cleanup on readonly fs [ 213.473721][ T3943] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1251: bg 0: block 248: padding at end of block bitmap is not set [ 213.490590][ T3943] Quota error (device loop1): write_blk: dquota write failed [ 213.498350][ T3943] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 213.508406][ T3943] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.1251: Failed to acquire dquot type 1 [ 213.515252][ T1488] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 213.530920][ T3943] EXT4-fs (loop1): 1 truncate cleaned up [ 213.537230][ T3943] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 213.548724][ T3943] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.1251: deleted inode referenced: 12 [ 213.560983][ T3943] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.1251: deleted inode referenced: 12 [ 213.568996][ T1488] usb 3-1: device descriptor read/8, error -71 [ 213.728985][ T1488] usb 3-1: device descriptor read/8, error -71 [ 213.967878][ T3950] xt_socket: unknown flags 0xc [ 214.053392][ T284] EXT4-fs (loop1): unmounting filesystem. [ 214.092478][ T1488] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 214.129025][ T1488] usb 3-1: device descriptor read/8, error -71 [ 214.238849][ T3960] device syzkaller0 entered promiscuous mode [ 214.279456][ T1488] usb 3-1: device descriptor read/8, error -71 [ 214.379612][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 214.397926][ T1488] usb usb3-port1: unable to enumerate USB device [ 214.407925][ T6] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 214.596791][ T3973] xt_socket: unknown flags 0xc [ 214.608111][ T3973] loop1: detected capacity change from 0 to 16 [ 214.616706][ T3973] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 215.387904][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 215.394184][ T6] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 215.418870][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.447968][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.468408][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.497932][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.505983][ T6] usb 5-1: Product: syz [ 215.530690][ T6] usb 5-1: Manufacturer: syz [ 215.535346][ T6] usb 5-1: SerialNumber: syz [ 215.983203][ T6] usb 5-1: 0:2 : does not exist [ 216.387897][ T2092] Bluetooth: hci0: command 0x1003 tx timeout [ 216.387954][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 216.659416][ T3995] device syzkaller0 entered promiscuous mode [ 217.004539][ T4002] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1272'. [ 217.015235][ T426] Bluetooth: hci0: Frame reassembly failed (-84) [ 217.030589][ T45] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 217.040430][ T4004] loop1: detected capacity change from 0 to 512 [ 217.060269][ T4004] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1273: bad orphan inode 16 [ 217.071097][ T4004] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 217.080291][ T4004] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.094548][ T4004] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 217.121602][ T284] EXT4-fs (loop1): unmounting filesystem. [ 218.384767][ T28] audit: type=1400 audit(1750515748.164:1645): avc: denied { unmount } for pid=4012 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 218.520892][ T1488] usb 5-1: USB disconnect, device number 20 [ 218.884217][ T4025] xt_socket: unknown flags 0xc [ 219.027988][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 219.242470][ T2092] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 220.252500][ T4031] loop0: detected capacity change from 0 to 512 [ 220.259683][ T4031] ext3: Unknown parameter 'appraise_type' [ 221.063080][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 221.079441][ T1755] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.712512][ T4044] xt_socket: unknown flags 0xc [ 222.162689][ T4042] syz.2.1281 (4042) used greatest stack depth: 20784 bytes left [ 222.325052][ T4050] device syzkaller0 entered promiscuous mode [ 223.107854][ T1205] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 223.216526][ T4065] loop1: detected capacity change from 0 to 512 [ 223.272497][ T4065] EXT4-fs warning (device loop1): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 223.307928][ T303] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 223.316370][ T4065] EXT4-fs (loop1): mount failed [ 223.393572][ T4074] loop2: detected capacity change from 0 to 512 [ 223.456144][ T4074] EXT4-fs warning (device loop2): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 223.478483][ T4074] EXT4-fs (loop2): mount failed [ 223.494278][ T4081] loop4: detected capacity change from 0 to 512 [ 223.507904][ T303] usb 1-1: Using ep0 maxpacket: 16 [ 223.514162][ T303] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 223.523293][ T303] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.539475][ T303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.552563][ T4081] EXT4-fs warning (device loop4): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 223.553211][ T303] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.569828][ T4081] EXT4-fs (loop4): mount failed [ 223.586346][ T303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.601942][ T303] usb 1-1: Product: syz [ 223.606261][ T303] usb 1-1: Manufacturer: syz [ 223.614011][ T303] usb 1-1: SerialNumber: syz [ 223.786593][ T4094] xt_socket: unknown flags 0xc [ 224.600442][ T4095] syz.4.1299 (4095) used greatest stack depth: 20592 bytes left [ 225.339262][ T4102] xt_socket: unknown flags 0xc [ 225.352405][ T303] usb 1-1: 0:2 : does not exist [ 226.351974][ T4123] loop4: detected capacity change from 0 to 512 [ 226.413168][ T4123] EXT4-fs warning (device loop4): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 226.430917][ T4130] loop1: detected capacity change from 0 to 512 [ 226.438177][ T4123] EXT4-fs (loop4): mount failed [ 226.463028][ T4130] EXT4-fs warning (device loop1): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 226.478357][ T4130] EXT4-fs (loop1): mount failed [ 228.153880][ T303] usb 1-1: USB disconnect, device number 27 [ 229.188206][ T28] audit: type=1400 audit(1750515758.934:1646): avc: denied { read } for pid=4141 comm="syz.1.1313" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 229.420058][ T28] audit: type=1400 audit(1750515758.934:1647): avc: denied { open } for pid=4141 comm="syz.1.1313" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 229.559434][ T28] audit: type=1400 audit(1750515758.944:1648): avc: denied { ioctl } for pid=4141 comm="syz.1.1313" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 229.916092][ T4152] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1315'. [ 229.940135][ T1205] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 230.109395][ T4157] xt_socket: unknown flags 0xc [ 230.152204][ T318] Bluetooth: hci1: Frame reassembly failed (-84) [ 232.285799][ T1205] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 232.292573][ T2092] Bluetooth: hci0: command 0x1003 tx timeout [ 232.301385][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 234.457997][ T4173] xt_socket: unknown flags 0xc [ 234.658303][ T4175] xt_socket: unknown flags 0xc [ 234.949248][ T4175] loop1: detected capacity change from 0 to 16 [ 240.437965][ T28] audit: type=1400 audit(1750515770.264:1649): avc: denied { getopt } for pid=4182 comm="syz.4.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 240.510805][ T1755] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 240.535157][ T28] audit: type=1400 audit(1750515770.364:1650): avc: denied { mounton } for pid=4188 comm="syz.1.1323" path="/283/file0" dev="tmpfs" ino=1507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 240.577967][ T4189] fuse: Bad value for 'fd' [ 240.611197][ T28] audit: type=1400 audit(1750515770.444:1651): avc: denied { mounton } for pid=4192 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 240.738689][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.753097][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.761056][ T4192] device bridge_slave_0 entered promiscuous mode [ 240.772953][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.783338][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.791269][ T4192] device bridge_slave_1 entered promiscuous mode [ 240.889733][ T4200] syz.4.1326[4200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.889812][ T4200] syz.4.1326[4200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.920648][ T4200] loop4: detected capacity change from 0 to 256 [ 240.992656][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.999783][ T4192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.007129][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.014223][ T4192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.078016][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.086556][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.119111][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.135521][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.159884][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.174965][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.206169][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.222424][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.234185][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.243322][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.252434][ T4192] device veth0_vlan entered promiscuous mode [ 241.280520][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.302987][ T4192] device veth1_macvtap entered promiscuous mode [ 241.325032][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.340249][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.388577][ T28] audit: type=1400 audit(1750515771.224:1652): avc: denied { mount } for pid=4192 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 241.420830][ T318] device bridge_slave_1 left promiscuous mode [ 241.427176][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.451846][ T318] device bridge_slave_0 left promiscuous mode [ 241.468374][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.477453][ T318] device veth1_macvtap left promiscuous mode [ 241.485493][ T318] device veth0_vlan left promiscuous mode [ 241.501805][ T4207] loop5: detected capacity change from 0 to 512 [ 241.518016][ T28] audit: type=1400 audit(1750515771.224:1653): avc: denied { mounton } for pid=4192 comm="syz-executor" path="/root/syzkaller.Jze0uu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 241.549534][ T4207] EXT4-fs: Ignoring removed i_version option [ 242.272386][ T4207] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.280220][ T28] audit: type=1400 audit(1750515771.684:1654): avc: denied { mount } for pid=4203 comm="syz.1.1329" name="/" dev="configfs" ino=13961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 242.318486][ T4207] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 242.361578][ T28] audit: type=1400 audit(1750515771.744:1655): avc: denied { search } for pid=4203 comm="syz.1.1329" name="/" dev="configfs" ino=13961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.394490][ T28] audit: type=1400 audit(1750515772.164:1656): avc: denied { read } for pid=4203 comm="syz.1.1329" name="/" dev="configfs" ino=13961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.417510][ T28] audit: type=1400 audit(1750515772.174:1657): avc: denied { open } for pid=4203 comm="syz.1.1329" path="/" dev="configfs" ino=13961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.439944][ T4207] EXT4-fs (loop5): 1 truncate cleaned up [ 243.039485][ T4207] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 243.482363][ T4222] xt_socket: unknown flags 0xc [ 243.855887][ T4192] EXT4-fs (loop5): unmounting filesystem. [ 243.991204][ T4232] loop5: detected capacity change from 0 to 512 [ 244.080247][ T4232] EXT4-fs (loop5): 1 orphan inode deleted [ 244.086041][ T4232] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 244.098728][ T8] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 244.115605][ T4232] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.198636][ T4238] loop0: detected capacity change from 0 to 512 [ 244.225988][ T8] EXT4-fs error (device loop5): ext4_release_dquot:6825: comm kworker/u4:0: Failed to release dquot type 1 [ 244.238401][ T4238] EXT4-fs (loop0): Test dummy encryption mode enabled [ 244.369467][ T4238] EXT4-fs error (device loop0): __ext4_iget:5078: inode #11: block 1: comm syz.0.1335: invalid block [ 244.381319][ T4238] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1335: couldn't read orphan inode 11 (err -117) [ 244.394777][ T4238] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 246.337158][ T4192] EXT4-fs (loop5): unmounting filesystem. [ 246.556598][ T285] EXT4-fs (loop0): unmounting filesystem. [ 246.581597][ T4244] loop5: detected capacity change from 0 to 512 [ 246.628494][ T4244] ext4: Unknown parameter 'nouser_xattr' [ 246.731526][ T1624] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.277858][ T19] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 247.467851][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 247.475185][ T19] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 247.498046][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.527712][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.548694][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.577888][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.606237][ T19] usb 5-1: Product: syz [ 247.616345][ T19] usb 5-1: Manufacturer: syz [ 247.631318][ T19] usb 5-1: SerialNumber: syz [ 247.795359][ T4257] loop3: detected capacity change from 0 to 512 [ 247.836088][ T4257] EXT4-fs warning (device loop3): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 247.855077][ T4257] EXT4-fs (loop3): mount failed [ 248.034538][ T4265] loop0: detected capacity change from 0 to 512 [ 248.070952][ T19] usb 5-1: 0:2 : does not exist [ 248.121249][ T4265] EXT4-fs warning (device loop0): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 248.136627][ T4265] EXT4-fs (loop0): mount failed [ 248.846572][ T4275] loop3: detected capacity change from 0 to 512 [ 248.875946][ T4275] EXT4-fs warning (device loop3): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 248.907076][ T4275] EXT4-fs (loop3): mount failed [ 249.317785][ T28] audit: type=1400 audit(1750515779.144:1658): avc: denied { accept } for pid=4276 comm="syz.5.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 250.822034][ T19] usb 5-1: USB disconnect, device number 21 [ 250.922451][ T4296] loop3: detected capacity change from 0 to 512 [ 252.237733][ T4303] loop5: detected capacity change from 0 to 512 [ 253.359260][ T4303] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 253.489980][ T4303] EXT4-fs (loop5): 1 truncate cleaned up [ 253.495764][ T4303] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 253.637932][ T4296] EXT4-fs warning (device loop3): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 254.078407][ T4296] EXT4-fs (loop3): mount failed [ 254.107265][ T4192] EXT4-fs (loop5): unmounting filesystem. [ 254.127658][ T4317] loop4: detected capacity change from 0 to 512 [ 254.138542][ T4319] serio: Serial port ptm0 [ 254.145091][ T4317] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.156229][ T4317] EXT4-fs: Ignoring removed bh option [ 254.177609][ T4317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.194595][ T4327] FAULT_INJECTION: forcing a failure. [ 254.194595][ T4327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.215937][ T4317] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 254.216293][ T4327] CPU: 1 PID: 4327 Comm: syz.1.1357 Not tainted 6.1.138-syzkaller-00013-gf6c21bc9a693 #0 [ 254.235610][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.245707][ T4327] Call Trace: [ 254.249007][ T4327] [ 254.251955][ T4327] __dump_stack+0x21/0x24 [ 254.256317][ T4327] dump_stack_lvl+0xee/0x150 [ 254.260937][ T4327] ? __cfi_dump_stack_lvl+0x8/0x8 [ 254.266018][ T4327] dump_stack+0x15/0x24 [ 254.270204][ T4327] should_fail_ex+0x3d4/0x520 [ 254.275004][ T4327] should_fail+0xb/0x10 [ 254.279179][ T4327] should_fail_usercopy+0x1a/0x20 [ 254.284406][ T4327] _copy_to_user+0x1e/0x90 [ 254.289292][ T4327] simple_read_from_buffer+0xe9/0x160 [ 254.294787][ T4327] proc_fail_nth_read+0x19a/0x210 [ 254.299835][ T4327] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 254.305402][ T4327] ? security_file_permission+0x94/0xb0 [ 254.310963][ T4327] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 254.316533][ T4327] vfs_read+0x26e/0x8c0 [ 254.320719][ T4327] ? __cfi_vfs_read+0x10/0x10 [ 254.325507][ T4327] ? __kasan_check_write+0x14/0x20 [ 254.330638][ T4327] ? mutex_lock+0x8d/0x1a0 [ 254.335067][ T4327] ? __cfi_mutex_lock+0x10/0x10 [ 254.339937][ T4327] ? __fdget_pos+0x2cd/0x380 [ 254.344549][ T4327] ? ksys_read+0x71/0x240 [ 254.348900][ T4327] ksys_read+0x140/0x240 [ 254.353165][ T4327] ? __cfi_ksys_read+0x10/0x10 [ 254.357954][ T4327] ? fpregs_restore_userregs+0x128/0x260 [ 254.363609][ T4327] __x64_sys_read+0x7b/0x90 [ 254.368148][ T4327] x64_sys_call+0x2f/0x9a0 [ 254.372583][ T4327] do_syscall_64+0x4c/0xa0 [ 254.377032][ T4327] ? clear_bhb_loop+0x15/0x70 [ 254.381731][ T4327] ? clear_bhb_loop+0x15/0x70 [ 254.386438][ T4327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.392436][ T4327] RIP: 0033:0x7f188a78d33c [ 254.396869][ T4327] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 254.416499][ T4327] RSP: 002b:00007f188b521030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.424963][ T4327] RAX: ffffffffffffffda RBX: 00007f188a9b6080 RCX: 00007f188a78d33c [ 254.432953][ T4327] RDX: 000000000000000f RSI: 00007f188b5210a0 RDI: 0000000000000004 [ 254.440962][ T4327] RBP: 00007f188b521090 R08: 0000000000000000 R09: 0000000000000000 [ 254.448961][ T4327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.456957][ T4327] R13: 0000000000000001 R14: 00007f188a9b6080 R15: 00007ffcaa5c1018 [ 254.465036][ T4327] [ 254.471969][ T4330] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1359'. [ 254.479023][ T4317] EXT4-fs (loop4): 1 truncate cleaned up [ 254.486624][ T4317] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 254.504340][ T4326] sch_tbf: burst 88 is lower than device bond_slave_1 mtu (1514) ! [ 254.520035][ T4326] loop5: detected capacity change from 0 to 1024 [ 254.526928][ T4326] EXT4-fs: Ignoring removed nobh option [ 254.532628][ T4326] EXT4-fs: Ignoring removed bh option [ 254.538365][ T1556] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 254.576901][ T4317] netlink: 'syz.4.1355': attribute type 27 has an invalid length. [ 254.604945][ T4334] loop3: detected capacity change from 0 to 512 [ 254.609118][ T4326] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.614009][ T4334] EXT4-fs: Ignoring removed i_version option [ 254.661969][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.669658][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.677594][ T4334] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.687247][ T4326] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 254.687439][ T4334] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 254.713002][ T4334] EXT4-fs (loop3): 1 truncate cleaned up [ 254.719230][ T4334] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 254.724706][ T28] audit: type=1400 audit(1750515784.554:1659): avc: denied { execute } for pid=4324 comm="syz.5.1359" path="/7/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 254.788059][ T1556] usb 1-1: Using ep0 maxpacket: 16 [ 254.817582][ T4348] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 254.980213][ T1556] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 255.049463][ T4330] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.1359: Allocating blocks 385-513 which overlap fs metadata [ 255.089258][ T1556] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.134003][ T1556] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.172705][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.244609][ T4336] device veth0_vlan left promiscuous mode [ 255.252394][ T4336] device veth0_vlan entered promiscuous mode [ 255.261538][ T1556] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.276606][ T4324] EXT4-fs (loop5): pa ffff888118052888: logic 16, phys. 129, len 24 [ 255.277855][ T1556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.284853][ T4324] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 255.307869][ T1556] usb 1-1: Product: syz [ 255.312092][ T1556] usb 1-1: Manufacturer: syz [ 255.316717][ T1556] usb 1-1: SerialNumber: syz [ 255.344309][ T4336] device veth1_macvtap left promiscuous mode [ 255.384190][ T4336] device veth1_macvtap entered promiscuous mode [ 255.397779][ T4336] syz.4.1355 (4336) used greatest stack depth: 20480 bytes left [ 255.427146][ T4192] EXT4-fs (loop5): unmounting filesystem. [ 255.433990][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.451228][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.459566][ T283] EXT4-fs (loop4): unmounting filesystem. [ 255.460760][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.470542][ T4352] loop1: detected capacity change from 0 to 512 [ 255.474371][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.480623][ T4352] ext4: Unknown parameter 'nouser_xattr' [ 255.486836][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.499962][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.515722][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.545649][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.552849][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.563577][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.573013][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 255.581624][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.590514][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 255.598980][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.607329][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.618545][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.627019][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.635635][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.644455][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.652850][ T1624] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.664604][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.680262][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.700413][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.815375][ T1556] usb 1-1: 0:2 : does not exist [ 255.831378][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.023509][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.032269][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.049519][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.059897][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.069657][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 256.078391][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.086722][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 256.095118][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 256.112930][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 256.131714][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.155965][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.070375][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.089327][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 258.120638][ T4369] overlayfs: unrecognized mount option "\" or missing value [ 258.129143][ T1433] usb 1-1: USB disconnect, device number 28 [ 258.161621][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 258.201856][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 258.262942][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 258.303892][ T426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.537443][ T4378] loop0: detected capacity change from 0 to 512 [ 258.931947][ T4378] EXT4-fs (loop0): 1 orphan inode deleted [ 258.937945][ T4378] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 258.949179][ T4378] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.125064][ T4386] loop5: detected capacity change from 0 to 512 [ 259.445737][ T4386] EXT4-fs (loop5): 1 orphan inode deleted [ 259.476507][ T4386] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 259.551948][ T4386] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.567331][ T10] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 259.587430][ T10] EXT4-fs error (device loop5): ext4_release_dquot:6825: comm kworker/u4:1: Failed to release dquot type 1 [ 259.970270][ T285] EXT4-fs (loop0): unmounting filesystem. [ 260.934148][ T4192] EXT4-fs (loop5): unmounting filesystem. [ 261.016319][ T4406] loop4: detected capacity change from 0 to 512 [ 261.028004][ T4406] EXT4-fs (loop4): Test dummy encryption mode enabled [ 261.103958][ T4406] EXT4-fs error (device loop4): __ext4_iget:5078: inode #11: block 1: comm syz.4.1373: invalid block [ 261.116164][ T4406] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1373: couldn't read orphan inode 11 (err -117) [ 261.129358][ T4406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 261.245987][ T4409] loop1: detected capacity change from 0 to 512 [ 261.571060][ T4409] EXT4-fs warning (device loop1): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 261.835596][ T4409] EXT4-fs (loop1): mount failed [ 261.927338][ T4416] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 262.293376][ T4403] syz.0.1372[4403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.293464][ T4403] syz.0.1372[4403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.354494][ T4403] loop0: detected capacity change from 0 to 256 [ 262.395969][ T283] EXT4-fs (loop4): unmounting filesystem. [ 262.569847][ T287] EXT4-fs (loop3): unmounting filesystem. [ 262.927228][ T4425] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1379'. [ 263.029334][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 264.184212][ T4437] loop3: detected capacity change from 0 to 1024 [ 264.233912][ T4442] loop5: detected capacity change from 0 to 512 [ 264.258327][ T4437] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 264.280228][ T4442] EXT4-fs (loop5): 1 orphan inode deleted [ 264.286103][ T4442] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 264.297945][ T10] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 264.314266][ T10] EXT4-fs error (device loop5): ext4_release_dquot:6825: comm kworker/u4:1: Failed to release dquot type 1 [ 264.385925][ T4442] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.688038][ T28] audit: type=1400 audit(1750515794.504:1660): avc: denied { mounton } for pid=4436 comm="syz.3.1383" path="/257/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.181816][ T1206] Bluetooth: hci0: command 0x1003 tx timeout [ 265.188684][ T1206] Bluetooth: hci1: command 0x1003 tx timeout [ 265.194777][ T1205] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 265.200868][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 265.209486][ T28] audit: type=1400 audit(1750515794.734:1661): avc: denied { read } for pid=4436 comm="syz.3.1383" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 265.211496][ T4192] EXT4-fs (loop5): unmounting filesystem. [ 265.385004][ T287] EXT4-fs (loop3): unmounting filesystem. [ 265.420735][ T28] audit: type=1400 audit(1750515795.214:1662): avc: denied { rmdir } for pid=287 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.628244][ T28] audit: type=1400 audit(1750515795.214:1663): avc: denied { rmdir } for pid=287 comm="syz-executor" name=".index" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 266.121164][ T28] audit: type=1400 audit(1750515795.214:1664): avc: denied { unlink } for pid=287 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 266.168791][ T28] audit: type=1400 audit(1750515795.694:1665): avc: denied { watch watch_reads } for pid=4461 comm="syz.3.1391" path="/258" dev="tmpfs" ino=1364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 266.221954][ T28] audit: type=1400 audit(1750515796.034:1666): avc: denied { read } for pid=4452 comm="syz.5.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 266.246058][ T4460] loop1: detected capacity change from 0 to 512 [ 266.316606][ T4469] tap0: tun_chr_ioctl cmd 1074025677 [ 266.322089][ T4469] tap0: linktype set to 773 [ 268.172064][ T4460] EXT4-fs: Ignoring removed i_version option [ 268.198254][ T4460] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.258281][ T4460] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 268.346829][ T4460] EXT4-fs (loop1): 1 truncate cleaned up [ 268.377780][ T4460] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 268.627058][ T4489] xt_socket: unknown flags 0xc [ 268.638459][ T4489] loop0: detected capacity change from 0 to 16 [ 268.647174][ T4489] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 269.598919][ T284] EXT4-fs (loop1): unmounting filesystem. [ 269.759516][ T4500] loop1: detected capacity change from 0 to 1024 [ 269.800039][ T4500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 269.842167][ T4505] loop3: detected capacity change from 0 to 512 [ 269.872077][ T4506] FAULT_INJECTION: forcing a failure. [ 269.872077][ T4506] name failslab, interval 1, probability 0, space 0, times 0 [ 269.884995][ T4506] CPU: 1 PID: 4506 Comm: syz.0.1398 Not tainted 6.1.138-syzkaller-00013-gf6c21bc9a693 #0 [ 269.894838][ T4506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.905003][ T4506] Call Trace: [ 269.908355][ T4506] [ 269.911308][ T4506] __dump_stack+0x21/0x24 [ 269.915686][ T4506] dump_stack_lvl+0xee/0x150 [ 269.920306][ T4506] ? __cfi_dump_stack_lvl+0x8/0x8 [ 269.925380][ T4506] ? release_firmware_map_entry+0x194/0x194 [ 269.931319][ T4506] ? finish_task_switch+0x16b/0x7b0 [ 269.936563][ T4506] dump_stack+0x15/0x24 [ 269.940768][ T4506] should_fail_ex+0x3d4/0x520 [ 269.945483][ T4506] __should_failslab+0xac/0xf0 [ 269.950269][ T4506] ? __se_sys_memfd_create+0xf2/0x3b0 [ 269.955674][ T4506] should_failslab+0x9/0x20 [ 269.960220][ T4506] __kmem_cache_alloc_node+0x3d/0x2c0 [ 269.965624][ T4506] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 269.971717][ T4506] ? __se_sys_memfd_create+0xf2/0x3b0 [ 269.977125][ T4506] __kmalloc+0xa1/0x1e0 [ 269.981313][ T4506] ? strnlen_user+0x10d/0x190 [ 269.986028][ T4506] __se_sys_memfd_create+0xf2/0x3b0 [ 269.991259][ T4506] __x64_sys_memfd_create+0x5b/0x70 [ 269.996489][ T4506] x64_sys_call+0x235/0x9a0 [ 270.001020][ T4506] do_syscall_64+0x4c/0xa0 [ 270.005477][ T4506] ? clear_bhb_loop+0x15/0x70 [ 270.010610][ T4506] ? clear_bhb_loop+0x15/0x70 [ 270.015313][ T4506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.021324][ T4506] RIP: 0033:0x7f4020d8e929 [ 270.025763][ T4506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.045866][ T4506] RSP: 002b:00007f4021c5fe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 270.054307][ T4506] RAX: ffffffffffffffda RBX: 00000000000002b8 RCX: 00007f4020d8e929 [ 270.062308][ T4506] RDX: 00007f4021c5fef0 RSI: 0000000000000000 RDI: 00007f4020e114cc [ 270.070313][ T4506] RBP: 0000200000000640 R08: 00007f4021c5fbb7 R09: 00007f4021c5fe40 [ 270.078398][ T4506] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 270.086392][ T4506] R13: 00007f4021c5fef0 R14: 00007f4021c5feb0 R15: 0000200000000440 [ 270.094394][ T4506] [ 271.037664][ T4505] EXT4-fs warning (device loop3): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 271.057467][ T284] EXT4-fs (loop1): unmounting filesystem. [ 271.068547][ T4505] EXT4-fs (loop3): mount failed [ 271.457962][ T4347] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 271.696968][ T4526] xt_socket: unknown flags 0xc [ 271.704831][ T4341] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 271.848982][ T4347] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.872665][ T4347] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.899341][ T4347] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 271.929697][ T4341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.947891][ T4347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.955989][ T4347] usb 2-1: Product: syz [ 272.185483][ T4341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.206523][ T4347] usb 2-1: Manufacturer: syz [ 272.248520][ T4347] usb 2-1: SerialNumber: syz [ 272.287186][ T4341] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 272.357851][ T4341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.371491][ T4341] usb 1-1: config 0 descriptor?? [ 272.464294][ T4532] loop5: detected capacity change from 0 to 512 [ 272.481333][ T4532] EXT4-fs: Ignoring removed i_version option [ 272.489711][ T4532] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.496931][ T4532] EXT4-fs: dax option not supported [ 272.552756][ T28] audit: type=1400 audit(1750515802.384:1667): avc: denied { write } for pid=4520 comm="syz.1.1405" path="socket:[29506]" dev="sockfs" ino=29506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.579975][ T4524] overlayfs: unrecognized mount option "\ö" or missing value [ 272.668475][ T4341] usbhid 1-1:0.0: can't add hid device: -71 [ 272.672744][ T4521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.674532][ T4341] usbhid: probe of 1-1:0.0 failed with error -71 [ 272.694335][ T4521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.702029][ T4341] usb 1-1: USB disconnect, device number 29 [ 272.773015][ T4347] usb 2-1: 0:2 : does not exist [ 272.787968][ T1433] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 272.788919][ T4347] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 272.814757][ T4347] usb 2-1: USB disconnect, device number 13 [ 272.889149][ T4536] xt_socket: unknown flags 0xc [ 272.899531][ T4536] loop3: detected capacity change from 0 to 16 [ 272.908419][ T4536] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 273.802185][ T4546] loop1: detected capacity change from 0 to 512 [ 273.882980][ T4548] syz.0.1412[4548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.883071][ T4548] syz.0.1412[4548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.899865][ T4548] loop0: detected capacity change from 0 to 512 [ 273.921020][ T4548] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 274.060576][ T4548] EXT4-fs (loop0): 1 truncate cleaned up [ 274.066369][ T4548] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 274.351692][ T4546] EXT4-fs warning (device loop1): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 274.561047][ T4546] EXT4-fs (loop1): mount failed [ 274.910047][ T285] EXT4-fs (loop0): unmounting filesystem. [ 276.523862][ T28] audit: type=1400 audit(1750515806.354:1668): avc: denied { getopt } for pid=4566 comm="syz.1.1418" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.546911][ T4568] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1416'. [ 276.588036][ T1433] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 276.599188][ T1433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.607313][ T1433] usb 6-1: Product: syz [ 276.646575][ T1433] usb 6-1: can't set config #1, error -71 [ 276.654947][ T1433] usb 6-1: USB disconnect, device number 2 [ 277.716845][ T4591] syz.3.1424[4591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.718434][ T4591] syz.3.1424[4591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.853175][ T4617] loop3: detected capacity change from 0 to 40427 [ 280.942799][ T4617] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 281.068734][ T4617] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 281.127460][ T4617] F2FS-fs (loop3): invalid crc value [ 281.318052][ T4617] F2FS-fs (loop3): Found nat_bits in checkpoint [ 281.357900][ T4638] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1437'. [ 281.365693][ T4617] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 281.374258][ T4617] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 281.394676][ T4306] Bluetooth: hci0: Frame reassembly failed (-84) [ 281.408580][ T2092] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 281.454125][ T4635] xt_socket: unknown flags 0xc [ 281.594209][ T4645] device syzkaller0 entered promiscuous mode [ 281.730759][ T28] audit: type=1400 audit(1750515811.564:1669): avc: denied { append } for pid=4646 comm="syz.5.1441" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 281.958494][ T4654] xt_socket: unknown flags 0xc [ 282.579289][ T4665] xt_socket: unknown flags 0xc [ 283.874094][ T2092] Bluetooth: hci0: command 0x1003 tx timeout [ 283.882975][ T1205] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 285.793571][ T4684] loop3: detected capacity change from 0 to 512 [ 286.368647][ T4684] EXT4-fs (loop3): 1 orphan inode deleted [ 286.379181][ T4684] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 286.389226][ T4306] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 286.425314][ T4306] EXT4-fs error (device loop3): ext4_release_dquot:6825: comm kworker/u4:9: Failed to release dquot type 1 [ 286.449393][ T4684] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.273473][ T287] EXT4-fs (loop3): unmounting filesystem. [ 287.656123][ T4702] FAULT_INJECTION: forcing a failure. [ 287.656123][ T4702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.669414][ T4702] CPU: 1 PID: 4702 Comm: syz.3.1454 Not tainted 6.1.138-syzkaller-00013-gf6c21bc9a693 #0 [ 287.679278][ T4702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.689597][ T4702] Call Trace: [ 287.692910][ T4702] [ 287.695899][ T4702] __dump_stack+0x21/0x24 [ 287.700275][ T4702] dump_stack_lvl+0xee/0x150 [ 287.704908][ T4702] ? __cfi_dump_stack_lvl+0x8/0x8 [ 287.709966][ T4702] dump_stack+0x15/0x24 [ 287.714170][ T4702] should_fail_ex+0x3d4/0x520 [ 287.718890][ T4702] should_fail+0xb/0x10 [ 287.723073][ T4702] should_fail_usercopy+0x1a/0x20 [ 287.728119][ T4702] _copy_from_user+0x1e/0xc0 [ 287.732732][ T4702] iovec_from_user+0x1aa/0x2e0 [ 287.737559][ T4702] __import_iovec+0x71/0x470 [ 287.742176][ T4702] import_iovec+0x7c/0xb0 [ 287.746612][ T4702] do_readv+0x1fe/0x3e0 [ 287.751314][ T4702] ? generic_file_rw_checks+0x2a0/0x2a0 [ 287.756881][ T4702] ? __kasan_check_write+0x14/0x20 [ 287.762010][ T4702] ? fput+0x154/0x1a0 [ 287.766015][ T4702] ? debug_smp_processor_id+0x17/0x20 [ 287.771401][ T4702] __x64_sys_readv+0x7d/0x90 [ 287.776009][ T4702] x64_sys_call+0x3bd/0x9a0 [ 287.780531][ T4702] do_syscall_64+0x4c/0xa0 [ 287.784970][ T4702] ? clear_bhb_loop+0x15/0x70 [ 287.789864][ T4702] ? clear_bhb_loop+0x15/0x70 [ 287.794558][ T4702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.800465][ T4702] RIP: 0033:0x7f2a6b38e929 [ 287.804900][ T4702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.824514][ T4702] RSP: 002b:00007f2a6c1c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 287.832946][ T4702] RAX: ffffffffffffffda RBX: 00007f2a6b5b5fa0 RCX: 00007f2a6b38e929 [ 287.840931][ T4702] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 287.848911][ T4702] RBP: 00007f2a6c1c2090 R08: 0000000000000000 R09: 0000000000000000 [ 287.856901][ T4702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.864883][ T4702] R13: 0000000000000000 R14: 00007f2a6b5b5fa0 R15: 00007fffd0c62408 [ 287.872871][ T4702] [ 287.942525][ T4705] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1455'. [ 287.952169][ T4705] device gretap0 entered promiscuous mode [ 287.962001][ T28] audit: type=1400 audit(1750515817.794:1670): avc: denied { accept } for pid=4706 comm="syz.4.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 287.962918][ T4705] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1455'. [ 287.990644][ T4705] 0ªX¹¦D: renamed from gretap0 [ 287.991707][ T4705] device 30ªX¹¦D left promiscuous mode [ 288.002032][ T4705] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 288.049244][ T4705] serio: Serial port ptm0 [ 288.207050][ T4717] xt_socket: unknown flags 0xc [ 288.216178][ T4717] loop3: detected capacity change from 0 to 16 [ 288.224654][ T4717] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 288.307119][ T1755] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 289.290708][ T4738] xt_socket: unknown flags 0xc [ 289.351428][ T4740] xt_socket: unknown flags 0xc [ 390.377762][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 390.384793][ C0] (detected by 0, t=10002 jiffies, g=22461, q=213 ncpus=2) [ 390.392122][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10000 (4294976247-4294966247), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 390.405528][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g22461 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 390.416759][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 390.426759][ C0] rcu: RCU grace-period kthread stack dump: [ 390.432666][ C0] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 390.443480][ C0] Call Trace: [ 390.446784][ C0] [ 390.449746][ C0] __schedule+0xb87/0x14e0 [ 390.454212][ C0] ? release_firmware_map_entry+0x194/0x194 [ 390.460147][ C0] ? __mod_timer+0x7ae/0xb30 [ 390.464776][ C0] schedule+0xbd/0x170 [ 390.468892][ C0] schedule_timeout+0x12c/0x2e0 [ 390.473777][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 390.479189][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 390.484691][ C0] ? __cfi_process_timeout+0x10/0x10 [ 390.490014][ C0] ? prepare_to_swait_event+0x308/0x320 [ 390.495603][ C0] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 390.500497][ C0] ? __cfi_dyntick_save_progress_counter+0x10/0x10 [ 390.507043][ C0] ? rcu_gp_init+0xf10/0xf10 [ 390.511671][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 390.517522][ C0] ? finish_swait+0x17d/0x1b0 [ 390.522237][ C0] rcu_gp_kthread+0x95/0x370 [ 390.526872][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 390.532125][ C0] ? set_cpus_allowed_ptr+0x82/0xc0 [ 390.537360][ C0] ? __kasan_check_read+0x11/0x20 [ 390.542422][ C0] ? __kthread_parkme+0x142/0x180 [ 390.547484][ C0] kthread+0x281/0x320 [ 390.551601][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 390.556848][ C0] ? __cfi_kthread+0x10/0x10 [ 390.561468][ C0] ret_from_fork+0x1f/0x30 [ 390.565928][ C0] [ 390.568971][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 390.575416][ C0] Sending NMI from CPU 0 to CPUs 1: [ 390.580656][ C1] NMI backtrace for cpu 1 [ 390.580670][ C1] CPU: 1 PID: 4746 Comm: syz.4.1468 Not tainted 6.1.138-syzkaller-00013-gf6c21bc9a693 #0 [ 390.580689][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.580700][ C1] RIP: 0010:preempt_count_sub+0x66/0x170 [ 390.580724][ C1] Code: ff ff ff 7f 39 cf 7f 27 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 55 65 8b 05 4b dd b6 7e f7 df 65 01 3d 42 dd b6 7e <5b> 41 5e 5d c3 e8 80 b0 14 01 85 c0 74 f2 48 c7 c0 a8 4c 72 87 48 [ 390.580740][ C1] RSP: 0018:ffffc900001b0eb8 EFLAGS: 00000093 [ 390.580756][ C1] RAX: 0000000080000102 RBX: dffffc0000000000 RCX: 0000000000000100 [ 390.580770][ C1] RDX: dffffc0000000000 RSI: 0000000000000802 RDI: 00000000ffffffff [ 390.580782][ C1] RBP: ffffc900001b0ec8 R08: 0000000000000004 R09: 0000000000000003 [ 390.580794][ C1] R10: fffff520000361c8 R11: 1ffff920000361c8 R12: ffff8881003b5f50 [ 390.580808][ C1] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000000 [ 390.580818][ C1] FS: 0000555582c4b500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 390.580835][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.580847][ C1] CR2: 00007ff02aea3f98 CR3: 0000000107837000 CR4: 00000000003506a0 [ 390.580863][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.580873][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.580885][ C1] Call Trace: [ 390.580890][ C1] [ 390.580899][ C1] try_to_wake_up+0x613/0x1220 [ 390.580923][ C1] wake_up_process+0x10/0x20 [ 390.580940][ C1] handle_softirqs+0x539/0x600 [ 390.580961][ C1] __do_softirq+0xb/0xd [ 390.580981][ C1] do_softirq+0xc6/0x120 [ 390.580997][ C1] [ 390.581003][ C1] [ 390.581008][ C1] ? __cfi_do_softirq+0x10/0x10 [ 390.581027][ C1] __local_bh_enable_ip+0x75/0x80 [ 390.581045][ C1] fpu__restore_sig+0x848/0xf40 [ 390.581067][ C1] ? fpu__restore_sig+0x38d/0xf40 [ 390.581089][ C1] ? __cfi_fpu__restore_sig+0x10/0x10 [ 390.581112][ C1] ? __kasan_check_write+0x14/0x20 [ 390.581137][ C1] ? recalc_sigpending+0x180/0x1c0 [ 390.581159][ C1] ? __kasan_check_write+0x14/0x20 [ 390.581184][ C1] __ia32_sys_rt_sigreturn+0x5d0/0x6c0 [ 390.581208][ C1] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 390.581236][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 390.581259][ C1] x64_sys_call+0x832/0x9a0 [ 390.581279][ C1] do_syscall_64+0x4c/0xa0 [ 390.581304][ C1] ? clear_bhb_loop+0x15/0x70 [ 390.581323][ C1] ? clear_bhb_loop+0x15/0x70 [ 390.581342][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.581360][ C1] RIP: 0033:0x7ff029f8e929 [ 390.581374][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.581388][ C1] RSP: 002b:00007ffdeedbd688 EFLAGS: 00000246 [ 390.581422][ C1] RAX: fffffffffffffffc RBX: 0000000000046e2f RCX: 00007ff029f8e929 [ 390.581435][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff02a1b608c [ 390.581446][ C1] RBP: 0000000000000032 R08: 00149998225d8708 R09: 00000013eedbd97f [ 390.581458][ C1] R10: 00007ffdeedbd780 R11: 0000000000000246 R12: 00007ff02a1b608c [ 390.581470][ C1] R13: 00007ffdeedbd780 R14: 0000000000046e61 R15: 00007ffdeedbd7a0 [ 390.581487][ C1] [ 572.227691][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 281s! [ 572.236757][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 281s! [ 572.245699][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 277s! [ 572.255093][ C0] Showing busy workqueues and worker pools: [ 572.261038][ C0] workqueue events: flags=0x0 [ 572.266100][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 572.266153][ C0] pending: rht_deferred_worker, psi_avgs_work, kfree_rcu_monitor, rht_deferred_worker [ 572.266243][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 572.266285][ C0] pending: vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 572.266387][ C0] workqueue events_long: flags=0x0 [ 572.311970][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 572.312030][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup [ 572.312159][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 572.312203][ C0] pending: br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup [ 572.312315][ C0] workqueue events_unbound: flags=0x2 [ 572.362673][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 572.362727][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 572.362783][ C0] workqueue events_power_efficient: flags=0x80 [ 572.387697][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 572.387755][ C0] pending: neigh_managed_work, neigh_periodic_work, gc_worker [ 572.387828][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 572.387870][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, check_lifetime [ 572.387951][ C0] workqueue rcu_gp: flags=0x8 [ 572.432491][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.432565][ C0] pending: srcu_invoke_callbacks [ 572.432604][ C0] workqueue mm_percpu_wq: flags=0x8 [ 572.453613][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.453674][ C0] pending: vmstat_update [ 572.453711][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.453752][ C0] pending: vmstat_update [ 572.453786][ C0] workqueue writeback: flags=0x4a [ 572.483735][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.483785][ C0] pending: wb_workfn, wb_workfn [ 572.483827][ C0] workqueue kblockd: flags=0x18 [ 572.501713][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 572.501769][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 572.501823][ C0] workqueue dm_bufio_cache: flags=0x8 [ 572.523990][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.524056][ C0] pending: work_fn [ 572.524097][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 572.544525][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 572.544590][ C0] pending: addrconf_verify_work [ 572.544630][ C0] inactive: addrconf_verify_work [ 572.544672][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 572.544715][ C0] pending: addrconf_verify_work [ 572.544750][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 572.544834][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.595594][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.595655][ C0] pending: wg_packet_handshake_send_worker [ 572.595702][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 572.616389][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.616447][ C0] pending: wg_packet_encrypt_worker [ 572.616494][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.635029][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.635078][ C0] pending: wg_packet_handshake_send_worker [ 572.635122][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 572.653838][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.653902][ C0] pending: wg_packet_encrypt_worker [ 572.653949][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.672718][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.672786][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.672870][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.694333][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.694390][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.694469][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.716403][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.716458][ C0] pending: wg_packet_handshake_send_worker [ 572.716529][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.735305][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.735357][ C0] pending: wg_packet_handshake_send_worker [ 572.735404][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 572.754220][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.754277][ C0] pending: wg_packet_encrypt_worker [ 572.754323][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.754365][ C0] pending: wg_packet_encrypt_worker [ 572.754405][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.786842][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.786895][ C0] pending: wg_packet_handshake_send_worker [ 572.786940][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 572.805950][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.806007][ C0] pending: wg_packet_encrypt_worker [ 572.806051][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.806095][ C0] pending: wg_packet_encrypt_worker [ 572.806134][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.837751][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.837806][ C0] pending: wg_packet_handshake_send_worker [ 572.837851][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 572.857631][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.857695][ C0] pending: wg_packet_encrypt_worker [ 572.871658][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.871718][ C0] pending: wg_packet_encrypt_worker [ 572.871773][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 572.891619][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.891677][ C0] pending: wg_packet_encrypt_worker [ 572.891723][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.891765][ C0] pending: wg_packet_encrypt_worker [ 572.891804][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.923969][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.924021][ C0] pending: wg_packet_handshake_send_worker [ 572.924064][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 572.942965][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.943019][ C0] pending: wg_packet_encrypt_worker [ 572.943063][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.943113][ C0] pending: wg_packet_encrypt_worker [ 572.943152][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.975043][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.975095][ C0] pending: wg_packet_handshake_send_worker [ 572.975139][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 572.994155][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.994212][ C0] pending: wg_packet_encrypt_worker [ 572.994262][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.994305][ C0] pending: wg_packet_encrypt_worker [ 572.994346][ C0] workqueue wg-kex-wg0: flags=0x6 [ 573.027185][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 573.027245][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 573.027320][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 573.049450][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.049502][ C0] pending: wg_packet_encrypt_worker [ 573.049553][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.049595][ C0] pending: wg_packet_encrypt_worker [ 573.049634][ C0] workqueue wg-kex-wg1: flags=0x6 [ 573.084241][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 573.084299][ C0] pending: wg_packet_handshake_send_worker [ 573.084344][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 573.105228][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.105288][ C0] in-flight: 1433:wg_packet_decrypt_worker [ 573.105331][ C0] workqueue wg-kex-wg2: flags=0x6 [ 573.124453][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 573.124506][ C0] pending: wg_packet_handshake_send_worker [ 573.124551][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 573.143829][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 573.143893][ C0] pending: wg_packet_encrypt_worker [ 573.143943][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=282s workers=5 idle: 1120 380 4034 303