last executing test programs: 3m40.35125483s ago: executing program 3 (id=519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3m39.48229215s ago: executing program 3 (id=522): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) 3m38.090032638s ago: executing program 3 (id=526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_delrule={0x30, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x90, 0x0, 0x4, 0xff, 0x0, 0x0, 0x7, 0x10000}, [@FRA_DST={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000) 3m37.614510321s ago: executing program 3 (id=528): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) 3m36.909876298s ago: executing program 3 (id=532): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) 3m36.39351778s ago: executing program 3 (id=535): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xa, 0x1, {0x10}}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x74}}, 0x0) 3m34.575892912s ago: executing program 32 (id=535): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xa, 0x1, {0x10}}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x74}}, 0x0) 3m15.012200769s ago: executing program 5 (id=537): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) io_setup(0x9bb1, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x4}]) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r5, &(0x7f0000000b80)=[{&(0x7f00000000c0)="f10dc44f7d20988057f85ab4dd61b58675fb03d944b014fb9cb34ce9a3428ca7df271b1179", 0x25}, {&(0x7f0000000640)="f14e4792586af7f2380c7d51d257826607fd39cc2d3571ac7e6b0f4edf17ed143170620ff63eaff5729afa9b52993626d76acc7c45ed66acb1ef8ba1cf478350334e2e3fac57df457868f7870695a9e2d1b5cd7382abb301e7b41538c733f36483a2418d462b88f7f6f661eeabc2823f86d0e5fe407f4504d78ac48229e940c2d788b3be1cb96e37cddda1244f4361dbf77e0322bfc6ef17abb172a80642b739fc38a4ba24cbf6fc81", 0xa9}, {&(0x7f0000000200)="c6d90d4117fc24396ad8457eeefe95e5c67a103dcd850a086c484bfb2d7c31d81a5cc1ebeb7150aa3f34f53ec3879a2ea5b8efcd9bbd102fbf8536da9e0b81bf7dd3e4c938677040c8cddf", 0x4b}, {&(0x7f0000000700)="b87703fcf01a3e7bb667b404b97c7cc284a90404a5a96ff4559329d80d037b08d8810e457b955102a0e93e966b04be1aafc2067dbc6c99566ce636740265f60f3467c311c5bab39f814b6b46458e362728f8f0b6156075616f87842f97f9061c2e676278f96044c4db7785a62f601e32e57baed01ea1e7b49c6a395169e8bd72254557dd7959f8627e2274301d346beb9887e01583a5ab92ef23b6fb80be5edc6324845b1bc2443ffc0ab163daaceb89", 0xb0}, {&(0x7f0000000880)="1dfda5b80cb90832bf7cb077130ab731fe0fa5969adc03b465c883b86969debbfc1deaa4273a7d1e116dbd7c04c0afba5ca62c61e1fa758cd705e53263d421f77ac5c2366628a6ad455b841bc8afc9ce1d48e3b9667be8cfe5", 0x59}], 0x5) 3m14.197448959s ago: executing program 5 (id=581): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigpending(0x0, 0x0) 3m13.425541115s ago: executing program 5 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) syz_open_dev$mouse(&(0x7f0000000100), 0x5, 0x100400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, 0x0, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, 0x0) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa41, 0x23) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x37, 0x30, 0x61, 0x39, 0x34, 0x39, 0x32, 0x35, 0x63, 0x36, 0x37, 0x62, 0x63, 0x36, 0x32, 0x63]}, &(0x7f0000000740)={0x0, "8587188aef0a5cfeca26d3eceb0e3cdb04a66a7ca5d955836da2ea3ad1ddeeda560e21812cc11c3859e69b9de20f73892abe27aea3b2a1e086f07966c840cdd4", 0x2f}, 0x48, 0xfffffffffffffffd) 2m58.103120765s ago: executing program 33 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) syz_open_dev$mouse(&(0x7f0000000100), 0x5, 0x100400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, 0x0, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, 0x0) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa41, 0x23) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x37, 0x30, 0x61, 0x39, 0x34, 0x39, 0x32, 0x35, 0x63, 0x36, 0x37, 0x62, 0x63, 0x36, 0x32, 0x63]}, &(0x7f0000000740)={0x0, "8587188aef0a5cfeca26d3eceb0e3cdb04a66a7ca5d955836da2ea3ad1ddeeda560e21812cc11c3859e69b9de20f73892abe27aea3b2a1e086f07966c840cdd4", 0x2f}, 0x48, 0xfffffffffffffffd) 2m12.702190904s ago: executing program 4 (id=711): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000c2f4cac6000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0/file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.733169283s ago: executing program 4 (id=713): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="19002dbd7000fcffffff1b"], 0x2c}}, 0x0) 2m10.830165771s ago: executing program 4 (id=715): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xffffff01}) 2m9.969893194s ago: executing program 4 (id=719): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES16], 0x5, 0x242, &(0x7f0000000800)="$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") statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000780)=""/73) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000040)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1m59.699208495s ago: executing program 4 (id=745): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061106b000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 1m58.707436729s ago: executing program 4 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r3, &(0x7f00000053c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) 1m55.013133037s ago: executing program 6 (id=759): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1m54.192942075s ago: executing program 6 (id=762): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m53.613188119s ago: executing program 6 (id=766): r0 = syz_io_uring_setup(0x952, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1m53.129223031s ago: executing program 6 (id=767): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES16, @ANYBLOB="00000000d3ec66ecc053c543da2e5f"], 0x48) 1m52.472548139s ago: executing program 6 (id=768): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500030000", 0x39}], 0x1) 1m51.837818019s ago: executing program 6 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") syz_open_procfs(r0, 0x0) 1m49.282122176s ago: executing program 0 (id=774): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1m47.953444653s ago: executing program 0 (id=776): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000480), 0x4) 1m47.430270537s ago: executing program 0 (id=777): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m46.570534463s ago: executing program 0 (id=780): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 1m46.017890276s ago: executing program 0 (id=782): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1m43.232349691s ago: executing program 34 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r3, &(0x7f00000053c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) 1m37.490775589s ago: executing program 0 (id=795): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m36.185422028s ago: executing program 35 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") syz_open_procfs(r0, 0x0) 1m21.445776004s ago: executing program 36 (id=795): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11.871284033s ago: executing program 2 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) sendfile(r5, r5, 0x0, 0x9c) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @local, @local}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 8.438829398s ago: executing program 9 (id=937): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r2}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) 7.968626738s ago: executing program 2 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) 7.34177425s ago: executing program 9 (id=940): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.7477092s ago: executing program 1 (id=945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x30) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x581, 0x400, 0x0, {0x0, 0x0, 0x0, r2, 0x48005}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 4.94974177s ago: executing program 1 (id=947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syslog(0x2, &(0x7f0000000040)=""/19, 0xe2) 4.536685659s ago: executing program 8 (id=948): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 4.198386587s ago: executing program 9 (id=949): ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@oldalloc}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003}) 3.70565763s ago: executing program 7 (id=950): syz_clone3(&(0x7f0000006d40)={0x105a000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f0000006d00)=[0x0], 0x1}, 0x58) 3.705369613s ago: executing program 8 (id=951): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) fremovexattr(r1, &(0x7f0000000180)=@known='security.apparmor\x00') 3.57068914s ago: executing program 1 (id=952): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.991340625s ago: executing program 9 (id=953): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40047211, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000001000008500000095000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000001e40)=""/4093}, 0x21) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.8893859s ago: executing program 2 (id=954): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x24, 0x12, 0x1, 0x70bd23, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x1e}]}, 0x24}], 0x1}, 0x0) 2.889073503s ago: executing program 7 (id=955): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) 2.794165755s ago: executing program 8 (id=956): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000004840)) 2.186957097s ago: executing program 7 (id=957): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 2.090190037s ago: executing program 8 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000, 0x27b}, {}, 0x10, 0x200}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x8000, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x3507, 0x0, 0x0, 0x0, 0x0, 0xbeaf}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 1.981121747s ago: executing program 2 (id=959): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000380)={'filter\x00', 0x4, "200a6885"}, &(0x7f00000000c0)=0x28) 1.935928361s ago: executing program 1 (id=960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000805}, 0x0) 1.489305161s ago: executing program 7 (id=961): bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback, 0xf, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.458705262s ago: executing program 8 (id=962): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file1\x00', r0, 0x0) 1.332476344s ago: executing program 9 (id=963): ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@oldalloc}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003}) 1.085680157s ago: executing program 2 (id=964): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000009380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000008640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) 1.078608188s ago: executing program 1 (id=965): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 872.88381ms ago: executing program 7 (id=966): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) shutdown(r4, 0x1) 331.967332ms ago: executing program 1 (id=967): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 314.984001ms ago: executing program 9 (id=968): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x18) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 288.607127ms ago: executing program 8 (id=969): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000e80)=""/102400, 0x19000) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x0, 0x7f, 0x3, 0xffffffffffffffff, 0x6}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 194.131589ms ago: executing program 2 (id=970): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, 0x0, 0x0, 0x4c8c0, &(0x7f0000000340), 0x10) 0s ago: executing program 7 (id=971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0xa) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000240)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) kernel console output (not intermixed with test programs): 327.436786][ T30] audit: type=1326 audit(1763220438.480:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 327.472332][ T30] audit: type=1326 audit(1763220438.490:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 327.494801][ T30] audit: type=1326 audit(1763220438.490:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 327.698151][ T30] audit: type=1326 audit(1763220438.580:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 327.720739][ T30] audit: type=1326 audit(1763220438.610:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 327.743372][ T30] audit: type=1326 audit(1763220438.610:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 327.770665][ T30] audit: type=1326 audit(1763220438.610:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 328.954480][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 329.135543][ T6773] loop0: detected capacity change from 0 to 512 [ 329.177421][ T6773] EXT4-fs: Ignoring removed mblk_io_submit option [ 329.188751][ T6773] EXT4-fs: inline encryption not supported [ 329.196375][ T6773] EXT4-fs: Ignoring removed mblk_io_submit option [ 329.265789][ T6773] EXT4-fs (loop0): Test dummy encryption mode enabled [ 329.272798][ T6773] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 329.432976][ T6773] EXT4-fs (loop0): 1 truncate cleaned up [ 329.441129][ T6773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.944436][ T5873] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 330.154384][ T30] audit: type=1326 audit(1763220441.200:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 330.176981][ T30] audit: type=1326 audit(1763220441.200:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=225 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 330.199833][ T30] audit: type=1326 audit(1763220441.200:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 330.254425][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.265747][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.275964][ T5873] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 330.285384][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.397069][ T5873] usb 1-1: config 0 descriptor?? [ 331.250708][ T5873] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -71 [ 331.297107][ T5873] usb 1-1: USB disconnect, device number 8 [ 332.109697][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.729339][ T6789] overlayfs: failed to resolve './file0': -2 [ 333.327357][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 333.327437][ T30] audit: type=1326 audit(1763220444.370:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 333.356534][ T30] audit: type=1326 audit(1763220444.370:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 333.382078][ T30] audit: type=1326 audit(1763220444.370:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 333.405632][ T30] audit: type=1326 audit(1763220444.370:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 333.428057][ T30] audit: type=1326 audit(1763220444.380:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=139 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 333.450302][ T30] audit: type=1326 audit(1763220444.380:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 333.472806][ T30] audit: type=1326 audit(1763220444.380:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 333.498774][ T30] audit: type=1326 audit(1763220444.390:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 333.523090][ T30] audit: type=1326 audit(1763220444.470:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 335.487681][ T6811] loop0: detected capacity change from 0 to 512 [ 335.538452][ T6811] EXT4-fs: Ignoring removed mblk_io_submit option [ 335.545368][ T6811] EXT4-fs: inline encryption not supported [ 335.551625][ T6811] EXT4-fs: Ignoring removed mblk_io_submit option [ 335.612527][ T6811] EXT4-fs (loop0): Test dummy encryption mode enabled [ 335.619915][ T6811] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 335.728200][ T6811] EXT4-fs (loop0): 1 truncate cleaned up [ 335.742814][ T6811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.234522][ T5933] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 336.425437][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.437130][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.447364][ T5933] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 336.460119][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.537433][ T5933] usb 1-1: config 0 descriptor?? [ 337.387494][ T5933] hid-led 0003:27B8:01ED.000B: probe with driver hid-led failed with error -71 [ 337.767835][ T5933] usb 1-1: USB disconnect, device number 9 [ 338.365980][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.313529][ T6840] loop1: detected capacity change from 0 to 16 [ 340.335557][ T6840] erofs (device loop1): mounted with root inode @ nid 36. [ 340.910336][ T6845] capability: warning: `syz.0.290' uses deprecated v2 capabilities in a way that may be insecure [ 341.724558][ T6853] loop0: detected capacity change from 0 to 512 [ 341.755971][ T6853] EXT4-fs: Ignoring removed mblk_io_submit option [ 341.762674][ T6853] EXT4-fs: inline encryption not supported [ 341.769515][ T6853] EXT4-fs: Ignoring removed mblk_io_submit option [ 341.831717][ T6853] EXT4-fs (loop0): Test dummy encryption mode enabled [ 341.839058][ T6853] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 341.936151][ T6853] EXT4-fs (loop0): 1 truncate cleaned up [ 341.944997][ T6853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.435453][ T6859] FAT-fs (loop5): unable to read boot sector [ 342.464589][ T5873] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 342.684916][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.696874][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.712978][ T5873] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 342.724381][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.827191][ T5873] usb 1-1: config 0 descriptor?? [ 343.695270][ T5873] hid-led 0003:27B8:01ED.000C: probe with driver hid-led failed with error -71 [ 343.760184][ T5873] usb 1-1: USB disconnect, device number 10 [ 344.531372][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.960824][ T6888] loop3: detected capacity change from 0 to 4096 [ 347.030927][ T6888] EXT4-fs (loop3): Test dummy encryption mode enabled [ 347.191548][ T6888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.596165][ T6888] fscrypt (loop3): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 348.119899][ T5802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.545700][ T6904] loop1: detected capacity change from 0 to 512 [ 348.585836][ T6904] EXT4-fs: Ignoring removed mblk_io_submit option [ 348.592562][ T6904] EXT4-fs: inline encryption not supported [ 348.599453][ T6904] EXT4-fs: Ignoring removed mblk_io_submit option [ 348.694842][ T6904] EXT4-fs (loop1): Test dummy encryption mode enabled [ 348.701875][ T6904] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 348.875013][ T6904] EXT4-fs (loop1): 1 truncate cleaned up [ 348.882974][ T6904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.324464][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 349.574719][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.587122][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.597641][ T5873] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 349.607117][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.707617][ T5873] usb 2-1: config 0 descriptor?? [ 350.109407][ T6920] netlink: 'syz.4.317': attribute type 4 has an invalid length. [ 350.603116][ T5873] hid-led 0003:27B8:01ED.000D: probe with driver hid-led failed with error -71 [ 350.639433][ T5873] usb 2-1: USB disconnect, device number 3 [ 352.187567][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.246116][ T30] audit: type=1326 audit(1763220463.280:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 352.268534][ T30] audit: type=1326 audit(1763220463.280:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 352.291077][ T30] audit: type=1326 audit(1763220463.290:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=108 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 352.313733][ T30] audit: type=1326 audit(1763220463.290:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.4.323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 352.554187][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.560855][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 358.316860][ T6962] loop2: detected capacity change from 0 to 512 [ 358.346827][ T6962] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.353545][ T6962] EXT4-fs: inline encryption not supported [ 358.360560][ T6962] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.419126][ T6962] EXT4-fs (loop2): Test dummy encryption mode enabled [ 358.427193][ T6962] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 358.631132][ T6962] EXT4-fs (loop2): 1 truncate cleaned up [ 358.640312][ T6962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.086588][ T5892] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 359.143230][ T6970] loop0: detected capacity change from 0 to 256 [ 359.302363][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.314028][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.324283][ T5892] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 359.333590][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.432955][ T5892] usb 3-1: config 0 descriptor?? [ 360.140588][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 360.269780][ T5892] hid-led 0003:27B8:01ED.000E: probe with driver hid-led failed with error -71 [ 360.355618][ T5892] usb 3-1: USB disconnect, device number 6 [ 361.327526][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.597216][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 361.677283][ T6982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.582552][ T6996] overlayfs: failed to clone upperpath [ 363.954993][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 364.034557][ T7006] loop2: detected capacity change from 0 to 2048 [ 364.168788][ T7006] Alternate GPT is invalid, using primary GPT. [ 364.176727][ T7006] loop2: p2 p3 p7 [ 365.246374][ T7011] loop2: detected capacity change from 0 to 512 [ 365.270087][ T7011] EXT4-fs: Ignoring removed mblk_io_submit option [ 365.277942][ T7011] EXT4-fs: inline encryption not supported [ 365.284521][ T7011] EXT4-fs: Ignoring removed mblk_io_submit option [ 365.325203][ T7011] EXT4-fs (loop2): Test dummy encryption mode enabled [ 365.336701][ T7011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 365.538711][ T7011] EXT4-fs (loop2): 1 truncate cleaned up [ 365.547100][ T7011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.706978][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 365.725416][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 366.034325][ T1667] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 366.232988][ T1667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.244739][ T1667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.260206][ T1667] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 366.261287][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 366.271549][ T1667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.447331][ T1667] usb 3-1: config 0 descriptor?? [ 367.081053][ T1667] hid-led 0003:27B8:01ED.000F: probe with driver hid-led failed with error -71 [ 367.143181][ T1667] usb 3-1: USB disconnect, device number 7 [ 367.949963][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.364780][ T30] audit: type=1326 audit(1763220479.410:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 368.387175][ T30] audit: type=1326 audit(1763220479.410:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 368.412998][ T30] audit: type=1326 audit(1763220479.440:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 368.437144][ T30] audit: type=1326 audit(1763220479.440:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 368.459605][ T30] audit: type=1326 audit(1763220479.440:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 368.482131][ T30] audit: type=1326 audit(1763220479.440:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 368.507781][ T30] audit: type=1326 audit(1763220479.440:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 368.531209][ T30] audit: type=1326 audit(1763220479.440:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 368.553768][ T30] audit: type=1326 audit(1763220479.440:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 368.576359][ T30] audit: type=1326 audit(1763220479.510:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 369.681496][ T7034] netlink: 120 bytes leftover after parsing attributes in process `syz.1.363'. [ 369.691043][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'. [ 370.666866][ T7038] loop1: detected capacity change from 0 to 2048 [ 370.828080][ T6125] Alternate GPT is invalid, using primary GPT. [ 370.836286][ T6125] loop1: p2 p3 p7 [ 371.008392][ T7044] loop2: detected capacity change from 0 to 512 [ 371.111164][ T7042] loop0: detected capacity change from 0 to 512 [ 371.285568][ T7044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.298814][ T7044] ext4 filesystem being mounted at /75/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.482101][ T7044] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.368: corrupted inode contents [ 371.595795][ T7044] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.368: mark_inode_dirty error [ 371.656142][ T7053] loop1: detected capacity change from 0 to 512 [ 371.665772][ T7044] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.368: corrupted inode contents [ 371.687910][ T1667] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 371.745651][ T7053] EXT4-fs: Ignoring removed mblk_io_submit option [ 371.752375][ T7053] EXT4-fs: inline encryption not supported [ 371.758925][ T7053] EXT4-fs: Ignoring removed mblk_io_submit option [ 371.768526][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 371.797846][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 371.807218][ T7044] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.368: mark_inode_dirty error [ 371.857338][ T6124] udevd[6124]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 371.880780][ T7053] EXT4-fs (loop1): Test dummy encryption mode enabled [ 371.894683][ T7053] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 371.924448][ T1667] usb 4-1: Using ep0 maxpacket: 32 [ 371.964779][ T1667] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.976476][ T1667] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.992118][ T1667] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 372.003292][ T1667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.071140][ T1667] usb 4-1: config 0 descriptor?? [ 372.093773][ T1667] hub 4-1:0.0: USB hub found [ 372.127865][ T7053] EXT4-fs (loop1): 1 truncate cleaned up [ 372.137891][ T7053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.233788][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 372.317844][ T1667] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 372.479065][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.594914][ T5892] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 372.836200][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.847652][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.851123][ T1667] hid-generic 0003:046D:C31C.0010: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 372.858070][ T5892] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 372.878826][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.054349][ T1667] usb 4-1: USB disconnect, device number 5 [ 373.087485][ T5892] usb 2-1: config 0 descriptor?? [ 373.539262][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 373.546227][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 373.570234][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 373.609387][ T5892] usb 2-1: USB disconnect, device number 4 [ 373.764357][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 373.836320][ T24] usb 3-1: config 2 has an invalid interface number: 4 but max is 0 [ 373.848138][ T24] usb 3-1: config 2 has no interface number 0 [ 373.854824][ T24] usb 3-1: config 2 interface 4 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 373.865804][ T24] usb 3-1: config 2 interface 4 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 374.063394][ T7069] fido_id[7069]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 374.079275][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 374.090429][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.099631][ T24] usb 3-1: Product: syz [ 374.105130][ T24] usb 3-1: Manufacturer: syz [ 374.110123][ T24] usb 3-1: SerialNumber: syz [ 374.250436][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.259165][ T24] usb 3-1: invalid MIDI in EP 0 [ 374.811738][ T24] snd-usb-audio 3-1:2.4: probe with driver snd-usb-audio failed with error -22 [ 374.936638][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.946029][ T24] usb 3-1: USB disconnect, device number 8 [ 375.148261][ T7055] udevd[7055]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.603327][ T7084] loop3: detected capacity change from 0 to 2048 [ 376.773487][ T7084] Alternate GPT is invalid, using primary GPT. [ 376.781548][ T7084] loop3: p2 p3 p7 [ 378.011217][ T7091] mmap: syz.3.382 (7091): VmData 175919104 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 378.360246][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 378.840326][ T7094] loop3: detected capacity change from 0 to 256 [ 379.134181][ T7094] FAT-fs (loop3): Directory bread(block 64) failed [ 379.141062][ T7094] FAT-fs (loop3): Directory bread(block 65) failed [ 379.148316][ T7094] FAT-fs (loop3): Directory bread(block 66) failed [ 379.159733][ T7094] FAT-fs (loop3): Directory bread(block 67) failed [ 379.168262][ T7094] FAT-fs (loop3): Directory bread(block 68) failed [ 379.175354][ T7094] FAT-fs (loop3): Directory bread(block 69) failed [ 379.182300][ T7094] FAT-fs (loop3): Directory bread(block 70) failed [ 379.189276][ T7094] FAT-fs (loop3): Directory bread(block 71) failed [ 379.196460][ T7094] FAT-fs (loop3): Directory bread(block 72) failed [ 379.203173][ T7094] FAT-fs (loop3): Directory bread(block 73) failed [ 379.835733][ T7098] netlink: 96 bytes leftover after parsing attributes in process `syz.0.385'. [ 380.820230][ T7108] loop2: detected capacity change from 0 to 512 [ 380.871463][ T7108] EXT4-fs: Ignoring removed mblk_io_submit option [ 380.878534][ T7108] EXT4-fs: inline encryption not supported [ 380.885100][ T7108] EXT4-fs: Ignoring removed mblk_io_submit option [ 380.961841][ T7108] EXT4-fs (loop2): Test dummy encryption mode enabled [ 380.969105][ T7108] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 381.091096][ T7108] EXT4-fs (loop2): 1 truncate cleaned up [ 381.105533][ T7108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.235058][ T7112] loop3: detected capacity change from 0 to 512 [ 381.604243][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 381.860689][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.872117][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.882394][ T24] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 381.892055][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.965356][ T7117] loop3: detected capacity change from 0 to 2048 [ 381.983331][ T24] usb 3-1: config 0 descriptor?? [ 382.115151][ T7117] Alternate GPT is invalid, using primary GPT. [ 382.128519][ T7117] loop3: p2 p3 p7 [ 382.476295][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 382.482944][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 382.570741][ T24] usb 3-1: USB disconnect, device number 9 [ 382.950569][ T7123] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 382.984108][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 382.989116][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 383.026431][ T6111] udevd[6111]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 383.300676][ T7126] netlink: 'syz.0.397': attribute type 4 has an invalid length. [ 383.308859][ T7126] netlink: 'syz.0.397': attribute type 5 has an invalid length. [ 383.316942][ T7126] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.397'. [ 383.337613][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.701960][ T7123] netlink: 72 bytes leftover after parsing attributes in process `syz.4.395'. [ 384.578684][ T7135] overlayfs: missing 'lowerdir' [ 384.980367][ T7143] loop2: detected capacity change from 0 to 512 [ 385.046905][ T7143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 385.158279][ T7143] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.403: corrupted in-inode xattr: invalid ea_ino [ 385.261516][ T7143] EXT4-fs (loop2): Remounting filesystem read-only [ 385.320341][ T30] audit: type=1326 audit(1763220496.370:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 385.387902][ T7143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.464821][ T30] audit: type=1326 audit(1763220496.430:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 385.487821][ T30] audit: type=1326 audit(1763220496.430:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 385.616440][ T7151] loop3: detected capacity change from 0 to 16 [ 385.685440][ T7151] erofs (device loop3): mounted with root inode @ nid 36. [ 385.866491][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.063576][ T7161] loop1: detected capacity change from 0 to 512 [ 387.102480][ T7161] EXT4-fs: Ignoring removed mblk_io_submit option [ 387.109811][ T7161] EXT4-fs: inline encryption not supported [ 387.116380][ T7161] EXT4-fs: Ignoring removed mblk_io_submit option [ 387.216859][ T7161] EXT4-fs (loop1): Test dummy encryption mode enabled [ 387.224091][ T7161] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 387.319734][ T7161] EXT4-fs (loop1): 1 truncate cleaned up [ 387.328715][ T7161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.764720][ T5892] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 387.965614][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.976987][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.987171][ T5892] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 387.996621][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.134306][ T5892] usb 2-1: config 0 descriptor?? [ 388.557045][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 388.563821][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 388.639357][ T5892] usb 2-1: USB disconnect, device number 5 [ 389.340420][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.573516][ T7177] ip6tnl1: entered promiscuous mode [ 390.222013][ T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 390.423350][ T7184] overlayfs: failed to clone upperpath [ 390.505855][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 390.537231][ T24] usb 2-1: no configurations [ 390.542061][ T24] usb 2-1: can't read configurations, error -22 [ 391.093602][ T7186] loop0: detected capacity change from 0 to 2048 [ 391.264985][ T7186] Alternate GPT is invalid, using primary GPT. [ 391.272663][ T7186] loop0: p2 p3 p7 [ 392.510202][ T6124] udevd[6124]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 392.529264][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 392.562740][ T6111] udevd[6111]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 392.709016][ T7194] loop1: detected capacity change from 0 to 512 [ 392.972417][ T7194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.991662][ T7194] ext4 filesystem being mounted at /70/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.335921][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.546608][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 393.962712][ T7203] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 393.971967][ T7203] overlayfs: missing 'lowerdir' [ 394.659307][ T7207] loop1: detected capacity change from 0 to 512 [ 394.680369][ T7207] EXT4-fs: Ignoring removed mblk_io_submit option [ 394.687330][ T7207] EXT4-fs: inline encryption not supported [ 394.693680][ T7207] EXT4-fs: Ignoring removed mblk_io_submit option [ 394.784592][ T7207] EXT4-fs (loop1): Test dummy encryption mode enabled [ 394.791606][ T7207] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 394.884425][ T7207] EXT4-fs (loop1): 1 truncate cleaned up [ 394.951887][ T7207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.131257][ T30] audit: type=1326 audit(1763220506.160:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 395.154046][ T30] audit: type=1326 audit(1763220506.160:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 395.176450][ T30] audit: type=1326 audit(1763220506.170:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 395.198765][ T30] audit: type=1326 audit(1763220506.180:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 395.221091][ T30] audit: type=1326 audit(1763220506.200:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 395.246924][ T30] audit: type=1326 audit(1763220506.200:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 395.441419][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 395.623156][ T30] audit: type=1326 audit(1763220506.660:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 395.649165][ T30] audit: type=1326 audit(1763220506.660:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 395.664909][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.682548][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.692878][ T24] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 395.702767][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.826916][ T24] usb 2-1: config 0 descriptor?? [ 396.282607][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 396.289486][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 396.331897][ T24] usb 2-1: USB disconnect, device number 8 [ 397.004743][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.851038][ T7222] loop1: detected capacity change from 0 to 2048 [ 397.999263][ T7222] Alternate GPT is invalid, using primary GPT. [ 398.007084][ T7222] loop1: p2 p3 p7 [ 398.891318][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 398.913731][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 398.955726][ T6111] udevd[6111]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 399.272475][ T6111] udevd[6111]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 399.311450][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 399.341523][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 400.177439][ T7229] loop3: detected capacity change from 0 to 8192 [ 400.215239][ T7229] msdos: Unknown parameter 'appraise_type' [ 402.047469][ T7263] loop0: detected capacity change from 0 to 2048 [ 402.312475][ T7263] Alternate GPT is invalid, using primary GPT. [ 402.320849][ T7263] loop0: p2 p3 p7 [ 403.979492][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 404.052680][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 404.087027][ T6111] udevd[6111]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 406.732884][ T7299] loop0: detected capacity change from 0 to 1024 [ 408.309279][ T7303] loop3: detected capacity change from 0 to 2048 [ 408.449477][ T7303] Alternate GPT is invalid, using primary GPT. [ 408.458247][ T7303] loop3: p2 p3 p7 [ 409.661193][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 410.060797][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 410.080799][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 411.540463][ T7318] loop0: detected capacity change from 0 to 256 [ 411.755145][ T7318] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 413.096145][ T7341] loop3: detected capacity change from 0 to 16 [ 413.109131][ T7339] loop0: detected capacity change from 0 to 2048 [ 413.137878][ T7341] erofs (device loop3): mounted with root inode @ nid 36. [ 413.233710][ T7339] Alternate GPT is invalid, using primary GPT. [ 413.241758][ T7339] loop0: p2 p3 p7 [ 413.946198][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.952873][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.982391][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.485'. [ 417.107626][ T7373] loop2: detected capacity change from 0 to 2048 [ 417.279264][ T7373] Alternate GPT is invalid, using primary GPT. [ 417.287128][ T7373] loop2: p2 p3 p7 [ 418.534781][ T30] audit: type=1326 audit(1763220529.580:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 418.558930][ T30] audit: type=1326 audit(1763220529.580:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 418.584965][ T30] audit: type=1326 audit(1763220529.630:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 418.608509][ T30] audit: type=1326 audit(1763220529.640:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 418.630930][ T30] audit: type=1326 audit(1763220529.640:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 418.653245][ T30] audit: type=1326 audit(1763220529.650:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 418.676018][ T30] audit: type=1326 audit(1763220529.650:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 418.701520][ T30] audit: type=1326 audit(1763220529.660:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 418.725467][ T30] audit: type=1326 audit(1763220529.660:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 418.747816][ T30] audit: type=1326 audit(1763220529.670:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 419.645018][ T7386] netlink: 392 bytes leftover after parsing attributes in process `syz.2.494'. [ 420.335431][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 420.412211][ T7388] tipc: Started in network mode [ 420.425902][ T7388] tipc: Node identity ac14140f, cluster identity 4711 [ 420.436608][ T7388] tipc: New replicast peer: 255.255.255.255 [ 420.444762][ T7388] tipc: Enabled bearer , priority 10 [ 421.264547][ T7396] loop3: detected capacity change from 0 to 512 [ 421.375891][ T7396] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 421.405063][ T7396] EXT4-fs (loop3): 1 truncate cleaned up [ 421.413119][ T7396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.714669][ T24] tipc: Node number set to 2886997007 [ 422.104395][ T7401] loop0: detected capacity change from 0 to 2048 [ 422.217560][ T5802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.322706][ T7401] Alternate GPT is invalid, using primary GPT. [ 422.330729][ T7401] loop0: p2 p3 p7 [ 422.658424][ T7412] loop1: detected capacity change from 0 to 256 [ 422.699692][ T7412] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 422.710839][ T7412] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 422.821068][ T7412] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 422.855394][ T7416] overlayfs: missing 'lowerdir' [ 422.894898][ T7412] exFAT-fs (loop1): failed to load alloc-bitmap [ 422.901418][ T7412] exFAT-fs (loop1): failed to recognize exfat type [ 423.328868][ T7421] loop0: detected capacity change from 0 to 16 [ 423.419100][ T7421] erofs (device loop0): mounted with root inode @ nid 36. [ 424.127410][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 424.167629][ T7431] netlink: 104 bytes leftover after parsing attributes in process `syz.1.512'. [ 424.177046][ T7431] netlink: 104 bytes leftover after parsing attributes in process `syz.1.512'. [ 426.889534][ T7443] loop3: detected capacity change from 0 to 2048 [ 427.067201][ T7443] Alternate GPT is invalid, using primary GPT. [ 427.080027][ T7443] loop3: p2 p3 p7 [ 427.818874][ T7450] syzkaller0: entered allmulticast mode [ 427.840311][ T7449] syzkaller0: entered promiscuous mode [ 427.911597][ T7449] syzkaller0 (unregistering): left allmulticast mode [ 427.918873][ T7449] syzkaller0 (unregistering): left promiscuous mode [ 428.465188][ T7452] netlink: 'syz.1.521': attribute type 4 has an invalid length. [ 428.529977][ T7455] netlink: 'syz.1.521': attribute type 4 has an invalid length. [ 429.151015][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 429.151096][ T30] audit: type=1326 audit(1763220540.200:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 429.270030][ T30] audit: type=1326 audit(1763220540.240:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 429.292679][ T30] audit: type=1326 audit(1763220540.240:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 429.315180][ T30] audit: type=1326 audit(1763220540.240:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 429.342360][ T30] audit: type=1326 audit(1763220540.260:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 429.366615][ T30] audit: type=1326 audit(1763220540.260:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 429.389020][ T30] audit: type=1326 audit(1763220540.260:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 429.416913][ T30] audit: type=1326 audit(1763220540.260:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=13 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 429.444469][ T30] audit: type=1326 audit(1763220540.260:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 429.468693][ T30] audit: type=1326 audit(1763220540.260:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 431.237900][ T7475] loop1: detected capacity change from 0 to 512 [ 431.326854][ T7475] EXT4-fs: Ignoring removed i_version option [ 431.361707][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.467692][ T7475] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 431.522042][ T7475] System zones: 0-2, 18-18, 34-35 [ 431.559561][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.618995][ T7475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.632305][ T7475] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.713533][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.861431][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 431.922952][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.267287][ T35] bridge_slave_1: left allmulticast mode [ 432.273299][ T35] bridge_slave_1: left promiscuous mode [ 432.280230][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.293283][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.325526][ T35] bridge_slave_0: left allmulticast mode [ 432.331418][ T35] bridge_slave_0: left promiscuous mode [ 432.338972][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.367572][ T35] tipc: Resetting bearer [ 432.665051][ T35] tipc: Disabling bearer [ 432.868824][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.886994][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.919436][ T35] bond0 (unregistering): Released all slaves [ 433.031466][ T35] tipc: Left network mode [ 433.328288][ T35] hsr_slave_0: left promiscuous mode [ 433.363691][ T35] hsr_slave_1: left promiscuous mode [ 433.374261][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.381935][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.461906][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.472422][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.576744][ T35] veth1_macvtap: left promiscuous mode [ 433.582622][ T35] veth0_macvtap: left promiscuous mode [ 433.588693][ T35] veth1_vlan: left promiscuous mode [ 433.594351][ T35] veth0_vlan: left promiscuous mode [ 434.526508][ T35] team0 (unregistering): Port device team_slave_1 removed [ 434.636432][ T35] team0 (unregistering): Port device team_slave_0 removed [ 434.776868][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.836639][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.846696][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.890268][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.902428][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 435.820630][ T7510] loop1: detected capacity change from 0 to 16 [ 436.013344][ T7510] erofs (device loop1): mounted with root inode @ nid 36. [ 436.089510][ T7502] chnl_net:caif_netlink_parms(): no params data found [ 436.800291][ T7517] loop0: detected capacity change from 0 to 2048 [ 436.936966][ T7517] Alternate GPT is invalid, using primary GPT. [ 436.944960][ T7517] loop0: p2 p3 p7 [ 436.964092][ T5805] Bluetooth: hci1: command tx timeout [ 437.352542][ T7502] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.360465][ T7502] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.368418][ T7502] bridge_slave_0: entered allmulticast mode [ 437.378106][ T7502] bridge_slave_0: entered promiscuous mode [ 437.467146][ T7502] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.474882][ T7502] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.482616][ T7502] bridge_slave_1: entered allmulticast mode [ 437.492667][ T7502] bridge_slave_1: entered promiscuous mode [ 437.775282][ T7502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.788851][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 437.788934][ T30] audit: type=1326 audit(1763220548.810:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7520 comm="syz.0.547" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ed539 code=0x0 [ 437.863206][ T7502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.114361][ T7502] team0: Port device team_slave_0 added [ 438.152059][ T7502] team0: Port device team_slave_1 added [ 438.393634][ T7502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.401245][ T7502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.429716][ T7502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.513263][ T7502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.520910][ T7502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.549821][ T7502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.961601][ T7502] hsr_slave_0: entered promiscuous mode [ 438.972758][ T7502] hsr_slave_1: entered promiscuous mode [ 439.038789][ T5805] Bluetooth: hci1: command tx timeout [ 440.196576][ T7502] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 440.251392][ T7502] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 440.377308][ T7502] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 440.470410][ T7502] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 441.124900][ T5805] Bluetooth: hci1: command tx timeout [ 441.337669][ T7502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.487792][ T7502] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.577707][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.585393][ T4403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.703340][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.711041][ T4403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.685343][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 443.195571][ T5805] Bluetooth: hci1: command tx timeout [ 443.349132][ T7502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.635923][ T7502] veth0_vlan: entered promiscuous mode [ 445.698264][ T7502] veth1_vlan: entered promiscuous mode [ 446.003626][ T7502] veth0_macvtap: entered promiscuous mode [ 446.100973][ T7502] veth1_macvtap: entered promiscuous mode [ 446.265405][ T7502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.352976][ T7502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.480692][ T3792] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.550330][ T3792] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.645560][ T1867] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.704901][ T1867] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.427864][ T7581] loop2: detected capacity change from 0 to 16 [ 447.532540][ T7581] erofs (device loop2): mounted with root inode @ nid 36. [ 449.138805][ T30] audit: type=1326 audit(1763220560.180:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 449.234805][ T30] audit: type=1326 audit(1763220560.240:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 449.257424][ T30] audit: type=1326 audit(1763220560.240:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 449.279921][ T30] audit: type=1326 audit(1763220560.240:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72539 code=0x7ffc0000 [ 449.634704][ T7597] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 451.989889][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.998152][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.229290][ T1867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.237769][ T1867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.334989][ T7631] support for the xor transformation has been removed. [ 454.016677][ T30] audit: type=1326 audit(1763220565.060:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.5.581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 454.040260][ T30] audit: type=1326 audit(1763220565.070:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.5.581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=176 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 454.063000][ T30] audit: type=1326 audit(1763220565.070:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.5.581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 457.114235][ T30] audit: type=1326 audit(1763220568.160:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 457.136670][ T30] audit: type=1326 audit(1763220568.170:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 457.159199][ T30] audit: type=1326 audit(1763220568.170:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 457.186816][ T30] audit: type=1326 audit(1763220568.170:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 457.211622][ T30] audit: type=1326 audit(1763220568.170:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 457.234576][ T30] audit: type=1326 audit(1763220568.200:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 457.542530][ T7658] loop5: detected capacity change from 0 to 128 [ 457.549635][ T30] audit: type=1326 audit(1763220568.360:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 457.706757][ T7658] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.835062][ T7658] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 458.744177][ T5933] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 458.960641][ T5933] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 458.971277][ T5933] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 458.980743][ T5933] usb 1-1: config 220 interface 0 has no altsetting 0 [ 459.044522][ T5933] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 459.054992][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.063240][ T5933] usb 1-1: Product: syz [ 459.068219][ T5933] usb 1-1: Manufacturer: syz [ 459.073020][ T5933] usb 1-1: SerialNumber: syz [ 459.386662][ T5933] usb 1-1: USB disconnect, device number 11 [ 460.422728][ T30] audit: type=1326 audit(1763220571.470:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 460.499981][ T30] audit: type=1326 audit(1763220571.520:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 460.522558][ T30] audit: type=1326 audit(1763220571.520:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 460.810140][ T7670] loop0: detected capacity change from 0 to 1024 [ 460.908703][ T7670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.265358][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.544542][ T7678] loop0: detected capacity change from 0 to 128 [ 462.731485][ T7679] syz.0.595: attempt to access beyond end of device [ 462.731485][ T7679] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 462.805048][ T7679] syz.0.595: attempt to access beyond end of device [ 462.805048][ T7679] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 462.934274][ T7679] syz.0.595: attempt to access beyond end of device [ 462.934274][ T7679] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 462.994131][ T7679] syz.0.595: attempt to access beyond end of device [ 462.994131][ T7679] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 463.039922][ T7679] syz.0.595: attempt to access beyond end of device [ 463.039922][ T7679] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 463.091770][ T7679] syz.0.595: attempt to access beyond end of device [ 463.091770][ T7679] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 465.423545][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 465.423625][ T30] audit: type=1326 audit(1763220576.470:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7691 comm="syz.0.599" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ed539 code=0x0 [ 467.599506][ T7711] overlayfs: failed to resolve './file1': -2 [ 468.350467][ T7714] loop1: detected capacity change from 0 to 2048 [ 468.502322][ T7714] Alternate GPT is invalid, using primary GPT. [ 468.510354][ T7714] loop1: p2 p3 p7 [ 468.530404][ T7716] bridge: RTM_NEWNEIGH with invalid ether address [ 470.914958][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 470.927698][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 470.938254][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 470.963474][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 470.986237][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 472.645222][ T7731] chnl_net:caif_netlink_parms(): no params data found [ 472.909495][ T7751] netlink: 172 bytes leftover after parsing attributes in process `syz.2.620'. [ 473.135063][ T5805] Bluetooth: hci5: command tx timeout [ 474.462126][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.470415][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.478414][ T7731] bridge_slave_0: entered allmulticast mode [ 474.497281][ T7731] bridge_slave_0: entered promiscuous mode [ 474.617371][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.625203][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.632969][ T7731] bridge_slave_1: entered allmulticast mode [ 474.647469][ T7731] bridge_slave_1: entered promiscuous mode [ 474.923555][ T7766] loop2: detected capacity change from 0 to 16 [ 474.961274][ T7766] erofs (device loop2): mounted with root inode @ nid 36. [ 475.169629][ T7731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.211422][ T5805] Bluetooth: hci5: command tx timeout [ 475.259441][ T7731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.426669][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.434500][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.708291][ T7731] team0: Port device team_slave_0 added [ 475.795135][ T7731] team0: Port device team_slave_1 added [ 475.907873][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.916961][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.951143][ T7731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.979756][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.989691][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.017052][ T7731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.347982][ T7731] hsr_slave_0: entered promiscuous mode [ 476.351440][ T7775] loop0: detected capacity change from 0 to 512 [ 476.363308][ T7731] hsr_slave_1: entered promiscuous mode [ 476.376077][ T7731] debugfs: 'hsr0' already exists in 'hsr' [ 476.382026][ T7731] Cannot create hsr debugfs directory [ 476.414591][ T7775] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 476.573610][ T7775] EXT4-fs (loop0): 1 truncate cleaned up [ 476.581833][ T7775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.274174][ T5805] Bluetooth: hci5: command tx timeout [ 477.557104][ T7731] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 477.715875][ T7731] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 477.808427][ T7731] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 477.868526][ T7731] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 478.976731][ T7731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.165924][ T7731] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.261293][ T4078] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.268981][ T4078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.347594][ T4078] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.355232][ T4078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.364599][ T5805] Bluetooth: hci5: command tx timeout [ 479.598002][ T30] audit: type=1326 audit(1763220590.640:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 479.767260][ T30] audit: type=1326 audit(1763220590.720:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 479.789762][ T30] audit: type=1326 audit(1763220590.720:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 480.829624][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.741806][ T7801] overlayfs: failed to resolve './file1': -2 [ 482.069068][ T7731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.935306][ T30] audit: type=1326 audit(1763220594.980:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 483.957716][ T30] audit: type=1326 audit(1763220594.980:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 484.157572][ T30] audit: type=1326 audit(1763220595.040:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 484.180261][ T30] audit: type=1326 audit(1763220595.040:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 484.202704][ T30] audit: type=1326 audit(1763220595.040:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 484.229832][ T30] audit: type=1326 audit(1763220595.050:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 484.254916][ T30] audit: type=1326 audit(1763220595.130:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 485.131329][ T7731] veth0_vlan: entered promiscuous mode [ 485.156306][ T7819] loop1: detected capacity change from 0 to 2048 [ 485.265601][ T7731] veth1_vlan: entered promiscuous mode [ 485.375809][ T7819] Alternate GPT is invalid, using primary GPT. [ 485.383411][ T7819] loop1: p2 p3 p7 [ 485.644268][ T7731] veth0_macvtap: entered promiscuous mode [ 485.766162][ T7731] veth1_macvtap: entered promiscuous mode [ 485.999939][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.391070][ T7731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.485566][ T3015] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.561136][ T3015] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.645342][ T3015] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.683568][ T3015] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.813126][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.756130][ T7863] loop1: detected capacity change from 0 to 16 [ 491.805066][ T7863] erofs (device loop1): mounted with root inode @ nid 36. [ 493.198149][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.206521][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.349518][ T4078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.359440][ T4078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.317510][ T7877] loop6: detected capacity change from 0 to 512 [ 494.397862][ T7877] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 494.854857][ T5873] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 495.076574][ T5873] usb 7-1: config 1 has an invalid descriptor of length 178, skipping remainder of the config [ 495.087401][ T5873] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.182299][ T5873] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 495.191787][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 495.202040][ T5873] usb 7-1: SerialNumber: syz [ 495.490040][ T5873] usb 7-1: 0:2 : does not exist [ 495.628079][ T5873] usb 7-1: USB disconnect, device number 2 [ 496.908879][ T7886] loop0: detected capacity change from 0 to 4096 [ 496.980466][ T7890] overlayfs: failed to resolve './file1': -2 [ 497.051610][ T7886] EXT4-fs (loop0): Test dummy encryption mode enabled [ 497.058887][ T7886] EXT4-fs (loop0): inodes count not valid: 40 vs 32 [ 497.457792][ T7893] loop2: detected capacity change from 0 to 512 [ 497.577956][ T7893] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 497.663302][ T7893] EXT4-fs (loop2): 1 truncate cleaned up [ 497.672051][ T7893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.096697][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.615499][ T7901] binder: Unknown parameter ''' [ 499.687242][ T7913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.672'. [ 503.244485][ T5933] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 503.496932][ T5933] usb 1-1: config 0 has an invalid interface number: 127 but max is 1 [ 503.505594][ T5933] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 503.519871][ T5933] usb 1-1: config 0 has no interface number 1 [ 503.527367][ T5933] usb 1-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 503.540840][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 503.750447][ T5933] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 503.759959][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.768687][ T5933] usb 1-1: Product: syz [ 503.774945][ T5933] usb 1-1: Manufacturer: syz [ 503.779746][ T5933] usb 1-1: SerialNumber: syz [ 503.878962][ T5933] usb 1-1: config 0 descriptor?? [ 503.928003][ T5933] usb-storage 1-1:0.127: USB Mass Storage device detected [ 504.009543][ T5933] usb-storage 1-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 504.074875][ T5933] usb-storage 1-1:0.0: USB Mass Storage device detected [ 504.137024][ T5933] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 504.225416][ T5933] usb 1-1: USB disconnect, device number 12 [ 505.895442][ T7958] loop6: detected capacity change from 0 to 16 [ 505.938287][ T7958] erofs (device loop6): mounted with root inode @ nid 36. [ 507.517526][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 507.517611][ T30] audit: type=1326 audit(1763220618.560:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 507.599047][ T30] audit: type=1326 audit(1763220618.610:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 507.650725][ T30] audit: type=1326 audit(1763220618.690:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 507.678170][ T30] audit: type=1326 audit(1763220618.690:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 507.704455][ T30] audit: type=1326 audit(1763220618.690:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 507.727554][ T30] audit: type=1326 audit(1763220618.700:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 507.749944][ T30] audit: type=1326 audit(1763220618.700:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 507.777113][ T30] audit: type=1326 audit(1763220618.700:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 507.802927][ T30] audit: type=1326 audit(1763220618.700:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 508.054892][ T30] audit: type=1326 audit(1763220618.910:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 509.528829][ T7981] overlayfs: failed to resolve './file0': -2 [ 512.356337][ T7998] kernel profiling enabled (shift: 7) [ 515.639454][ T5873] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 515.867689][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.882163][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.894251][ T5873] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 515.903549][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.972027][ T5873] usb 7-1: config 0 descriptor?? [ 516.537475][ T8017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 516.612712][ T5873] hid-led 0003:27B8:01ED.0011: probe with driver hid-led failed with error -71 [ 516.650532][ T5873] usb 7-1: USB disconnect, device number 3 [ 516.933665][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 516.942925][ T8019] netlink: 'syz.1.714': attribute type 1 has an invalid length. [ 516.951052][ T8019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.714'. [ 518.119907][ T8031] loop0: detected capacity change from 0 to 512 [ 518.182192][ T8031] EXT4-fs: Ignoring removed oldalloc option [ 518.238010][ T8031] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 518.380263][ T8031] EXT4-fs (loop0): 1 truncate cleaned up [ 518.388515][ T8031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.182071][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.734564][ T8046] loop2: detected capacity change from 0 to 512 [ 519.889128][ T8046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.319390][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.445032][ T7657] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 520.855575][ T5933] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 521.062465][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.074280][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.142973][ T5933] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 521.152745][ T5933] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 521.161163][ T5933] usb 3-1: Manufacturer: syz [ 521.207044][ T5933] usb 3-1: config 0 descriptor?? [ 522.117009][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 522.344254][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.355719][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.366110][ T24] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 522.375793][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.400673][ T5933] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0012/input/input6 [ 522.526530][ T5933] uclogic 0003:256C:006D.0012: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 522.540971][ T24] usb 7-1: config 0 descriptor?? [ 522.605229][ T8060] netlink: 'syz.0.729': attribute type 12 has an invalid length. [ 522.630464][ T5933] usb 3-1: USB disconnect, device number 10 [ 522.980007][ T8064] overlayfs: failed to resolve './file0': -2 [ 523.203229][ T24] hid-led 0003:27B8:01ED.0013: probe with driver hid-led failed with error -71 [ 523.250405][ T24] usb 7-1: USB disconnect, device number 4 [ 523.904330][ T5933] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 524.121837][ T5933] usb 1-1: config 0 has no interfaces? [ 524.148779][ T5933] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 524.160112][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.169202][ T5933] usb 1-1: Product: syz [ 524.173584][ T5933] usb 1-1: Manufacturer: syz [ 524.180339][ T5933] usb 1-1: SerialNumber: syz [ 524.279288][ T5933] usb 1-1: config 0 descriptor?? [ 524.501308][ T5933] usb 1-1: USB disconnect, device number 13 [ 524.617604][ T1867] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.765665][ T1867] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.952995][ T1867] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.159549][ T1867] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.830296][ T1867] bridge_slave_1: left allmulticast mode [ 525.836543][ T1867] bridge_slave_1: left promiscuous mode [ 525.843174][ T1867] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.905710][ T1867] bridge_slave_0: left allmulticast mode [ 525.911588][ T1867] bridge_slave_0: left promiscuous mode [ 525.921409][ T1867] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.596179][ T1867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.631394][ T1867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.722808][ T1867] bond0 (unregistering): Released all slaves [ 526.973521][ T8087] netlink: 'syz.0.739': attribute type 4 has an invalid length. [ 527.629074][ T1867] hsr_slave_0: left promiscuous mode [ 527.690065][ T1867] hsr_slave_1: left promiscuous mode [ 527.699975][ T1867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.707761][ T1867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.786968][ T1867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.794661][ T1867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.879582][ T8092] loop6: detected capacity change from 0 to 2048 [ 527.920857][ T8092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 527.924917][ T1867] veth1_macvtap: left promiscuous mode [ 527.933401][ T1867] veth0_macvtap: left promiscuous mode [ 527.941722][ T1867] veth1_vlan: left promiscuous mode [ 527.947416][ T1867] veth0_vlan: left promiscuous mode [ 528.501393][ T8092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.634546][ T8092] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.742: bg 0: block 2: invalid block bitmap [ 528.745263][ T8092] EXT4-fs (loop6): Remounting filesystem read-only [ 529.226492][ T1867] team0 (unregistering): Port device team_slave_1 removed [ 529.267405][ T7731] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.369755][ T1867] team0 (unregistering): Port device team_slave_0 removed [ 530.333999][ C1] hrtimer: interrupt took 286297 ns [ 530.858371][ T8112] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 530.864944][ T8112] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 530.927148][ T8112] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 530.935044][ T8112] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 530.984465][ T8112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 530.990846][ T8112] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 531.003508][ T8112] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 531.011574][ T8112] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 531.054935][ T8112] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 531.061364][ T8112] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 531.105358][ T8112] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 531.785551][ T8126] netlink: 'syz.2.753': attribute type 4 has an invalid length. [ 532.074410][ T5805] Bluetooth: hci0: command 0x0406 tx timeout [ 532.284609][ T8134] loop1: detected capacity change from 0 to 16 [ 532.379665][ T8134] erofs (device loop1): mounted with root inode @ nid 36. [ 532.418964][ T8138] loop2: detected capacity change from 0 to 512 [ 532.434908][ T8138] ext4: Unknown parameter 'noacl' [ 532.956262][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 533.034441][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 533.040754][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 533.121668][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 533.918832][ T8151] overlayfs: failed to resolve './file0': -2 [ 534.154223][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 534.334456][ T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 534.520159][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 534.547348][ T8160] overlayfs: failed to resolve './file0': -2 [ 534.551827][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 534.616639][ T24] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 534.626255][ T24] usb 1-1: config 0 has no interface number 0 [ 534.633100][ T24] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 534.644661][ T24] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 178, setting to 64 [ 534.657968][ T24] usb 1-1: config 0 interface 88 has no altsetting 0 [ 534.735781][ T24] usb 1-1: string descriptor 0 read error: -22 [ 534.742800][ T24] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 534.752787][ T24] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 534.809440][ T24] usb 1-1: config 0 descriptor?? [ 534.818006][ T8154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 534.855395][ T24] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input7 [ 535.041049][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 535.060022][ T24] usb 1-1: USB disconnect, device number 14 [ 535.114257][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 535.114700][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 535.201262][ T5805] Bluetooth: hci5: command 0x0c1a tx timeout [ 535.555866][ T8164] sit0: entered promiscuous mode [ 535.578199][ T8164] netlink: 'syz.6.768': attribute type 1 has an invalid length. [ 535.586238][ T8164] netlink: 1 bytes leftover after parsing attributes in process `syz.6.768'. [ 536.120022][ T8166] netlink: 60 bytes leftover after parsing attributes in process `syz.0.769'. [ 536.834867][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.841787][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.278818][ T5805] Bluetooth: hci5: command 0x0c1a tx timeout [ 538.166566][ T8175] binder: Bad value for 'max' [ 538.932144][ T8179] loop6: detected capacity change from 0 to 128 [ 539.076754][ T8179] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 539.184734][ T8179] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 539.990814][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'. [ 543.099276][ T8207] loop2: detected capacity change from 0 to 16 [ 543.154595][ T8207] erofs (device loop2): mounted with root inode @ nid 36. [ 545.639694][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 545.669479][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 545.692173][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 545.715144][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 545.745166][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 547.135573][ T8214] chnl_net:caif_netlink_parms(): no params data found [ 547.848899][ T5805] Bluetooth: hci1: command tx timeout [ 548.935671][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.943265][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.951401][ T8214] bridge_slave_0: entered allmulticast mode [ 548.968079][ T8214] bridge_slave_0: entered promiscuous mode [ 549.127101][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.135005][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.151330][ T8214] bridge_slave_1: entered allmulticast mode [ 549.165357][ T8214] bridge_slave_1: entered promiscuous mode [ 549.501445][ T8214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.607680][ T8214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.934094][ T5805] Bluetooth: hci1: command tx timeout [ 549.965324][ T8214] team0: Port device team_slave_0 added [ 549.988908][ T8214] team0: Port device team_slave_1 added [ 550.100015][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.107116][ T8235] loop1: detected capacity change from 0 to 128 [ 550.113666][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.140275][ T8214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.172056][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.179699][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.207553][ T8214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.755258][ T8214] hsr_slave_0: entered promiscuous mode [ 550.767758][ T8214] hsr_slave_1: entered promiscuous mode [ 552.021705][ T5805] Bluetooth: hci1: command tx timeout [ 552.867092][ T8214] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 552.875369][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 552.885013][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 552.921842][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 552.938378][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 552.951817][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 553.056450][ T8214] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 553.169324][ T58] kworker/u8:3: attempt to access beyond end of device [ 553.169324][ T58] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 553.183598][ T58] kworker/u8:3: attempt to access beyond end of device [ 553.183598][ T58] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 553.197909][ T58] kworker/u8:3: attempt to access beyond end of device [ 553.197909][ T58] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 553.212303][ T58] kworker/u8:3: attempt to access beyond end of device [ 553.212303][ T58] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 553.226408][ T58] kworker/u8:3: attempt to access beyond end of device [ 553.226408][ T58] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 553.242380][ T58] kworker/u8:3: attempt to access beyond end of device [ 553.242380][ T58] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 553.257894][ T58] kworker/u8:3: attempt to access beyond end of device [ 553.257894][ T58] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 553.272135][ T58] kworker/u8:3: attempt to access beyond end of device [ 553.272135][ T58] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 553.286100][ T58] kworker/u8:3: attempt to access beyond end of device [ 553.286100][ T58] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 553.301445][ T58] kworker/u8:3: attempt to access beyond end of device [ 553.301445][ T58] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 553.409309][ T8214] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 553.577874][ T8214] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 554.074512][ T5805] Bluetooth: hci1: command tx timeout [ 554.606954][ T8246] chnl_net:caif_netlink_parms(): no params data found [ 555.047408][ T5805] Bluetooth: hci6: command tx timeout [ 555.352464][ T8214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.507744][ T8214] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.641762][ T4078] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.649409][ T4078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.771975][ T4078] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.779670][ T4078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.665595][ T8246] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.673178][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.684416][ T8246] bridge_slave_0: entered allmulticast mode [ 556.694800][ T8246] bridge_slave_0: entered promiscuous mode [ 556.883663][ T8246] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.891592][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.902588][ T8246] bridge_slave_1: entered allmulticast mode [ 556.913078][ T8246] bridge_slave_1: entered promiscuous mode [ 557.049994][ T8274] loop2: detected capacity change from 0 to 16 [ 557.114213][ T5805] Bluetooth: hci6: command tx timeout [ 557.165634][ T8274] erofs (device loop2): mounted with root inode @ nid 36. [ 557.689332][ T8246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.860334][ T8246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.438047][ T8246] team0: Port device team_slave_0 added [ 558.525829][ T8246] team0: Port device team_slave_1 added [ 559.022366][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.029894][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.058448][ T8246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.196322][ T5805] Bluetooth: hci6: command tx timeout [ 559.237972][ T8214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.253637][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.261260][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.294601][ T8246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.882720][ T8246] hsr_slave_0: entered promiscuous mode [ 559.902487][ T8246] hsr_slave_1: entered promiscuous mode [ 559.913321][ T8246] debugfs: 'hsr0' already exists in 'hsr' [ 559.923195][ T8246] Cannot create hsr debugfs directory [ 561.275171][ T5805] Bluetooth: hci6: command tx timeout [ 561.841033][ T8246] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 561.978599][ T8246] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 562.096564][ T8246] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 562.228871][ T8246] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 562.636391][ T8214] veth0_vlan: entered promiscuous mode [ 562.748436][ T8214] veth1_vlan: entered promiscuous mode [ 563.277641][ T8214] veth0_macvtap: entered promiscuous mode [ 563.367538][ T8214] veth1_macvtap: entered promiscuous mode [ 563.623710][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.787490][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.944630][ T4078] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.971070][ T1867] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.032519][ T1867] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.060429][ T8246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.097657][ T8294] loop1: detected capacity change from 0 to 512 [ 564.124545][ T136] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.174352][ T8294] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 564.375582][ T8294] EXT4-fs (loop1): 1 truncate cleaned up [ 564.383770][ T8294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.440536][ T8246] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.555354][ T4078] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.562923][ T4078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.685700][ T4078] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.693261][ T4078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.047086][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.789769][ T8246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.828097][ T8316] loop1: detected capacity change from 0 to 16 [ 567.935346][ T8316] erofs (device loop1): mounted with root inode @ nid 36. [ 568.070013][ T5805] erofs (device loop1): failed to decompress -26 in[46, 0] out[9000] [ 568.101993][ T8316] erofs (device loop1): failed to decompress -26 in[46, 4050] out[8192] [ 568.155511][ T8316] erofs (device loop1): read error -117 @ 1 of nid 89 [ 568.174980][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 568.175060][ T30] audit: type=1800 audit(1763220679.210:304): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.812" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 568.224830][ T5805] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 568.260075][ T5805] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 568.276665][ T5805] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 568.318957][ T5805] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 568.336381][ T5805] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 569.875262][ T8319] chnl_net:caif_netlink_parms(): no params data found [ 570.484266][ T5805] Bluetooth: hci7: command tx timeout [ 571.296933][ T8246] veth0_vlan: entered promiscuous mode [ 571.419482][ T8246] veth1_vlan: entered promiscuous mode [ 571.950271][ T8246] veth0_macvtap: entered promiscuous mode [ 572.025289][ T8246] veth1_macvtap: entered promiscuous mode [ 572.474578][ T8319] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.482385][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.499261][ T8319] bridge_slave_0: entered allmulticast mode [ 572.511346][ T8319] bridge_slave_0: entered promiscuous mode [ 572.564165][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.600974][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.604067][ T5805] Bluetooth: hci7: command tx timeout [ 572.684171][ T8319] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.695021][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.702981][ T8319] bridge_slave_1: entered allmulticast mode [ 572.718032][ T8319] bridge_slave_1: entered promiscuous mode [ 573.046932][ T4403] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.156789][ T8319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.194096][ T4403] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.236784][ T4403] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.318548][ T8319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.351053][ T4403] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.865974][ T8319] team0: Port device team_slave_0 added [ 574.039409][ T8319] team0: Port device team_slave_1 added [ 574.153011][ T5025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.163983][ T5025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.650657][ T5805] Bluetooth: hci7: command tx timeout [ 574.682053][ T8319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.689589][ T8319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.716089][ T8319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.824300][ T1867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.832378][ T1867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.848996][ T8319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.856331][ T8319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.885130][ T8319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.605968][ T8319] hsr_slave_0: entered promiscuous mode [ 575.616956][ T8319] hsr_slave_1: entered promiscuous mode [ 575.626332][ T8319] debugfs: 'hsr0' already exists in 'hsr' [ 575.632258][ T8319] Cannot create hsr debugfs directory [ 576.724580][ T5805] Bluetooth: hci7: command tx timeout [ 578.079025][ T8319] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 578.238063][ T8319] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 578.355655][ T8319] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 578.488741][ T8319] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 580.376426][ T8319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.712810][ T8319] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.913356][ T8379] loop7: detected capacity change from 0 to 16 [ 580.995626][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.003186][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.022991][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.030675][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.095106][ T8379] erofs (device loop7): mounted with root inode @ nid 36. [ 581.662714][ T8319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 584.041967][ T8319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.219631][ T4078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.227888][ T4078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.718900][ T4078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.727171][ T4078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.021335][ T8319] veth0_vlan: entered promiscuous mode [ 588.068926][ T8414] fuse: Bad value for 'fd' [ 588.228280][ T8319] veth1_vlan: entered promiscuous mode [ 588.318897][ T8416] loop1: detected capacity change from 0 to 512 [ 588.404225][ T8416] EXT4-fs (loop1): Test dummy encryption mode enabled [ 588.534981][ T8416] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.631041][ T8319] veth0_macvtap: entered promiscuous mode [ 588.731466][ T8319] veth1_macvtap: entered promiscuous mode [ 589.019138][ T8416] fscrypt (loop1): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 589.039653][ T8420] fscrypt (loop1): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 589.086096][ T8319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.327949][ T8319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.574193][ T3015] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.593329][ T8428] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.629877][ T8428] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.726807][ T8428] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.846545][ T5817] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 591.494740][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 591.751299][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.764681][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.775674][ T24] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 591.785157][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.896453][ T24] usb 9-1: config 0 descriptor?? [ 592.375163][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 592.381806][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 592.467763][ T24] usb 9-1: USB disconnect, device number 2 [ 593.760704][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 593.974230][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.985821][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.001250][ T24] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 594.014413][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.208520][ T24] usb 2-1: config 0 descriptor?? [ 594.722913][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 594.733399][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 594.838360][ T24] usb 2-1: USB disconnect, device number 9 [ 596.396672][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 596.459779][ T8480] loop8: detected capacity change from 0 to 512 [ 596.531456][ T8480] EXT4-fs (loop8): Test dummy encryption mode enabled [ 596.595947][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.607405][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.617761][ T24] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 596.627362][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.809845][ T8480] EXT4-fs (loop8): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.951874][ T24] usb 2-1: config 0 descriptor?? [ 597.286285][ T8480] fscrypt (loop8): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 597.406685][ T8488] fscrypt (loop8): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 597.495304][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 597.502091][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 597.659420][ T24] usb 2-1: USB disconnect, device number 10 [ 598.141951][ T8246] EXT4-fs (loop8): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 598.322679][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.329681][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.459622][ T8517] loop8: detected capacity change from 0 to 16 [ 600.510330][ T8517] erofs (device loop8): mounted with root inode @ nid 36. [ 600.634511][ T4078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.653494][ T4078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.251552][ T8430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.261496][ T8430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.550423][ T8521] tipc: Started in network mode [ 601.555976][ T8521] tipc: Node identity ac141413, cluster identity 4711 [ 601.571130][ T8521] tipc: Enabling of bearer rejected, failed to enable media [ 604.180052][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 604.398099][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.856'. [ 604.459489][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.471074][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.481545][ T24] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 604.491127][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.696555][ T24] usb 10-1: config 0 descriptor?? [ 605.414808][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 605.421538][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 605.485445][ T24] usb 10-1: USB disconnect, device number 2 [ 609.255157][ T8557] netlink: 'syz.2.863': attribute type 13 has an invalid length. [ 612.461012][ T5892] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 612.705681][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.717652][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.729657][ T5892] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 612.739645][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.966308][ T5892] usb 3-1: config 0 descriptor?? [ 613.637979][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 613.644736][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 613.728460][ T5892] usb 3-1: USB disconnect, device number 11 [ 615.292486][ T30] audit: type=1326 audit(1763220726.320:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 615.317721][ T30] audit: type=1326 audit(1763220726.320:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 615.341076][ T30] audit: type=1326 audit(1763220726.320:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=225 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 615.365275][ T30] audit: type=1326 audit(1763220726.320:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 615.388163][ T30] audit: type=1326 audit(1763220726.330:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 615.610400][ T8593] loop8: detected capacity change from 0 to 512 [ 615.737407][ T8593] EXT4-fs: Ignoring removed nobh option [ 615.919426][ T8593] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #15: comm syz.8.878: corrupted in-inode xattr: e_value size too large [ 616.055088][ T8593] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.878: couldn't read orphan inode 15 (err -117) [ 616.127514][ T8593] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.889093][ T8246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.057217][ T5892] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 618.421939][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.433620][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.444042][ T5892] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 618.453600][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.774922][ T30] audit: type=1326 audit(1763220729.790:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7fc00000 [ 618.790763][ T4403] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.847791][ T5892] usb 3-1: config 0 descriptor?? [ 619.082953][ T4403] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.498166][ T4403] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.565876][ T8617] UHID_CREATE from different security context by process 33 (syz.8.883), this is not allowed. [ 619.607541][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 619.620577][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 619.682842][ T5892] usb 3-1: USB disconnect, device number 12 [ 619.776818][ T8619] 9pnet_fd: Insufficient options for proto=fd [ 619.880895][ T4403] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.391316][ T8622] loop1: detected capacity change from 0 to 256 [ 620.877007][ T4403] bridge_slave_1: left allmulticast mode [ 620.882933][ T4403] bridge_slave_1: left promiscuous mode [ 620.889856][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.976645][ T8624] loop9: detected capacity change from 0 to 2048 [ 620.986754][ T8626] loop8: detected capacity change from 0 to 2048 [ 621.106706][ T4403] bridge_slave_0: left allmulticast mode [ 621.112600][ T4403] bridge_slave_0: left promiscuous mode [ 621.119498][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.144588][ T8622] FAT-fs (loop1): Directory bread(block 64) failed [ 621.154948][ T8622] FAT-fs (loop1): Directory bread(block 65) failed [ 621.161907][ T8622] FAT-fs (loop1): Directory bread(block 66) failed [ 621.170151][ T8622] FAT-fs (loop1): Directory bread(block 67) failed [ 621.177282][ T8622] FAT-fs (loop1): Directory bread(block 68) failed [ 621.184185][ T8622] FAT-fs (loop1): Directory bread(block 69) failed [ 621.191069][ T8622] FAT-fs (loop1): Directory bread(block 70) failed [ 621.200337][ T8622] FAT-fs (loop1): Directory bread(block 71) failed [ 621.207852][ T8622] FAT-fs (loop1): Directory bread(block 72) failed [ 621.214700][ T8622] FAT-fs (loop1): Directory bread(block 73) failed [ 621.287992][ T8626] Alternate GPT is invalid, using primary GPT. [ 621.295591][ T8626] loop8: p1 p2 p3 [ 621.299540][ T8626] loop8: partition table partially beyond EOD, truncated [ 621.359785][ T8624] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.375016][ T8624] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.411147][ T30] audit: type=1326 audit(1763220732.400:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 621.734568][ T30] audit: type=1326 audit(1763220732.750:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 621.768384][ T30] audit: type=1326 audit(1763220732.750:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 621.791589][ T30] audit: type=1326 audit(1763220732.750:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 622.555423][ T8319] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.925231][ T4403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.972354][ T8640] loop2: detected capacity change from 0 to 512 [ 623.016378][ T4403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.072312][ T8640] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 623.082024][ T8640] EXT4-fs (loop2): blocks per group (3008) and clusters per group (32768) inconsistent [ 623.109579][ T4403] bond0 (unregistering): Released all slaves [ 623.330913][ T8640] loop2: detected capacity change from 0 to 512 [ 623.437042][ T8640] EXT4-fs: inline encryption not supported [ 623.443166][ T8640] EXT4-fs: Ignoring removed oldalloc option [ 623.832122][ T8649] netlink: 100 bytes leftover after parsing attributes in process `syz.2.896'. [ 624.406471][ T4403] hsr_slave_0: left promiscuous mode [ 624.464316][ T4403] hsr_slave_1: left promiscuous mode [ 624.472513][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.483333][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.609574][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.617866][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.813020][ T4403] veth1_macvtap: left promiscuous mode [ 624.818989][ T4403] veth0_macvtap: left promiscuous mode [ 624.826192][ T4403] veth1_vlan: left promiscuous mode [ 625.508992][ T8079] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 625.695914][ T8176] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 625.877161][ T8079] usb 2-1: unable to get BOS descriptor or descriptor too short [ 625.934254][ T8079] usb 2-1: no configurations [ 625.941487][ T8079] usb 2-1: can't read configurations, error -22 [ 626.470660][ T4403] team0 (unregistering): Port device team_slave_1 removed [ 626.519252][ T4403] team0 (unregistering): Port device team_slave_0 removed [ 630.463253][ T3792] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.604579][ T3792] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.809801][ T3792] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.991966][ T3792] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.252201][ T30] audit: type=1326 audit(1763220742.290:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 631.278101][ T30] audit: type=1326 audit(1763220742.330:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 631.301602][ T30] audit: type=1326 audit(1763220742.330:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 631.326725][ T30] audit: type=1326 audit(1763220742.330:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 631.621067][ T8698] loop7: detected capacity change from 0 to 512 [ 631.692091][ T8702] netlink: 48 bytes leftover after parsing attributes in process `syz.9.917'. [ 631.777770][ T30] audit: type=1326 audit(1763220742.550:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 631.804986][ T30] audit: type=1326 audit(1763220742.550:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 631.859046][ T3792] bridge_slave_1: left allmulticast mode [ 631.865769][ T3792] bridge_slave_1: left promiscuous mode [ 631.872466][ T3792] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.926396][ T3792] bridge_slave_0: left allmulticast mode [ 631.932547][ T3792] bridge_slave_0: left promiscuous mode [ 631.939391][ T3792] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.180051][ T8698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.195857][ T8698] ext4 filesystem being mounted at /21/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.267701][ T8698] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.915: corrupted inode contents [ 632.444563][ T8698] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.915: mark_inode_dirty error [ 632.499402][ T8698] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.915: corrupted inode contents [ 632.545146][ T8698] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.915: mark_inode_dirty error [ 633.461709][ T3792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.563277][ T3792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.624055][ T3792] bond0 (unregistering): Released all slaves [ 633.778406][ T8214] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.520667][ T3792] hsr_slave_0: left promiscuous mode [ 634.548480][ T3792] hsr_slave_1: left promiscuous mode [ 634.557075][ T3792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.569725][ T3792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.644923][ T3792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.652562][ T3792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.818421][ T3792] veth1_macvtap: left promiscuous mode [ 634.824512][ T3792] veth0_macvtap: left promiscuous mode [ 634.830429][ T3792] veth1_vlan: left promiscuous mode [ 634.836262][ T3792] veth0_vlan: left promiscuous mode [ 634.882201][ T8723] netlink: 20 bytes leftover after parsing attributes in process `syz.7.923'. [ 635.309720][ T8727] loop7: detected capacity change from 0 to 512 [ 635.654232][ T30] audit: type=1107 audit(1763220746.620:321): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 636.580749][ T8727] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 637.149952][ T8727] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.163626][ T8727] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.210745][ T3792] team0 (unregistering): Port device team_slave_1 removed [ 637.353565][ T3792] team0 (unregistering): Port device team_slave_0 removed [ 637.562236][ T8727] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 638.154396][ T8746] netlink: 148 bytes leftover after parsing attributes in process `syz.9.933'. [ 639.002364][ T8753] loop1: detected capacity change from 0 to 512 [ 639.047448][ T8753] EXT4-fs: Ignoring removed oldalloc option [ 639.084038][ T8753] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 639.104383][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 639.139143][ T8753] EXT4-fs (loop1): 1 truncate cleaned up [ 639.151700][ T8753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.325429][ T24] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 639.335003][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.347158][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.360859][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 639.377112][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 639.387158][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.444688][ T24] usb 9-1: config 0 descriptor?? [ 639.849130][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.976232][ T24] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 640.144743][ T24] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 640.237637][ T5892] usb 9-1: USB disconnect, device number 3 [ 641.527658][ T8767] netlink: 76 bytes leftover after parsing attributes in process `syz.8.942'. [ 643.911373][ T8782] loop9: detected capacity change from 0 to 512 [ 643.953597][ T8782] EXT4-fs: Ignoring removed oldalloc option [ 643.987970][ T8214] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.040572][ T8782] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 644.216587][ T8782] EXT4-fs (loop9): 1 truncate cleaned up [ 644.224908][ T8782] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.767619][ T8319] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.270699][ T8797] loop9: detected capacity change from 0 to 256 [ 645.305581][ T8798] netlink: 'syz.2.954': attribute type 30 has an invalid length. [ 646.784168][ T8813] loop8: detected capacity change from 0 to 1024 [ 646.860160][ T8815] loop9: detected capacity change from 0 to 512 [ 646.911922][ T8815] EXT4-fs: Ignoring removed oldalloc option [ 646.925824][ T8815] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 646.984917][ T8813] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.021815][ T8815] EXT4-fs (loop9): 1 truncate cleaned up [ 647.032054][ T8815] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.104237][ T8813] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #15: comm syz.8.962: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 647.242713][ T8430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.417146][ T8430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.444353][ T8319] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.496824][ T8246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.573162][ T8430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.761320][ T8430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.913117][ T8827] ===================================================== [ 647.920616][ T8827] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 647.929182][ T8827] bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 647.935270][ T8827] do_xdp_generic+0xd52/0x1690 [ 647.940270][ T8827] tun_get_user+0x45c0/0x6d70 [ 647.945322][ T8827] tun_chr_write_iter+0x3e9/0x5c0 [ 647.950601][ T8827] vfs_write+0xbe2/0x15d0 [ 647.955324][ T8827] __ia32_sys_write+0x1f9/0x4d0 [ 647.960378][ T8827] ia32_sys_call+0x35bc/0x4310 [ 647.965572][ T8827] __do_fast_syscall_32+0xb0/0x150 [ 647.970932][ T8827] do_fast_syscall_32+0x38/0x80 [ 647.976150][ T8827] do_SYSENTER_32+0x1f/0x30 [ 647.980876][ T8827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 647.987669][ T8827] [ 647.990085][ T8827] Uninit was stored to memory at: [ 647.995562][ T8827] pskb_expand_head+0x310/0x1610 [ 648.000743][ T8827] do_xdp_generic+0xa79/0x1690 [ 648.005930][ T8827] tun_get_user+0x45c0/0x6d70 [ 648.010824][ T8827] tun_chr_write_iter+0x3e9/0x5c0 [ 648.016211][ T8827] vfs_write+0xbe2/0x15d0 [ 648.020715][ T8827] __ia32_sys_write+0x1f9/0x4d0 [ 648.025922][ T8827] ia32_sys_call+0x35bc/0x4310 [ 648.030923][ T8827] __do_fast_syscall_32+0xb0/0x150 [ 648.036425][ T8827] do_fast_syscall_32+0x38/0x80 [ 648.041526][ T8827] do_SYSENTER_32+0x1f/0x30 [ 648.046415][ T8827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.052972][ T8827] [ 648.055507][ T8827] Uninit was created at: [ 648.060181][ T8827] __kmalloc_node_track_caller_noprof+0xb4b/0x1ba0 [ 648.067099][ T8827] kmalloc_reserve+0x22f/0x4b0 [ 648.072072][ T8827] __alloc_skb+0x347/0x7d0 [ 648.076850][ T8827] alloc_skb_with_frags+0xc5/0xa60 [ 648.082182][ T8827] sock_alloc_send_pskb+0xacc/0xc60 [ 648.087782][ T8827] tun_get_user+0x1142/0x6d70 [ 648.092665][ T8827] tun_chr_write_iter+0x3e9/0x5c0 [ 648.098056][ T8827] vfs_write+0xbe2/0x15d0 [ 648.102545][ T8827] __ia32_sys_write+0x1f9/0x4d0 [ 648.107706][ T8827] ia32_sys_call+0x35bc/0x4310 [ 648.112713][ T8827] __do_fast_syscall_32+0xb0/0x150 [ 648.118242][ T8827] do_fast_syscall_32+0x38/0x80 [ 648.123328][ T8827] do_SYSENTER_32+0x1f/0x30 [ 648.128225][ T8827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.134908][ T8827] [ 648.137378][ T8827] CPU: 1 UID: 0 PID: 8827 Comm: syz.1.967 Not tainted syzkaller #0 PREEMPT(none) [ 648.146924][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.157290][ T8827] ===================================================== [ 648.164456][ T8827] Disabling lock debugging due to kernel taint [ 648.170739][ T8827] Kernel panic - not syncing: kmsan.panic set ... [ 648.177318][ T8827] CPU: 1 UID: 0 PID: 8827 Comm: syz.1.967 Tainted: G B syzkaller #0 PREEMPT(none) [ 648.188307][ T8827] Tainted: [B]=BAD_PAGE [ 648.192570][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.202794][ T8827] Call Trace: [ 648.206198][ T8827] [ 648.209249][ T8827] __dump_stack+0x26/0x30 [ 648.213799][ T8827] dump_stack_lvl+0x53/0x270 [ 648.218640][ T8827] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 648.224684][ T8827] dump_stack+0x1e/0x25 [ 648.229144][ T8827] vpanic+0x435/0xd30 [ 648.233370][ T8827] panic+0x15d/0x160 [ 648.237530][ T8827] kmsan_report+0x31c/0x320 [ 648.242241][ T8827] ? __msan_warning+0x1b/0x30 [ 648.247099][ T8827] ? bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 648.253246][ T8827] ? do_xdp_generic+0xd52/0x1690 [ 648.258415][ T8827] ? tun_get_user+0x45c0/0x6d70 [ 648.263501][ T8827] ? tun_chr_write_iter+0x3e9/0x5c0 [ 648.268929][ T8827] ? vfs_write+0xbe2/0x15d0 [ 648.273602][ T8827] ? __ia32_sys_write+0x1f9/0x4d0 [ 648.278802][ T8827] ? ia32_sys_call+0x35bc/0x4310 [ 648.283953][ T8827] ? __do_fast_syscall_32+0xb0/0x150 [ 648.289471][ T8827] ? do_fast_syscall_32+0x38/0x80 [ 648.294698][ T8827] ? do_SYSENTER_32+0x1f/0x30 [ 648.299605][ T8827] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.306307][ T8827] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 648.312299][ T8827] ? ___bpf_prog_run+0xea65/0xeba0 [ 648.317599][ T8827] ? __bpf_prog_run32+0xc2/0xf0 [ 648.322631][ T8827] ? kmsan_get_metadata+0xfb/0x160 [ 648.327939][ T8827] __msan_warning+0x1b/0x30 [ 648.332593][ T8827] bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 648.338584][ T8827] do_xdp_generic+0xd52/0x1690 [ 648.343554][ T8827] ? tun_get_user+0x40d1/0x6d70 [ 648.348576][ T8827] ? filter_irq_stacks+0x49/0x190 [ 648.353821][ T8827] ? kmsan_get_metadata+0xfb/0x160 [ 648.359126][ T8827] ? tun_get_user+0x453f/0x6d70 [ 648.364163][ T8827] tun_get_user+0x45c0/0x6d70 [ 648.369057][ T8827] ? stack_depot_save_flags+0x35/0x7b0 [ 648.374689][ T8827] ? kmsan_get_metadata+0xfb/0x160 [ 648.379980][ T8827] ? kmsan_get_metadata+0xfb/0x160 [ 648.385260][ T8827] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 648.391834][ T8827] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 648.398183][ T8827] tun_chr_write_iter+0x3e9/0x5c0 [ 648.403415][ T8827] vfs_write+0xbe2/0x15d0 [ 648.407916][ T8827] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 648.413663][ T8827] __ia32_sys_write+0x1f9/0x4d0 [ 648.418729][ T8827] ia32_sys_call+0x35bc/0x4310 [ 648.423702][ T8827] __do_fast_syscall_32+0xb0/0x150 [ 648.429045][ T8827] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 648.434968][ T8827] do_fast_syscall_32+0x38/0x80 [ 648.440018][ T8827] do_SYSENTER_32+0x1f/0x30 [ 648.444720][ T8827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.451253][ T8827] RIP: 0023:0xf709d539 [ 648.455446][ T8827] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 648.475224][ T8827] RSP: 002b:00000000f548d520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 648.483843][ T8827] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000240 [ 648.491961][ T8827] RDX: 000000000000fdef RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 648.500063][ T8827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 648.508153][ T8827] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 648.516252][ T8827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.524381][ T8827] [ 648.527692][ T8827] Kernel Offset: disabled [ 648.532098][ T8827] Rebooting in 86400 seconds..