last executing test programs: 8.58825369s ago: executing program 4 (id=609): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 6.627745079s ago: executing program 4 (id=618): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2a400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_vif\x00') ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f00000001c0)) 5.387374345s ago: executing program 0 (id=623): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000)={[{@noblock_validity}, {@barrier}]}, 0x0, 0x517, &(0x7f00000000c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = geteuid() quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000680)=@loop={'/dev/loop', 0x0}, r3, &(0x7f00000006c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) userfaultfd(0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa2020078e06838e4fe1de868ed3f235ed887520000000007020000f8ffffffb70338d999000000b70400000000000085000600030000009500000000800000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000054c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000029000000360000005c0000000000000014000000000000002900000008000000070000000000000024000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="11d7c66881000000"], 0x58}}], 0x1, 0x40000000) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=""/4096, 0x1000}, 0xfffffffa}], 0x1, 0x0, 0x0) 4.769197477s ago: executing program 3 (id=627): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x894a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYBLOB, @ANYBLOB], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000004000080040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r5, &(0x7f0000000480), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) prlimit64(r1, 0xe, &(0x7f0000000080)={0x3, 0x8}, &(0x7f0000000280)) lseek(0xffffffffffffffff, 0x2000, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.727523145s ago: executing program 0 (id=630): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40007}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.727205586s ago: executing program 4 (id=631): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.642751076s ago: executing program 0 (id=632): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.564816345s ago: executing program 1 (id=634): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)) memfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1008002, &(0x7f0000000d80)={[{@inlinecrypt}, {@sysvgroups}, {@resuid}, {@commit={'commit', 0x3d, 0x3}}, {@data_ordered}, {@data_err_ignore}, {@nomblk_io_submit}, {@noauto_da_alloc}], [{@fowner_eq}, {@subj_type={'subj_type', 0x3d, '@%'}}]}, 0x0, 0x5ee, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)={0x3, 0x0, [{0x4000, 0x50, &(0x7f0000000340)=""/80}, {0xeeee8000, 0xd7, &(0x7f0000000c00)=""/215}, {0x5000, 0xa1, &(0x7f0000000e40)=""/161}]}) r6 = socket(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x10, 0x5}, {0x6, 0xc}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x4, 0x0, 0x1, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x8, 0xc, 0x487, 0x0, 0xae92, 0xfab8}}, {0x4}}]}]}, 0x68}}, 0x0) 3.353692437s ago: executing program 3 (id=635): ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df0000000000000109022400010000100009040008020300000009210000ff0122070009058103ff03"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, 'j'}, @main=@item_4={0x3, 0x0, 0x9, "5f72be78"}]}}, 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 3.286871381s ago: executing program 4 (id=636): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1e8301, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x100, 0x3, 0x41}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x2edb, &(0x7f0000000240)={0x0, 0xbe44, 0x10000, 0xffffffff, 0x2be, 0x0, r2}, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r3, r4, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) 2.659103661s ago: executing program 2 (id=638): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) sendto$inet(r2, &(0x7f0000000640)="6c83ca07", 0x4, 0x20000840, 0x0, 0x0) 2.613013992s ago: executing program 2 (id=639): r0 = socket$nl_route(0x10, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x42, 0x0, 0x1}, 0x18) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x7006000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmmsg$inet(r0, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfae21000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) 2.50986765s ago: executing program 2 (id=640): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000)={[{@noblock_validity}, {@barrier}]}, 0x0, 0x517, &(0x7f00000000c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = geteuid() quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000680)=@loop={'/dev/loop', 0x0}, r3, &(0x7f00000006c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) userfaultfd(0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa2020078e06838e4fe1de868ed3f235ed887520000000007020000f8ffffffb70338d999000000b70400000000000085000600030000009500000000800000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000054c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000029000000360000005c0000000000000014000000000000002900000008000000070000000000000024000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="11d7c66881000000"], 0x58}}], 0x1, 0x40000000) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=""/4096, 0x1000}, 0xfffffffa}], 0x1, 0x0, 0x0) 2.485567145s ago: executing program 1 (id=641): r0 = socket(0xa, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'sit0\x00', 0x27ad6d9f}) 2.453193969s ago: executing program 4 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) 2.428545277s ago: executing program 1 (id=643): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000005500)={0x3, 0x0, 0x0, &(0x7f0000005480)=[{0x0}, {0x0}, {0x0}], &(0x7f00000054c0)=[0x5]}, 0x20) 2.338895158s ago: executing program 3 (id=644): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000200"], &(0x7f0000000040)=""/202, 0x42, 0xca, 0x1}, 0x28) 2.338701302s ago: executing program 1 (id=645): r0 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, 0x0, &(0x7f0000000340)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) 2.106863718s ago: executing program 3 (id=646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e21, @remote}}) 1.646477836s ago: executing program 2 (id=647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x80002, 0x0) sendmsg(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) 1.000943615s ago: executing program 1 (id=648): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=r0]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.000683571s ago: executing program 0 (id=649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) sendto$inet(r2, &(0x7f0000000640)="6c83ca07", 0x4, 0x20000840, 0x0, 0x0) 1.000131748s ago: executing program 3 (id=650): r0 = socket$nl_route(0x10, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x42, 0x0, 0x1}, 0x18) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x7006000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmmsg$inet(r0, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) 957.65048ms ago: executing program 3 (id=651): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)) memfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1008002, &(0x7f0000000d80)={[{@inlinecrypt}, {@sysvgroups}, {@resuid}, {@commit={'commit', 0x3d, 0x3}}, {@data_ordered}, {@data_err_ignore}, {@nomblk_io_submit}, {@noauto_da_alloc}], [{@fowner_eq}, {@subj_type={'subj_type', 0x3d, '@%'}}]}, 0x0, 0x5ee, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)={0x3, 0x0, [{0x4000, 0x50, &(0x7f0000000340)=""/80}, {0xeeee8000, 0xd7, &(0x7f0000000c00)=""/215}, {0x5000, 0xa1, &(0x7f0000000e40)=""/161}]}) r6 = socket(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x10, 0x5}, {0x6, 0xc}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x4, 0x0, 0x1, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x8, 0xc, 0x487, 0x0, 0xae92, 0xfab8}}, {0x4}}]}]}, 0x68}}, 0x0) 910.975539ms ago: executing program 4 (id=652): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1e8301, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x100, 0x3, 0x41}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x2edb, &(0x7f0000000240)={0x0, 0xbe44, 0x10000, 0xffffffff, 0x2be, 0x0, r2}, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r3, r4, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) 839.807986ms ago: executing program 1 (id=653): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)={0x27c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8b7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf78}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe8b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd55}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2863}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xb, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x95}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4ae90e00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000091) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) 409.612667ms ago: executing program 2 (id=654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) gettid() timer_create(0x0, 0x0, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 291.086947ms ago: executing program 2 (id=655): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0xfffffffc, 0x8}, 0x70bd2a, 0x3500, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 16.510236ms ago: executing program 0 (id=656): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000200"], &(0x7f0000000040)=""/202, 0x42, 0xca, 0x1}, 0x28) 0s ago: executing program 0 (id=657): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000)={[{@noblock_validity}, {@barrier}]}, 0x0, 0x517, &(0x7f00000000c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = geteuid() quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000680)=@loop={'/dev/loop', 0x0}, r3, &(0x7f00000006c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) userfaultfd(0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa2020078e06838e4fe1de868ed3f235ed887520000000007020000f8ffffffb70338d999000000b70400000000000085000600030000009500000000800000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000054c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000029000000360000005c0000000000000014000000000000002900000008000000070000000000000024000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="11d7c66881000000"], 0x58}}], 0x1, 0x40000000) recvmmsg(0xffffffffffffffff, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=""/4096, 0x1000}, 0xfffffffa}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 30.397694][ T6517] cgroup: Unknown subsys name 'net' [ 30.535101][ T6517] cgroup: Unknown subsys name 'cpuset' [ 30.536951][ T6517] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.667028][ T6517] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 31.782554][ T6529] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.795786][ T6541] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.797563][ T6541] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.798367][ T6543] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.798766][ T6543] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.798930][ T6543] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.799222][ T6543] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.799436][ T6543] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.799753][ T6543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.800470][ T6540] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.800655][ T6541] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.800875][ T6543] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.801178][ T6541] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.801304][ T6541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.801506][ T6543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.801545][ T6541] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.802525][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.802577][ T6543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.802727][ T6541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.808109][ T6541] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.808324][ T6541] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.824596][ T6540] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.825969][ T6540] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.828233][ T6540] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.829724][ T6540] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.969857][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 31.987700][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 32.007503][ T6535] chnl_net:caif_netlink_parms(): no params data found [ 32.072713][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.074574][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.075810][ T6527] bridge_slave_0: entered allmulticast mode [ 32.076528][ T6527] bridge_slave_0: entered promiscuous mode [ 32.079698][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.079757][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.079841][ T6533] bridge_slave_0: entered allmulticast mode [ 32.080265][ T6533] bridge_slave_0: entered promiscuous mode [ 32.084880][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.084920][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.084984][ T6533] bridge_slave_1: entered allmulticast mode [ 32.085415][ T6533] bridge_slave_1: entered promiscuous mode [ 32.086352][ T6534] chnl_net:caif_netlink_parms(): no params data found [ 32.093031][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.093084][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.093141][ T6527] bridge_slave_1: entered allmulticast mode [ 32.095851][ T6527] bridge_slave_1: entered promiscuous mode [ 32.122304][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.122362][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.122443][ T6535] bridge_slave_0: entered allmulticast mode [ 32.123278][ T6535] bridge_slave_0: entered promiscuous mode [ 32.125045][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.125061][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.125108][ T6535] bridge_slave_1: entered allmulticast mode [ 32.125535][ T6535] bridge_slave_1: entered promiscuous mode [ 32.138646][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.146729][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.148768][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.149792][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.151006][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.169494][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.189890][ T6535] team0: Port device team_slave_0 added [ 32.190979][ T6535] team0: Port device team_slave_1 added [ 32.192269][ T6533] team0: Port device team_slave_0 added [ 32.192988][ T6533] team0: Port device team_slave_1 added [ 32.202098][ T6527] team0: Port device team_slave_0 added [ 32.208866][ T6528] chnl_net:caif_netlink_parms(): no params data found [ 32.210304][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.210314][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.210327][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.211185][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.211194][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.211206][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.229466][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.230712][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.231962][ T6534] bridge_slave_0: entered allmulticast mode [ 32.233317][ T6534] bridge_slave_0: entered promiscuous mode [ 32.235769][ T6527] team0: Port device team_slave_1 added [ 32.245978][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.246002][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.246016][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.246627][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.246637][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.246650][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.246992][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.247066][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.247201][ T6534] bridge_slave_1: entered allmulticast mode [ 32.247807][ T6534] bridge_slave_1: entered promiscuous mode [ 32.260392][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.260404][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.260417][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.272244][ T6535] hsr_slave_0: entered promiscuous mode [ 32.273861][ T6535] hsr_slave_1: entered promiscuous mode [ 32.279705][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.279732][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.279759][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.282440][ T6534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.293272][ T6534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.311744][ T6534] team0: Port device team_slave_0 added [ 32.327014][ T6527] hsr_slave_0: entered promiscuous mode [ 32.328369][ T6527] hsr_slave_1: entered promiscuous mode [ 32.328715][ T6527] debugfs: 'hsr0' already exists in 'hsr' [ 32.328754][ T6527] Cannot create hsr debugfs directory [ 32.329843][ T6534] team0: Port device team_slave_1 added [ 32.347867][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.347895][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.347907][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.348157][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.348216][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.348269][ T6528] bridge_slave_0: entered allmulticast mode [ 32.348708][ T6528] bridge_slave_0: entered promiscuous mode [ 32.349792][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.349813][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.349858][ T6528] bridge_slave_1: entered allmulticast mode [ 32.350299][ T6528] bridge_slave_1: entered promiscuous mode [ 32.354525][ T6533] hsr_slave_0: entered promiscuous mode [ 32.354847][ T6533] hsr_slave_1: entered promiscuous mode [ 32.355402][ T6533] debugfs: 'hsr0' already exists in 'hsr' [ 32.355414][ T6533] Cannot create hsr debugfs directory [ 32.357076][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.357085][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.357098][ T6534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.395767][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.413360][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.447852][ T6534] hsr_slave_0: entered promiscuous mode [ 32.448533][ T6534] hsr_slave_1: entered promiscuous mode [ 32.448718][ T6534] debugfs: 'hsr0' already exists in 'hsr' [ 32.448728][ T6534] Cannot create hsr debugfs directory [ 32.449354][ T6528] team0: Port device team_slave_0 added [ 32.450463][ T6528] team0: Port device team_slave_1 added [ 32.473142][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.473167][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.473183][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.474167][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.474173][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.474185][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.517952][ T6528] hsr_slave_0: entered promiscuous mode [ 32.519363][ T6528] hsr_slave_1: entered promiscuous mode [ 32.520691][ T6528] debugfs: 'hsr0' already exists in 'hsr' [ 32.521844][ T6528] Cannot create hsr debugfs directory [ 32.547321][ T6535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.556469][ T6535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.559383][ T6535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.563232][ T6535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.604539][ T6527] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.606782][ T6527] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.611979][ T6527] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.618205][ T6527] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.621467][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.621520][ T6535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.621774][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.621798][ T6535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.637632][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.637674][ T6527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.637767][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.637796][ T6527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.653318][ T6533] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.658418][ T6533] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.660942][ T6533] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.663124][ T6533] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.691506][ T6534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.693871][ T6534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.697571][ T6534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.700137][ T6534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.713032][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.713076][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.713149][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.713174][ T6533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.729377][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.735300][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.735346][ T6534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.735407][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.735526][ T6534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.744512][ T6535] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.758850][ T2104] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.760367][ T2104] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.761899][ T2104] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.763188][ T2104] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.770081][ T2104] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.772435][ T2104] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.799794][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.806788][ T6534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.814190][ T6528] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.817367][ T6528] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.823152][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.829486][ T6534] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.834697][ T6528] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.838041][ T6528] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.848545][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.848592][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.857519][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.860083][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.860122][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.860448][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.860463][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.873070][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.873114][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.891131][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.897433][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.897484][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.906045][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.906090][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.912642][ T6527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.914433][ T6527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.925889][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.946794][ T6535] veth0_vlan: entered promiscuous mode [ 32.949927][ T6535] veth1_vlan: entered promiscuous mode [ 32.976638][ T6535] veth0_macvtap: entered promiscuous mode [ 32.977951][ T6535] veth1_macvtap: entered promiscuous mode [ 33.000072][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.004460][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.008523][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.012176][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.012245][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.012270][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.012284][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.020710][ T6528] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.035694][ T4569] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.035746][ T4569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.036244][ T4569] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.036259][ T4569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.062393][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.072227][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.104952][ T2104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.104985][ T2104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.112895][ T6534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.121914][ T6527] veth0_vlan: entered promiscuous mode [ 33.123411][ T6527] veth1_vlan: entered promiscuous mode [ 33.148383][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.148411][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.158440][ T6533] veth0_vlan: entered promiscuous mode [ 33.171857][ T6527] veth0_macvtap: entered promiscuous mode [ 33.181512][ T6527] veth1_macvtap: entered promiscuous mode [ 33.182674][ T6533] veth1_vlan: entered promiscuous mode [ 33.187266][ T6535] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.189928][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.203094][ T6534] veth0_vlan: entered promiscuous mode [ 33.206619][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.207643][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.221306][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.221517][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.221532][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.221546][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.225366][ T6637] binder: BINDER_SET_CONTEXT_MGR already set [ 33.225375][ T6637] binder: 6635:6637 ioctl 4018620d 20000040 returned -16 [ 33.225592][ T6637] binder: 6635:6637 got transaction to invalid handle, 1 [ 33.225612][ T6637] binder: 6635:6637 cannot find target node [ 33.225619][ T6637] binder: 6635:6637 transaction async to 0:0 failed 3/29201/-22, code 0 size 0-0 line 3151 [ 33.229885][ T6606] binder: undelivered TRANSACTION_ERROR: 29201 [ 33.241981][ T6534] veth1_vlan: entered promiscuous mode [ 33.255192][ T6639] binder: 6638:6639 cannot find target node [ 33.256314][ T6639] binder: 6638:6639 transaction call to 0:0 failed 4/29189/-22, code 0 size 0-0 line 3151 [ 33.259252][ T6592] binder: undelivered TRANSACTION_ERROR: 29189 [ 33.285881][ T6534] veth0_macvtap: entered promiscuous mode [ 33.286881][ T6534] veth1_macvtap: entered promiscuous mode [ 33.289902][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.297621][ T6643] loop2: detected capacity change from 0 to 512 [ 33.307932][ T6643] EXT4-fs (loop2): Test dummy encryption mode enabled [ 33.307971][ T6643] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 33.320833][ T2104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.322272][ T2104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.339445][ T6533] veth0_macvtap: entered promiscuous mode [ 33.341547][ T6533] veth1_macvtap: entered promiscuous mode [ 33.352339][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.358688][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.366940][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.390411][ T2104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.394734][ T4569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.394762][ T4569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.397818][ T2104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.397859][ T2104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.397891][ T2104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.397917][ T2104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.397935][ T2104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.397951][ T2104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.397968][ T2104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.481662][ T6528] veth0_vlan: entered promiscuous mode [ 33.483211][ T6528] veth1_vlan: entered promiscuous mode [ 33.528745][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.528774][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.538602][ T6655] loop1: detected capacity change from 0 to 128 [ 33.550388][ T6655] EXT4-fs: Ignoring removed nobh option [ 33.578533][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.578566][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.584959][ T6528] veth0_macvtap: entered promiscuous mode [ 33.586046][ T6528] veth1_macvtap: entered promiscuous mode [ 33.591038][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.592053][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.602789][ T6655] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.611787][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.612834][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.612979][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.613066][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.617117][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.617129][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.273920][ T6529] Bluetooth: hci4: command tx timeout [ 34.274150][ T6529] Bluetooth: hci3: command tx timeout [ 34.274364][ T6529] Bluetooth: hci2: command tx timeout [ 34.274540][ T6529] Bluetooth: hci0: command tx timeout [ 34.274712][ T6529] Bluetooth: hci1: command tx timeout [ 34.687979][ T6527] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.735507][ T6668] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.774437][ T1576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.775812][ T1576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.891726][ T6670] loop1: detected capacity change from 0 to 40427 [ 34.908998][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.909035][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.923741][ T6670] F2FS-fs (loop1): Invalid log blocks per segment (83886089) [ 34.923808][ T6670] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 34.928641][ T6670] F2FS-fs (loop1): invalid crc value [ 34.941904][ T6670] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 34.945338][ T6670] F2FS-fs (loop1): Start checkpoint disabled! [ 34.951606][ T6670] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 34.951668][ T6670] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 35.031637][ T4569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.032979][ T4569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.048401][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.066976][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.148767][ T6685] loop3: detected capacity change from 0 to 16 [ 35.163320][ T6685] erofs (device loop3): mounted with root inode @ nid 36. [ 35.901981][ T6692] loop3: detected capacity change from 0 to 128 [ 35.902703][ T6692] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.903359][ T6692] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.089587][ T6701] loop2: detected capacity change from 0 to 512 [ 36.103912][ T6701] EXT4-fs (loop2): Test dummy encryption mode enabled [ 36.103946][ T6701] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.103965][ T6701] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.142444][ T6701] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.18: bad orphan inode 131083 [ 36.380224][ T6532] Bluetooth: hci1: command tx timeout [ 36.380267][ T6532] Bluetooth: hci0: command tx timeout [ 36.380305][ T6532] Bluetooth: hci2: command tx timeout [ 36.380329][ T6532] Bluetooth: hci3: command tx timeout [ 36.380351][ T6532] Bluetooth: hci4: command tx timeout [ 36.396356][ T6701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.562844][ T6711] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 37.165576][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.796454][ T6719] loop3: detected capacity change from 0 to 40427 [ 37.798766][ T6719] F2FS-fs (loop3): build fault injection rate: 771 [ 37.800132][ T6719] F2FS-fs (loop3): invalid crc value [ 37.822347][ T6719] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 37.825653][ T6719] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 38.237491][ T6742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.237720][ T6742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.414183][ T6529] Bluetooth: hci4: command tx timeout [ 38.414394][ T6529] Bluetooth: hci3: command tx timeout [ 38.414465][ T6529] Bluetooth: hci2: command tx timeout [ 38.414522][ T6529] Bluetooth: hci0: command tx timeout [ 38.414576][ T6529] Bluetooth: hci1: command tx timeout [ 40.150106][ T6760] loop2: detected capacity change from 0 to 128 [ 40.151410][ T6760] EXT4-fs: Ignoring removed nobh option [ 40.160588][ T6760] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.316586][ T6767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.32'. [ 40.361832][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.362192][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.493782][ T6529] Bluetooth: hci0: command tx timeout [ 40.493823][ T6529] Bluetooth: hci2: command tx timeout [ 40.495821][ T6529] Bluetooth: hci3: command tx timeout [ 40.495858][ T6529] Bluetooth: hci4: command tx timeout [ 40.497760][ T6532] Bluetooth: hci1: command tx timeout [ 40.541987][ T6771] loop0: detected capacity change from 0 to 40427 [ 40.591108][ T6771] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 40.591827][ T6771] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 40.647149][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.649515][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.862100][ T6779] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.004853][ T6535] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.043080][ T14] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.045037][ T14] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.047338][ T14] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.048913][ T14] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.743443][ T6793] loop2: detected capacity change from 0 to 512 [ 41.747192][ T6793] EXT4-fs: Ignoring removed oldalloc option [ 41.753427][ T6793] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.40: corrupted in-inode xattr: e_value size too large [ 41.756432][ T6793] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.40: couldn't read orphan inode 15 (err -117) [ 41.761530][ T6793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.778603][ T6799] loop1: detected capacity change from 0 to 256 [ 41.984996][ T6801] wg2: entered promiscuous mode [ 41.985092][ T6801] wg2: entered allmulticast mode [ 42.332751][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.346105][ T6799] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.346137][ T6799] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 42.351744][ T6799] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 42.525088][ T6803] loop0: detected capacity change from 0 to 1024 [ 42.532433][ T6803] ======================================================= [ 42.532433][ T6803] WARNING: The mand mount option has been deprecated and [ 42.532433][ T6803] and is ignored by this kernel. Remove the mand [ 42.532433][ T6803] option from the mount to silence this warning. [ 42.532433][ T6803] ======================================================= [ 42.532509][ T6803] EXT4-fs: Ignoring removed orlov option [ 42.567519][ T6803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.072517][ T6813] netlink: 68 bytes leftover after parsing attributes in process `syz.0.39'. [ 43.146344][ T6812] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.39: Allocating blocks 497-513 which overlap fs metadata [ 43.150161][ T6813] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.39: Allocating blocks 497-513 which overlap fs metadata [ 43.189971][ T6817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.190149][ T6817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.301309][ T6820] Zero length message leads to an empty skb [ 44.116086][ T6534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.203470][ T6820] loop4: detected capacity change from 0 to 512 [ 44.304767][ T6820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.390316][ T6820] EXT4-fs (loop4): orphan cleanup on readonly fs [ 44.408249][ T6820] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.45: bg 0: block 248: padding at end of block bitmap is not set [ 44.528870][ T6820] Quota error (device loop4): write_blk: dquota write failed [ 44.529048][ T6820] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 44.529154][ T6820] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.45: Failed to acquire dquot type 1 [ 44.598477][ T6820] EXT4-fs (loop4): 1 truncate cleaned up [ 44.874041][ T6820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.517328][ T6845] loop0: detected capacity change from 0 to 512 [ 45.521449][ T6845] EXT4-fs: Ignoring removed oldalloc option [ 45.537406][ T6845] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.52: corrupted in-inode xattr: e_value size too large [ 45.537633][ T6845] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.52: couldn't read orphan inode 15 (err -117) [ 45.541896][ T6845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.844605][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 45.999201][ T6534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.167770][ T6528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.081239][ T6866] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 48.830153][ T6905] binder: 6904:6905 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 48.971813][ T6903] loop2: detected capacity change from 0 to 512 [ 48.972236][ T6903] EXT4-fs: Ignoring removed i_version option [ 48.972260][ T6903] EXT4-fs: Ignoring removed bh option [ 49.722987][ T6532] Bluetooth: hci0: command 0x080f tx timeout [ 49.768564][ T6920] loop0: detected capacity change from 0 to 512 [ 49.784391][ T6903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.808176][ T6920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.848536][ T6920] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.858276][ T6920] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.72: bg 0: block 248: padding at end of block bitmap is not set [ 49.861846][ T6920] Quota error (device loop0): write_blk: dquota write failed [ 49.863575][ T6920] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 49.868998][ T6920] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.72: Failed to acquire dquot type 1 [ 49.881046][ T6920] EXT4-fs (loop0): 1 truncate cleaned up [ 49.897601][ T6920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.912529][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.935420][ T6534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.044471][ T6939] loop4: detected capacity change from 0 to 4096 [ 50.044853][ T6939] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.097982][ T6939] EXT4-fs (loop4): Test dummy encryption mode enabled [ 50.160415][ T6939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.450742][ T6528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.476818][ T6955] loop0: detected capacity change from 0 to 512 [ 51.491886][ T6955] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 52.594540][ T6980] binder: 6970:6980 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 52.694533][ T6983] tipc: Enabling of bearer rejected, failed to enable media [ 53.012841][ T6989] loop3: detected capacity change from 0 to 128 [ 53.022423][ T6989] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.542493][ T7003] loop4: detected capacity change from 0 to 512 [ 53.543365][ T7003] EXT4-fs (loop4): blocks per group (34) and clusters per group (32768) inconsistent [ 53.551710][ T7002] loop2: detected capacity change from 0 to 512 [ 53.552692][ T7002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.557628][ T7002] EXT4-fs (loop2): 1 truncate cleaned up [ 53.558092][ T7002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.633812][ T7002] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.98: iget: bad extended attribute block 65536 [ 53.659808][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.849000][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 53.864155][ T7006] capability: warning: `syz.4.97' uses deprecated v2 capabilities in a way that may be insecure [ 53.949046][ T6533] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.997331][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.998566][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.020748][ T7016] hsr_slave_0: left promiscuous mode [ 54.022307][ T7016] hsr_slave_1: left promiscuous mode [ 55.131163][ T7028] loop4: detected capacity change from 0 to 128 [ 55.137082][ T7028] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.141520][ T7028] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.381102][ T7050] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 56.428506][ T7057] loop2: detected capacity change from 0 to 512 [ 56.894914][ T7057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.912287][ T7057] netlink: 'syz.2.112': attribute type 16 has an invalid length. [ 56.964108][ T7057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.146874][ T7066] loop0: detected capacity change from 0 to 256 [ 57.224414][ T7068] loop3: detected capacity change from 0 to 128 [ 57.224761][ T7068] EXT4-fs: Ignoring removed nobh option [ 57.283176][ T7066] FAT-fs (loop0): Directory bread(block 64) failed [ 57.283215][ T7066] FAT-fs (loop0): Directory bread(block 65) failed [ 57.283258][ T7066] FAT-fs (loop0): Directory bread(block 66) failed [ 57.283274][ T7066] FAT-fs (loop0): Directory bread(block 67) failed [ 57.283302][ T7066] FAT-fs (loop0): Directory bread(block 68) failed [ 57.283324][ T7066] FAT-fs (loop0): Directory bread(block 69) failed [ 57.283357][ T7066] FAT-fs (loop0): Directory bread(block 70) failed [ 57.283371][ T7066] FAT-fs (loop0): Directory bread(block 71) failed [ 57.283396][ T7066] FAT-fs (loop0): Directory bread(block 72) failed [ 57.283409][ T7066] FAT-fs (loop0): Directory bread(block 73) failed [ 58.177759][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.177960][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.179020][ T7068] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.565272][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.904595][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.966629][ T6533] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.055390][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 59.059363][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 59.061586][ T9] usb 1-1: config 0 has no interface number 0 [ 59.061630][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.061655][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 59.070150][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 59.070181][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 59.070201][ T9] usb 1-1: Product: syz [ 59.070214][ T9] usb 1-1: SerialNumber: syz [ 59.084180][ T9] usb 1-1: config 0 descriptor?? [ 59.099680][ T9] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 59.102239][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input2 [ 59.886581][ T7107] loop4: detected capacity change from 0 to 1024 [ 59.888366][ T7107] EXT4-fs: Ignoring removed bh option [ 59.888377][ T7107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.893015][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 59.894528][ T7107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.939659][ T7111] loop2: detected capacity change from 0 to 1024 [ 59.941427][ T7111] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 60.327008][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.327194][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.330331][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.337923][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.350797][ T6133] usb 1-1: USB disconnect, device number 2 [ 60.360300][ T6133] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 60.421919][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.426555][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.437455][ T7132] loop1: detected capacity change from 0 to 512 [ 60.453170][ T7132] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.133: casefold flag without casefold feature [ 60.453515][ T7132] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.133: couldn't read orphan inode 15 (err -117) [ 60.457228][ T7132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.507670][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.532239][ T7135] loop1: detected capacity change from 0 to 512 [ 60.532623][ T7135] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.533560][ T7135] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.551862][ T7135] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.135: corrupted xattr entries [ 60.552482][ T7135] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.552616][ T7135] EXT4-fs (loop1): 1 orphan inode deleted [ 60.553072][ T7135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.596598][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.728666][ T6528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.652311][ T7167] binder: 7166:7167 ioctl 40046205 0 returned -22 [ 61.652458][ T7167] binder: 7166:7167 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 61.652469][ T7167] binder: 7167 RLIMIT_NICE not set [ 61.837846][ T7175] loop4: detected capacity change from 0 to 256 [ 61.841531][ T7175] exFAT-fs (loop4): error, The cluster chain has a loop [ 61.843229][ T7175] exFAT-fs (loop4): failed to count the number of clusters in root [ 61.844799][ T7175] exFAT-fs (loop4): failed to recognize exfat type [ 62.337408][ T7185] loop3: detected capacity change from 0 to 128 [ 62.340156][ T7185] EXT4-fs: Ignoring removed nobh option [ 62.344309][ T7185] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.525430][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 62.673804][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 62.677783][ T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.677817][ T9] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.677834][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 62.677852][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 62.677864][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.707947][ T9] usb 1-1: config 0 descriptor?? [ 63.115785][ T7201] binder: 7200:7201 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 63.118230][ T7201] binder: 7200:7201 got transaction to invalid handle, 1 [ 63.119526][ T7201] binder: 7200:7201 cannot find target node [ 63.120554][ T7201] binder: 7200:7201 transaction async to 0:0 failed 6/29201/-22, code 0 size 0-0 line 3151 [ 63.122538][ T7201] binder: 7200:7201 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 63.123997][ T7201] binder: 7201 RLIMIT_NICE not set [ 63.198360][ T6533] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.313137][ T9] mcp2200 0003:04D8:00DF.0001: item 0 4 0 9 parsing failed [ 63.313334][ T9] mcp2200 0003:04D8:00DF.0001: can't parse reports [ 63.313363][ T9] mcp2200 0003:04D8:00DF.0001: probe with driver mcp2200 failed with error -22 [ 63.703393][ T6585] usb 1-1: USB disconnect, device number 3 [ 63.835981][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 63.949189][ T6536] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.072124][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.074135][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.277200][ T7231] netlink: 'syz.0.168': attribute type 32 has an invalid length. [ 64.495841][ T2413] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495982][ T2413] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.686441][ T26] cfg80211: failed to load regulatory.db [ 64.731222][ T7248] binder: 7247:7248 tried to acquire reference to desc 0, got 1 instead [ 64.733092][ T7248] binder: cannot allocate buffer: no space left [ 64.733154][ T7248] binder: 7247:7248 transaction async to 7247:0 failed 11/29201/-28, code 0 size 112-34820 line 3335 [ 64.736373][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.763930][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.764113][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.775707][ T7253] binder: 7252:7253 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 64.778940][ T7253] binder: 7252:7253 got transaction to invalid handle, 1 [ 64.778975][ T7253] binder: 7252:7253 cannot find target node [ 64.779290][ T7253] binder: 7252:7253 transaction async to 0:0 failed 13/29201/-22, code 0 size 0-0 line 3151 [ 64.779708][ T7253] binder: 7252:7253 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 65.099976][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.100148][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.107825][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.108024][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.110483][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.110626][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.522852][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 65.606838][ T6585] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.632281][ T7272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.632478][ T7272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.780887][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.781570][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.440599][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.442497][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.458155][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.460049][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.496636][ T7281] 9pnet_fd: Insufficient options for proto=fd [ 67.776655][ T7299] binder: 7297:7299 ioctl 4018620d 0 returned -22 [ 67.776978][ T7299] binder_user_error: 1 callbacks suppressed [ 67.777003][ T7299] binder: 7297:7299 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 67.777950][ T7299] binder: 7297:7299 got transaction to invalid handle, 1 [ 67.777959][ T7299] binder: 7297:7299 cannot find target node [ 67.778041][ T7299] binder: 7297:7299 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 67.778050][ T7299] binder: 7299 RLIMIT_NICE not set [ 68.576026][ T7313] loop0: detected capacity change from 0 to 128 [ 68.577807][ T7313] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.583202][ T7313] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.612663][ T9] binder_debug: 1 callbacks suppressed [ 68.612706][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 68.709656][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.709837][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.784838][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 69.095103][ T7336] loop3: detected capacity change from 0 to 512 [ 69.201411][ T7336] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.202: bg 0: block 393: padding at end of block bitmap is not set [ 69.202589][ T7336] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 69.204250][ T7336] EXT4-fs (loop3): 2 truncates cleaned up [ 69.207056][ T7336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.970041][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.970232][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.986593][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.986772][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.998467][ T6533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.016453][ T7346] binder: 7345:7346 ioctl 4018620d 0 returned -22 [ 70.019549][ T7346] binder: 7345:7346 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 70.021915][ T7346] binder: 7345:7346 got transaction to invalid handle, 1 [ 70.021941][ T7346] binder: 7345:7346 cannot find target node [ 70.021949][ T7346] binder: 7345:7346 transaction async to 0:0 failed 19/29201/-22, code 0 size 0-0 line 3151 [ 70.022046][ T7346] binder: 7345:7346 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 70.022055][ T7346] binder: 7346 RLIMIT_NICE not set [ 70.327724][ T7349] loop4: detected capacity change from 0 to 8192 [ 70.993124][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.123192][ T7362] loop2: detected capacity change from 0 to 16 [ 71.123591][ T7362] erofs: Unknown parameter '01777777777777777777777ÿÿÿÿ000000000000000000000000000000000000000000000000000000000000000000' [ 71.536559][ T7362] loop2: detected capacity change from 0 to 512 [ 71.626422][ T7362] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.212: casefold flag without casefold feature [ 71.626606][ T7362] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.212: couldn't read orphan inode 15 (err -117) [ 71.627764][ T7362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.618846][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.666271][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.210'. [ 73.545200][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.557228][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.069001][ T7396] binder: 7395:7396 ioctl 4018620d 0 returned -22 [ 74.070578][ T7396] binder: 7395:7396 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 74.075822][ T7396] binder: 7395:7396 got transaction to invalid handle, 1 [ 74.077145][ T7396] binder: 7395:7396 cannot find target node [ 74.078483][ T7396] binder: 7395:7396 transaction async to 0:0 failed 22/29201/-22, code 0 size 0-0 line 3151 [ 74.080460][ T7396] binder: 7395:7396 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 74.082900][ T7396] binder: 7396 RLIMIT_NICE not set [ 74.383764][ T6133] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.495327][ T7403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.223'. [ 74.654855][ T6133] usb 1-1: Using ep0 maxpacket: 16 [ 74.672341][ T6133] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 74.672379][ T6133] usb 1-1: config 0 has no interface number 0 [ 74.672405][ T6133] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 74.672421][ T6133] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 74.682321][ T6133] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 74.684205][ T6133] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 74.685886][ T6133] usb 1-1: Product: syz [ 74.686596][ T6133] usb 1-1: SerialNumber: syz [ 74.690512][ T6133] usb 1-1: config 0 descriptor?? [ 74.693760][ T6133] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 74.695674][ T6133] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input3 [ 75.003103][ T2320] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.016005][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 75.202739][ T7417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.205191][ T7417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.559364][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.582481][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.632045][ T7424] 9pnet_fd: Insufficient options for proto=fd [ 75.665333][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 75.665916][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 75.666093][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 75.666278][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 75.666454][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 75.666611][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 75.666916][ T6133] usb 1-1: USB disconnect, device number 4 [ 75.666947][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 75.666955][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 75.670709][ T6133] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 75.932184][ T7428] loop2: detected capacity change from 0 to 2048 [ 76.030148][ T7428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.372276][ T7428] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.229: bg 0: block 234: padding at end of block bitmap is not set [ 76.384712][ T7428] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 76.385003][ T7428] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.385003][ T7428] [ 76.911930][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.960452][ T7448] binder: BINDER_SET_CONTEXT_MGR already set [ 76.962529][ T7448] binder: 7447:7448 ioctl 4018620d 200002c0 returned -16 [ 76.971123][ T7448] binder: 7447:7448 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 76.976185][ T7448] binder: 7448 RLIMIT_NICE not set [ 77.211074][ T7456] hub 2-0:1.0: USB hub found [ 77.212024][ T7456] hub 2-0:1.0: 8 ports detected [ 77.394219][ T7460] hsr_slave_0: left promiscuous mode [ 77.395924][ T7460] hsr_slave_1: left promiscuous mode [ 78.107358][ T7468] loop0: detected capacity change from 0 to 40427 [ 78.110637][ T7468] F2FS-fs: heap/no_heap options were deprecated [ 78.163030][ T7468] F2FS-fs (loop0): invalid crc value [ 78.263529][ T7468] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 78.289045][ T7468] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 78.727918][ T6534] syz-executor: attempt to access beyond end of device [ 78.727918][ T6534] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 78.728608][ T6534] CPU: 0 UID: 0 PID: 6534 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 78.728621][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 78.728626][ T6534] Call trace: [ 78.728629][ T6534] show_stack+0x2c/0x3c (C) [ 78.728642][ T6534] __dump_stack+0x30/0x40 [ 78.728648][ T6534] dump_stack_lvl+0xd8/0x12c [ 78.728654][ T6534] dump_stack+0x1c/0x28 [ 78.728658][ T6534] f2fs_handle_critical_error+0x34c/0x4b8 [ 78.728666][ T6534] f2fs_stop_checkpoint+0x5c/0x70 [ 78.728672][ T6534] f2fs_write_end_io+0x768/0xa70 [ 78.728678][ T6534] bio_endio+0x858/0x894 [ 78.728685][ T6534] submit_bio_noacct+0x158/0x177c [ 78.728690][ T6534] submit_bio+0x3b4/0x550 [ 78.728696][ T6534] f2fs_submit_write_bio+0x13c/0x324 [ 78.728702][ T6534] __submit_merged_bio+0x254/0x704 [ 78.728707][ T6534] __submit_merged_write_cond+0x23c/0x4ac [ 78.728713][ T6534] f2fs_write_data_pages+0x1d28/0x2634 [ 78.728720][ T6534] do_writepages+0x270/0x468 [ 78.728727][ T6534] filemap_fdatawrite+0x14c/0x1f4 [ 78.728734][ T6534] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 78.728739][ T6534] f2fs_write_checkpoint+0x690/0x16a0 [ 78.728745][ T6534] kill_f2fs_super+0x21c/0x584 [ 78.728751][ T6534] deactivate_locked_super+0xc4/0x12c [ 78.728756][ T6534] deactivate_super+0xe0/0x100 [ 78.728761][ T6534] cleanup_mnt+0x31c/0x3ac [ 78.728766][ T6534] __cleanup_mnt+0x20/0x30 [ 78.728771][ T6534] task_work_run+0x1dc/0x260 [ 78.728777][ T6534] exit_to_user_mode_loop+0xfc/0x168 [ 78.728784][ T6534] el0_svc+0x170/0x254 [ 78.728792][ T6534] el0t_64_sync_handler+0x84/0x12c [ 78.728799][ T6534] el0t_64_sync+0x198/0x19c [ 78.763317][ T6534] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 79.467870][ T7501] loop4: detected capacity change from 0 to 8192 [ 79.505478][ T7501] input: syz1 as /devices/virtual/input/input4 [ 80.143526][ T7499] loop0: detected capacity change from 0 to 8192 [ 80.280927][ T7499] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.355130][ T7508] loop4: detected capacity change from 0 to 1024 [ 80.355517][ T7508] EXT4-fs: inline encryption not supported [ 80.355571][ T7508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.355585][ T7508] ext4: Unknown parameter 'fowner' [ 80.527766][ T7507] loop1: detected capacity change from 0 to 512 [ 80.596493][ T7507] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 80.792288][ T7507] loop1: detected capacity change from 0 to 512 [ 80.832758][ T7507] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.254: Parent and EA inode have the same ino 15 [ 80.835360][ T7507] EXT4-fs (loop1): 1 orphan inode deleted [ 80.836527][ T7507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.059408][ T7516] binder: BINDER_SET_CONTEXT_MGR already set [ 81.061282][ T7516] binder: 7515:7516 ioctl 4018620d 200002c0 returned -16 [ 81.065874][ T7516] binder: 7515:7516 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 81.068877][ T7516] binder: 7516 RLIMIT_NICE not set [ 81.130550][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.394154][ T7520] loop0: detected capacity change from 0 to 512 [ 81.411411][ T7520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.788444][ T7531] loop4: detected capacity change from 0 to 512 [ 81.898167][ T7534] loop3: detected capacity change from 0 to 512 [ 82.055604][ T7535] wg2: left promiscuous mode [ 82.055659][ T7535] wg2: left allmulticast mode [ 82.627151][ T7534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.639437][ T6534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.676604][ T6533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.478449][ T7557] loop1: detected capacity change from 0 to 2048 [ 83.536068][ T7557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.427200][ T7573] binder: BINDER_SET_CONTEXT_MGR already set [ 84.427228][ T7573] binder: 7571:7573 ioctl 4018620d 200002c0 returned -16 [ 84.427636][ T7573] binder: 7571:7573 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 84.427655][ T7573] binder: 7573 RLIMIT_NICE not set [ 84.918472][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.207268][ T7587] overlayfs: missing 'lowerdir' [ 85.545983][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.546164][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.549249][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.550542][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.915379][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.918244][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.958278][ T7614] binder: 7613:7614 ioctl c0306201 0 returned -14 [ 85.960636][ T7614] binder: 7613:7614 got transaction to invalid handle, 1 [ 85.961313][ T7614] binder: 7613:7614 cannot find target node [ 85.961344][ T7614] binder: 7613:7614 transaction async to 0:0 failed 29/29201/-22, code 0 size 0-0 line 3151 [ 85.961523][ T7614] binder: 7613:7614 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 85.961538][ T7614] binder: 7614 RLIMIT_NICE not set [ 86.036376][ T7617] loop1: detected capacity change from 0 to 512 [ 86.625493][ T7617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.804119][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 86.981650][ T7626] overlayfs: failed to resolve './bus': -2 [ 87.329626][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.369964][ T7636] loop1: detected capacity change from 0 to 2048 [ 87.388646][ T7636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.397537][ T7636] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 87.402724][ T7636] overlayfs: failed to verify upper root origin [ 87.413431][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.606958][ T7664] loop0: detected capacity change from 0 to 128 [ 88.607290][ T7664] EXT4-fs: Ignoring removed nobh option [ 88.619163][ T7664] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.938410][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.938593][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.940613][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.940751][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.941386][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.941518][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.135533][ T6540] Bluetooth: hci5: command 0x1003 tx timeout [ 89.135614][ T6532] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 89.406458][ T7681] tipc: Started in network mode [ 89.408340][ T7681] tipc: Node identity bac02eb57075, cluster identity 4711 [ 89.410116][ T7681] tipc: Enabled bearer , priority 0 [ 89.422446][ T7681] syzkaller0: entered promiscuous mode [ 89.424785][ T7681] syzkaller0: entered allmulticast mode [ 89.427190][ T7681] tipc: Resetting bearer [ 89.432545][ T7680] tipc: Resetting bearer [ 89.728501][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 89.822749][ T6534] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.011582][ T7680] tipc: Disabling bearer [ 90.308509][ T7704] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 90.851664][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.851845][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.857761][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.857940][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.859594][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.860209][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.000648][ T7716] loop0: detected capacity change from 0 to 128 [ 91.001631][ T7716] EXT4-fs: Ignoring removed nobh option [ 91.008252][ T7716] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.828844][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.829146][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.863288][ T6534] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.850902][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 93.161422][ T7754] loop3: detected capacity change from 0 to 40427 [ 93.161838][ T7754] F2FS-fs: heap/no_heap options were deprecated [ 93.182309][ T7754] F2FS-fs (loop3): invalid crc value [ 93.477013][ T7754] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 93.481346][ T7754] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 94.195730][ T6533] syz-executor: attempt to access beyond end of device [ 94.195730][ T6533] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.195779][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 94.195792][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 94.195799][ T6533] Call trace: [ 94.195802][ T6533] show_stack+0x2c/0x3c (C) [ 94.195816][ T6533] __dump_stack+0x30/0x40 [ 94.195823][ T6533] dump_stack_lvl+0xd8/0x12c [ 94.195829][ T6533] dump_stack+0x1c/0x28 [ 94.195834][ T6533] f2fs_handle_critical_error+0x34c/0x4b8 [ 94.195845][ T6533] f2fs_stop_checkpoint+0x5c/0x70 [ 94.195851][ T6533] f2fs_write_end_io+0x768/0xa70 [ 94.195859][ T6533] bio_endio+0x858/0x894 [ 94.195867][ T6533] submit_bio_noacct+0x158/0x177c [ 94.195873][ T6533] submit_bio+0x3b4/0x550 [ 94.195878][ T6533] f2fs_submit_write_bio+0x13c/0x324 [ 94.195884][ T6533] __submit_merged_bio+0x254/0x704 [ 94.195891][ T6533] __submit_merged_write_cond+0x23c/0x4ac [ 94.195897][ T6533] f2fs_write_data_pages+0x1d28/0x2634 [ 94.195904][ T6533] do_writepages+0x270/0x468 [ 94.195912][ T6533] filemap_fdatawrite+0x14c/0x1f4 [ 94.195919][ T6533] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 94.195925][ T6533] f2fs_write_checkpoint+0x690/0x16a0 [ 94.195930][ T6533] kill_f2fs_super+0x21c/0x584 [ 94.195937][ T6533] deactivate_locked_super+0xc4/0x12c [ 94.195943][ T6533] deactivate_super+0xe0/0x100 [ 94.195947][ T6533] cleanup_mnt+0x31c/0x3ac [ 94.195953][ T6533] __cleanup_mnt+0x20/0x30 [ 94.195958][ T6533] task_work_run+0x1dc/0x260 [ 94.195965][ T6533] exit_to_user_mode_loop+0xfc/0x168 [ 94.195972][ T6533] el0_svc+0x170/0x254 [ 94.195981][ T6533] el0t_64_sync_handler+0x84/0x12c [ 94.195988][ T6533] el0t_64_sync+0x198/0x19c [ 94.196012][ T6533] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.219407][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.219565][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.225624][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.225767][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.232387][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.232549][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.307420][ T7772] netlink: 'syz.4.329': attribute type 4 has an invalid length. [ 94.307499][ T7772] netlink: 17 bytes leftover after parsing attributes in process `syz.4.329'. [ 94.758565][ T7784] loop1: detected capacity change from 0 to 512 [ 94.763731][ T7784] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 95.597433][ T7805] loop0: detected capacity change from 0 to 128 [ 95.597783][ T7805] EXT4-fs: Ignoring removed nobh option [ 95.634812][ T7805] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.394582][ T7818] loop2: detected capacity change from 0 to 8192 [ 96.405364][ T7818] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.570687][ T6534] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.673121][ T7825] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 97.289956][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.297689][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.306966][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.307200][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.309206][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.309354][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.163221][ T7844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.168684][ T7844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.190642][ T7846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.353'. [ 98.192402][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 98.241536][ T7852] loop3: detected capacity change from 0 to 256 [ 98.254239][ T7852] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 98.775683][ T7863] loop0: detected capacity change from 0 to 128 [ 98.795832][ T7863] EXT4-fs: Ignoring removed nobh option [ 98.814914][ T7863] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.398963][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.399133][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.756619][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.364'. [ 99.758299][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 99.877673][ T6534] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.305364][ T2320] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.354506][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.357401][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.456066][ T2320] usb 1-1: Using ep0 maxpacket: 16 [ 101.458871][ T2320] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 101.460616][ T2320] usb 1-1: config 0 has no interface number 0 [ 101.462120][ T2320] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.464577][ T2320] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 101.468387][ T2320] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 101.470193][ T2320] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 101.471763][ T2320] usb 1-1: Product: syz [ 101.473083][ T2320] usb 1-1: SerialNumber: syz [ 101.478997][ T2320] usb 1-1: config 0 descriptor?? [ 102.433636][ T2320] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 102.435691][ T2320] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 102.595732][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 102.987262][ T7890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.989005][ T7890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.993096][ T7890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.996998][ T7890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.010007][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 103.010189][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 103.010359][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 103.010529][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 103.011912][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 103.012082][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 103.013318][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 103.014610][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 103.014760][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 103.014907][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 103.026206][ T6585] usb 1-1: USB disconnect, device number 5 [ 103.027260][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 103.029245][ T6585] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 104.151793][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.377'. [ 104.151831][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.377'. [ 104.192938][ T7933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.193152][ T7933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.592214][ T7936] loop2: detected capacity change from 0 to 512 [ 104.641550][ T7936] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.646917][ T7936] EXT4-fs (loop2): mount failed [ 105.118453][ T7949] loop4: detected capacity change from 0 to 128 [ 105.119545][ T7949] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.120536][ T7949] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.624945][ T7959] loop1: detected capacity change from 0 to 128 [ 105.627676][ T7959] EXT4-fs: Ignoring removed nobh option [ 105.640821][ T7959] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.201616][ T7975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.390'. [ 106.781281][ T6527] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.002404][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 108.432664][ T8002] loop1: detected capacity change from 0 to 2048 [ 109.175978][ T8002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.217998][ T8007] loop3: detected capacity change from 0 to 1024 [ 109.218370][ T8007] EXT4-fs: Ignoring removed bh option [ 109.218386][ T8007] EXT4-fs: inline encryption not supported [ 109.219384][ T8007] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.236081][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.401'. [ 109.245040][ T8007] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 109.247689][ T8007] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.399: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.248859][ T8007] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 109.248900][ T8007] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.399: lblock 0 mapped to illegal pblock 48 (length 1) [ 109.250559][ T8007] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 109.250578][ T8007] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.399: Failed to acquire dquot type 0 [ 109.250761][ T8007] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 109.251533][ T8007] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.399: mark_inode_dirty error [ 109.251655][ T8007] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 109.251688][ T8007] EXT4-fs (loop3): 1 orphan inode deleted [ 109.252120][ T8007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.263915][ T1576] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.265195][ T1576] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 109.265242][ T1576] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 109.307555][ T8017] loop4: detected capacity change from 0 to 128 [ 109.309566][ T8017] EXT4-fs: Ignoring removed nobh option [ 109.311636][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.319374][ T8007] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.399: lblock 0 mapped to illegal pblock 48 (length 1) [ 109.329661][ T8007] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 109.339897][ T8017] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.375259][ T6533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.878288][ T8028] loop3: detected capacity change from 0 to 40427 [ 109.893198][ T8028] f2fs: Bad value for 'discard_unit' [ 110.056756][ T8044] loop2: detected capacity change from 0 to 1024 [ 110.086116][ T8044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.364434][ T6528] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.375345][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'. [ 110.402470][ T8057] loop0: detected capacity change from 0 to 1024 [ 110.402832][ T8057] EXT4-fs: inline encryption not supported [ 110.402990][ T8057] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.403008][ T8057] ext4: Unknown parameter 'fowner' [ 110.790073][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.896530][ T8068] loop4: detected capacity change from 0 to 2048 [ 111.149441][ T8068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.069553][ T6528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.146960][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.425'. [ 112.514450][ T8102] process 'syz.2.427' launched './file1' with NULL argv: empty string added [ 112.890035][ T8110] loop1: detected capacity change from 0 to 4096 [ 112.892601][ T8110] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.910517][ T8110] EXT4-fs (loop1): Test dummy encryption mode enabled [ 112.989754][ T8110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.866485][ T8119] loop4: detected capacity change from 0 to 512 [ 113.898067][ T8119] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 114.721847][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.769912][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.770114][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.875253][ T8132] loop3: detected capacity change from 0 to 1024 [ 115.877025][ T8132] EXT4-fs: inline encryption not supported [ 115.878358][ T8132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.879578][ T8132] ext4: Unknown parameter 'fowner' [ 115.887354][ T8135] loop0: detected capacity change from 0 to 1024 [ 115.891199][ T8135] EXT4-fs: inline encryption not supported [ 115.891553][ T8138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.438'. [ 115.891730][ T8135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.891746][ T8135] ext4: Unknown parameter 'fowner' [ 116.922327][ T8149] loop2: detected capacity change from 0 to 512 [ 118.723999][ T8163] loop3: detected capacity change from 0 to 512 [ 118.800353][ T8163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.889801][ T8163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.444'. [ 119.479285][ T8179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.449'. [ 119.552519][ T6533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.650467][ T8189] loop3: detected capacity change from 0 to 1024 [ 120.713409][ T8189] EXT4-fs: inline encryption not supported [ 120.721927][ T8189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.723811][ T8189] ext4: Unknown parameter 'fowner' [ 121.310287][ T8199] loop0: detected capacity change from 0 to 4096 [ 121.312969][ T8199] EXT4-fs (loop0): Test dummy encryption mode enabled [ 121.317212][ T8199] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 121.317273][ T8199] System zones: 0-5 [ 121.319326][ T8199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.350506][ T8199] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 122.402112][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.402287][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.826135][ T6534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.129837][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.460'. [ 124.290623][ T8236] loop0: detected capacity change from 0 to 512 [ 124.692694][ T8236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.697883][ T8236] netlink: 'syz.0.465': attribute type 16 has an invalid length. [ 124.738839][ T8236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.195948][ T8246] loop1: detected capacity change from 0 to 1024 [ 125.198576][ T8246] EXT4-fs: inline encryption not supported [ 125.198634][ T8246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.198649][ T8246] ext4: Unknown parameter 'fowner' [ 125.934283][ T2413] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934329][ T2413] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.317821][ T6534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.472605][ T8260] loop3: detected capacity change from 0 to 1024 [ 126.472991][ T8260] EXT4-fs: Ignoring removed bh option [ 126.475574][ T8260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.744034][ T8260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.758085][ T8268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.475'. [ 126.805282][ T8270] tipc: Enabled bearer , priority 0 [ 126.806607][ T8270] syzkaller0: entered promiscuous mode [ 126.806639][ T8270] syzkaller0: entered allmulticast mode [ 126.815779][ T8270] tipc: Resetting bearer [ 126.859218][ T8269] tipc: Resetting bearer [ 126.866494][ T8269] tipc: Disabling bearer [ 127.451389][ T6533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.597639][ T8290] ip6erspan0: entered promiscuous mode [ 127.837701][ T8292] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.837778][ T8292] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.874742][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.874913][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.400759][ T8304] loop2: detected capacity change from 0 to 1024 [ 129.401110][ T8304] EXT4-fs: inline encryption not supported [ 129.401142][ T8304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.401152][ T8304] ext4: Unknown parameter 'fowner' [ 129.412954][ T8309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.487'. [ 129.490976][ T8317] loop4: detected capacity change from 0 to 256 [ 129.496400][ T8317] exFAT-fs (loop4): error, The cluster chain has a loop [ 129.496430][ T8317] exFAT-fs (loop4): failed to count the number of clusters in root [ 129.496441][ T8317] exFAT-fs (loop4): failed to recognize exfat type [ 129.509665][ T8317] loop4: detected capacity change from 0 to 512 [ 129.763606][ T8317] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.791194][ T8317] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.492: corrupted in-inode xattr: overlapping e_value [ 129.791393][ T8317] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.492: couldn't read orphan inode 15 (err -117) [ 129.792013][ T8317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.530607][ T6528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.690171][ T8357] can0: slcan on ttyS3. [ 130.830962][ T8358] loop0: detected capacity change from 0 to 1024 [ 130.831340][ T8358] EXT4-fs: inline encryption not supported [ 130.831375][ T8358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.831384][ T8358] ext4: Unknown parameter 'fowner' [ 131.304681][ T8342] can0 (unregistered): slcan off ttyS3. [ 131.397829][ T8382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.398077][ T8382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.828412][ T8418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.828593][ T8418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.312152][ T8396] loop2: detected capacity change from 0 to 1024 [ 133.333789][ T8396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.336878][ T8396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.361764][ T8431] loop3: detected capacity change from 0 to 512 [ 133.364465][ T8431] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 133.364746][ T8431] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 133.421273][ T8432] loop4: detected capacity change from 0 to 512 [ 133.456048][ T8432] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.518: casefold flag without casefold feature [ 133.463901][ T8432] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.518: couldn't read orphan inode 15 (err -117) [ 133.469633][ T8432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.577112][ T8435] IPv6: sit1: Disabled Multicast RS [ 133.579737][ T8435] sit1: entered allmulticast mode [ 133.782348][ T6528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.827076][ T8437] loop4: detected capacity change from 0 to 512 [ 134.315440][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.316074][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.841917][ T8454] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 134.841978][ T8454] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 134.870275][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 134.897087][ T8457] loop1: detected capacity change from 0 to 128 [ 134.898817][ T8457] EXT4-fs: Ignoring removed nobh option [ 134.951488][ T8457] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.898627][ T6527] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.942224][ T8480] loop4: detected capacity change from 0 to 1024 [ 135.946245][ T8480] EXT4-fs: inline encryption not supported [ 135.949173][ T8480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.951547][ T8480] ext4: Unknown parameter 'fowner' [ 136.034441][ T8487] pim6reg1: entered promiscuous mode [ 136.034479][ T8487] pim6reg1: entered allmulticast mode [ 136.396695][ T8493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.396963][ T8493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.466838][ T8491] netlink: 'syz.2.533': attribute type 6 has an invalid length. [ 137.632788][ T8511] loop0: detected capacity change from 0 to 1024 [ 137.657968][ T8511] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.539: bad orphan inode 510 [ 137.659630][ T8511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.687300][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 137.698566][ T6534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.848409][ T8521] can0: slcan on ttyS3. [ 138.015668][ T8521] can0 (unregistered): slcan off ttyS3. [ 138.021965][ T8523] loop0: detected capacity change from 0 to 128 [ 138.023600][ T8523] EXT4-fs: Ignoring removed nobh option [ 138.031919][ T8523] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.897096][ T8536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.897275][ T8536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.900653][ T8536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.903131][ T8536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.922189][ T6534] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.169718][ T8547] netlink: 324 bytes leftover after parsing attributes in process `syz.4.545'. [ 139.941431][ T8550] loop3: detected capacity change from 0 to 1024 [ 139.943579][ T8550] EXT4-fs: inline encryption not supported [ 139.950369][ T8550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.950407][ T8550] ext4: Unknown parameter 'fowner' [ 140.709751][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'. [ 140.847135][ T8573] loop3: detected capacity change from 0 to 1024 [ 140.866399][ T8573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.965126][ T6533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.167689][ T8582] loop3: detected capacity change from 0 to 1024 [ 141.174099][ T8582] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 141.174137][ T8582] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 141.174282][ T8582] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 141.176931][ T8582] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: inode #5: comm syz.3.558: unexpected bad inode w/o EXT4_IGET_BAD [ 141.179472][ T8582] EXT4-fs (loop3): no journal found [ 141.179482][ T8582] EXT4-fs (loop3): can't get journal size [ 141.181771][ T8582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.085178][ T6533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.364987][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.365195][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.368910][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.369075][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.664828][ T31] audit: type=1326 audit(655.487:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b3a8 code=0x7ffc0000 [ 142.672050][ T31] audit: type=1326 audit(655.487:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b3a8 code=0x7ffc0000 [ 142.682547][ T31] audit: type=1326 audit(655.487:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff92d5b3a8 code=0x7ffc0000 [ 142.682611][ T31] audit: type=1326 audit(655.497:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b3a8 code=0x7ffc0000 [ 142.682637][ T31] audit: type=1326 audit(655.497:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b3a8 code=0x7ffc0000 [ 142.682662][ T31] audit: type=1326 audit(655.497:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff92d5b3a8 code=0x7ffc0000 [ 142.682683][ T31] audit: type=1326 audit(655.497:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b3a8 code=0x7ffc0000 [ 142.682706][ T31] audit: type=1326 audit(655.497:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b3a8 code=0x7ffc0000 [ 142.682726][ T31] audit: type=1326 audit(655.507:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffff92d5b3a8 code=0x7ffc0000 [ 142.682743][ T31] audit: type=1326 audit(655.507:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b3a8 code=0x7ffc0000 [ 142.821148][ T8608] loop4: detected capacity change from 0 to 1024 [ 142.822692][ T8608] EXT4-fs: inline encryption not supported [ 142.826144][ T8608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.827412][ T8608] ext4: Unknown parameter 'fowner' [ 143.167497][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.316045][ T9] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 143.316071][ T9] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 143.316093][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 143.318277][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 143.318288][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.318299][ T9] usb 1-1: Product: syz [ 143.318305][ T9] usb 1-1: Manufacturer: syz [ 143.318311][ T9] usb 1-1: SerialNumber: syz [ 143.323848][ T8605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.323896][ T8605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.399370][ T8622] loop1: detected capacity change from 0 to 512 [ 143.577820][ T8623] loop3: detected capacity change from 0 to 16 [ 144.476631][ T8623] erofs (device loop3): mounted with root inode @ nid 36. [ 144.744645][ T8622] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 146.202745][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.574'. [ 146.222359][ T8639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.222412][ T8639] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.249551][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 146.260296][ T8642] syz.3.576 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 146.325493][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.327849][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.331967][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.335024][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.211311][ T9] rtl8150 1-1:1.0: couldn't reset the device [ 147.211500][ T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 147.222003][ T9] usb 1-1: USB disconnect, device number 6 [ 147.308568][ T8662] loop1: detected capacity change from 0 to 1024 [ 147.311343][ T8662] EXT4-fs: inline encryption not supported [ 147.313273][ T8662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.322963][ T8662] ext4: Unknown parameter 'fowner' [ 147.414846][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.586'. [ 148.524748][ T8674] netlink: 'syz.0.584': attribute type 4 has an invalid length. [ 148.584251][ T8661] netlink: 'syz.4.582': attribute type 16 has an invalid length. [ 148.585646][ T8661] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.582'. [ 149.304632][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.589'. [ 149.332224][ T8673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.336328][ T8673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.704654][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 149.715031][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 149.923579][ T4569] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.925526][ T4569] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.927760][ T4569] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.929267][ T4569] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.989365][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.989547][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.048127][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 151.112327][ T8703] loop3: detected capacity change from 0 to 40427 [ 151.134753][ T8703] F2FS-fs (loop3): invalid crc value [ 151.155025][ T8703] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 151.158560][ T8703] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 151.195397][ T6533] syz-executor: attempt to access beyond end of device [ 151.195397][ T6533] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.200738][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 151.200757][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 151.200763][ T6533] Call trace: [ 151.200766][ T6533] show_stack+0x2c/0x3c (C) [ 151.200783][ T6533] __dump_stack+0x30/0x40 [ 151.200793][ T6533] dump_stack_lvl+0xd8/0x12c [ 151.200801][ T6533] dump_stack+0x1c/0x28 [ 151.200807][ T6533] f2fs_handle_critical_error+0x34c/0x4b8 [ 151.200816][ T6533] f2fs_stop_checkpoint+0x5c/0x70 [ 151.200821][ T6533] f2fs_write_end_io+0x768/0xa70 [ 151.200828][ T6533] bio_endio+0x858/0x894 [ 151.200836][ T6533] submit_bio_noacct+0x158/0x177c [ 151.200841][ T6533] submit_bio+0x3b4/0x550 [ 151.200847][ T6533] f2fs_submit_write_bio+0x13c/0x324 [ 151.200853][ T6533] __submit_merged_bio+0x254/0x704 [ 151.200859][ T6533] __submit_merged_write_cond+0x23c/0x4ac [ 151.200864][ T6533] f2fs_write_data_pages+0x1d28/0x2634 [ 151.200871][ T6533] do_writepages+0x270/0x468 [ 151.200878][ T6533] filemap_fdatawrite+0x14c/0x1f4 [ 151.200885][ T6533] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 151.200890][ T6533] f2fs_write_checkpoint+0x690/0x16a0 [ 151.200896][ T6533] kill_f2fs_super+0x21c/0x584 [ 151.200902][ T6533] deactivate_locked_super+0xc4/0x12c [ 151.200908][ T6533] deactivate_super+0xe0/0x100 [ 151.200912][ T6533] cleanup_mnt+0x31c/0x3ac [ 151.200918][ T6533] __cleanup_mnt+0x20/0x30 [ 151.200923][ T6533] task_work_run+0x1dc/0x260 [ 151.200929][ T6533] exit_to_user_mode_loop+0xfc/0x168 [ 151.200935][ T6533] el0_svc+0x170/0x254 [ 151.200943][ T6533] el0t_64_sync_handler+0x84/0x12c [ 151.200950][ T6533] el0t_64_sync+0x198/0x19c [ 151.228520][ T6533] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 151.638583][ T8727] loop0: detected capacity change from 0 to 1024 [ 151.640771][ T8727] EXT4-fs: inline encryption not supported [ 151.640824][ T8727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.640850][ T8727] ext4: Unknown parameter 'fowner' [ 152.575496][ T8743] netlink: 72 bytes leftover after parsing attributes in process `syz.2.603'. [ 152.575528][ T8743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 152.576696][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 152.608902][ T8745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.604'. [ 152.724341][ T8753] loop2: detected capacity change from 0 to 512 [ 152.738804][ T8753] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.604: casefold flag without casefold feature [ 152.741618][ T8753] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.604: couldn't read orphan inode 15 (err -117) [ 152.745492][ T8753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.824293][ T8760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.606'. [ 152.945791][ T8761] loop3: detected capacity change from 0 to 16 [ 153.779034][ T8761] erofs (device loop3): mounted with root inode @ nid 36. [ 154.308153][ T8765] binder: 8764:8765 tried to acquire reference to desc 0, got 1 instead [ 154.308456][ T8765] binder: 8764:8765 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 154.308480][ T8765] binder: 8765 RLIMIT_NICE not set [ 154.308494][ T8765] binder: 8765 RLIMIT_NICE not set [ 154.308791][ T6585] binder: release 8764:8765 transaction 34 out, still active [ 154.308805][ T6585] binder: undelivered TRANSACTION_COMPLETE [ 154.320107][ T6585] binder: release 8764:8765 transaction 34 in, still active [ 154.320147][ T6585] binder: send failed reply for transaction 34, target dead [ 154.428548][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 154.536133][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.900550][ T8777] loop2: detected capacity change from 0 to 128 [ 154.902357][ T8777] vfat: Bad value for 'gid' [ 154.906478][ T8777] vfat: Bad value for 'gid' [ 156.141520][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.614'. [ 156.145219][ T8784] loop2: detected capacity change from 0 to 1024 [ 156.145597][ T8784] EXT4-fs: inline encryption not supported [ 156.145642][ T8784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.145657][ T8784] ext4: Unknown parameter 'fowner' [ 156.249546][ T1576] Bluetooth: hci5: Frame reassembly failed (-84) [ 156.256740][ T8797] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.256815][ T8797] FAT-fs (loop1): unable to read boot sector [ 156.657202][ T8803] loop3: detected capacity change from 0 to 512 [ 156.705802][ T8803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.709694][ T8803] netlink: 'syz.3.620': attribute type 16 has an invalid length. [ 156.722744][ T8803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.724544][ T8803] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.743849][ T8803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.475620][ T8813] input: syz1 as /devices/virtual/input/input6 [ 157.562732][ T6533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.295156][ T8831] loop3: detected capacity change from 0 to 512 [ 158.305388][ T6532] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 158.709854][ T8831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.804828][ T6532] Bluetooth: hci0: command 0x080f tx timeout [ 158.805068][ T6532] Bluetooth: hci2: command 0x0406 tx timeout [ 158.805320][ T6532] Bluetooth: hci4: command 0x0406 tx timeout [ 158.805453][ T6532] Bluetooth: hci1: command 0x0406 tx timeout [ 158.807186][ T6541] Bluetooth: hci3: command 0x0406 tx timeout [ 159.413513][ T8851] loop1: detected capacity change from 0 to 1024 [ 159.417527][ T8851] EXT4-fs: inline encryption not supported [ 159.422129][ T8851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.423466][ T8851] ext4: Unknown parameter 'fowner' [ 159.492387][ T6533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.495039][ T8844] netlink: 'syz.2.628': attribute type 4 has an invalid length. [ 159.895166][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.896763][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.352971][ T8873] loop2: detected capacity change from 0 to 512 [ 160.382865][ T8873] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent [ 160.402721][ T8875] sit0: mtu greater than device maximum [ 160.436441][ T8877] syzkaller0: entered promiscuous mode [ 160.436473][ T8877] syzkaller0: entered allmulticast mode [ 161.817979][ T8883] netlink: 'syz.1.645': attribute type 12 has an invalid length. [ 161.885435][ T8897] tipc: Started in network mode [ 161.885469][ T8897] tipc: Node identity b60a0325ab05, cluster identity 4711 [ 161.886037][ T8897] tipc: Enabled bearer , priority 0 [ 161.893555][ T8897] tipc: Resetting bearer [ 161.903509][ T8895] tipc: Disabling bearer [ 161.905279][ T8901] loop3: detected capacity change from 0 to 1024 [ 161.907082][ T8901] EXT4-fs: inline encryption not supported [ 161.908182][ T8901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.909282][ T8901] ext4: Unknown parameter 'fowner' [ 162.910077][ T8921] ================================================================== [ 162.910094][ T8921] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x794/0x11a4 [ 162.910112][ T8921] Read of size 1 at addr ffff0000f7130bb0 by task syz.2.655/8921 [ 162.910120][ T8921] [ 162.910124][ T8921] CPU: 1 UID: 0 PID: 8921 Comm: syz.2.655 Not tainted syzkaller #0 PREEMPT [ 162.910131][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 162.910136][ T8921] Call trace: [ 162.910138][ T8921] show_stack+0x2c/0x3c (C) [ 162.910147][ T8921] __dump_stack+0x30/0x40 [ 162.910156][ T8921] dump_stack_lvl+0xd8/0x12c [ 162.910162][ T8921] print_address_description+0xa8/0x238 [ 162.910172][ T8921] print_report+0x68/0x84 [ 162.910182][ T8921] kasan_report+0xb0/0x110 [ 162.910192][ T8921] __asan_report_load1_noabort+0x20/0x2c [ 162.910199][ T8921] __xfrm_state_insert+0x794/0x11a4 [ 162.910207][ T8921] xfrm_state_insert+0x5c/0x78 [ 162.910214][ T8921] ipcomp6_init_state+0x4b8/0x778 [ 162.910221][ T8921] __xfrm_init_state+0x8c4/0x12b8 [ 162.910229][ T8921] xfrm_add_sa+0x21f4/0x310c [ 162.910234][ T8921] xfrm_user_rcv_msg+0x588/0x7c4 [ 162.910240][ T8921] netlink_rcv_skb+0x220/0x3fc [ 162.910248][ T8921] xfrm_netlink_rcv+0x80/0x9c [ 162.910253][ T8921] netlink_unicast+0x694/0x8c4 [ 162.910259][ T8921] netlink_sendmsg+0x648/0x930 [ 162.910266][ T8921] ____sys_sendmsg+0x490/0x7b8 [ 162.910277][ T8921] ___sys_sendmsg+0x204/0x278 [ 162.910282][ T8921] __arm64_sys_sendmsg+0x184/0x238 [ 162.910287][ T8921] invoke_syscall+0x98/0x254 [ 162.910293][ T8921] el0_svc_common+0x130/0x23c [ 162.910299][ T8921] do_el0_svc+0x48/0x58 [ 162.910309][ T8921] el0_svc+0x5c/0x254 [ 162.910320][ T8921] el0t_64_sync_handler+0x84/0x12c [ 162.910330][ T8921] el0t_64_sync+0x198/0x19c [ 162.910337][ T8921] [ 162.910339][ T8921] Allocated by task 8265: [ 162.910343][ T8921] kasan_save_track+0x40/0x78 [ 162.910352][ T8921] kasan_save_alloc_info+0x44/0x54 [ 162.910357][ T8921] __kasan_slab_alloc+0x70/0x88 [ 162.910365][ T8921] kmem_cache_alloc_noprof+0x238/0x3e8 [ 162.910375][ T8921] xfrm_state_alloc+0x2c/0x264 [ 162.910380][ T8921] __find_acq_core+0x720/0x1540 [ 162.910386][ T8921] xfrm_find_acq+0x94/0xcc [ 162.910392][ T8921] xfrm_alloc_userspi+0x52c/0x9c8 [ 162.910397][ T8921] xfrm_user_rcv_msg+0x588/0x7c4 [ 162.910402][ T8921] netlink_rcv_skb+0x220/0x3fc [ 162.910408][ T8921] xfrm_netlink_rcv+0x80/0x9c [ 162.910412][ T8921] netlink_unicast+0x694/0x8c4 [ 162.910417][ T8921] netlink_sendmsg+0x648/0x930 [ 162.910424][ T8921] ____sys_sendmsg+0x490/0x7b8 [ 162.910433][ T8921] ___sys_sendmsg+0x204/0x278 [ 162.910437][ T8921] __arm64_sys_sendmsg+0x184/0x238 [ 162.910441][ T8921] invoke_syscall+0x98/0x254 [ 162.910446][ T8921] el0_svc_common+0x130/0x23c [ 162.910451][ T8921] do_el0_svc+0x48/0x58 [ 162.910456][ T8921] el0_svc+0x5c/0x254 [ 162.910465][ T8921] el0t_64_sync_handler+0x84/0x12c [ 162.910473][ T8921] el0t_64_sync+0x198/0x19c [ 162.910478][ T8921] [ 162.910479][ T8921] Freed by task 6585: [ 162.910482][ T8921] kasan_save_track+0x40/0x78 [ 162.910491][ T8921] kasan_save_free_info+0x58/0x70 [ 162.910496][ T8921] __kasan_slab_free+0x74/0x98 [ 162.910504][ T8921] kmem_cache_free+0x184/0x550 [ 162.910513][ T8921] xfrm_state_gc_task+0x468/0x560 [ 162.910520][ T8921] process_one_work+0x7e8/0x155c [ 162.910525][ T8921] worker_thread+0x958/0xed8 [ 162.910531][ T8921] kthread+0x5fc/0x75c [ 162.910539][ T8921] ret_from_fork+0x10/0x20 [ 162.910545][ T8921] [ 162.910546][ T8921] The buggy address belongs to the object at ffff0000f7130880 [ 162.910546][ T8921] which belongs to the cache xfrm_state of size 928 [ 162.910551][ T8921] The buggy address is located 816 bytes inside of [ 162.910551][ T8921] freed 928-byte region [ffff0000f7130880, ffff0000f7130c20) [ 162.910558][ T8921] [ 162.910559][ T8921] The buggy address belongs to the physical page: [ 162.910563][ T8921] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000f7130000 pfn:0x137130 [ 162.910570][ T8921] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 162.910574][ T8921] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 162.910581][ T8921] page_type: f5(slab) [ 162.910587][ T8921] raw: 05ffc00000000040 ffff0000c30bdb40 dead000000000122 0000000000000000 [ 162.910592][ T8921] raw: ffff0000f7130000 00000000800f000d 00000000f5000000 0000000000000000 [ 162.910598][ T8921] head: 05ffc00000000040 ffff0000c30bdb40 dead000000000122 0000000000000000 [ 162.910603][ T8921] head: ffff0000f7130000 00000000800f000d 00000000f5000000 0000000000000000 [ 162.910608][ T8921] head: 05ffc00000000002 fffffdffc3dc4c01 00000000ffffffff 00000000ffffffff [ 162.910613][ T8921] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 162.910616][ T8921] page dumped because: kasan: bad access detected [ 162.910619][ T8921] [ 162.910621][ T8921] Memory state around the buggy address: [ 162.910624][ T8921] ffff0000f7130a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.910628][ T8921] ffff0000f7130b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.910632][ T8921] >ffff0000f7130b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.910635][ T8921] ^ [ 162.910639][ T8921] ffff0000f7130c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 162.910642][ T8921] ffff0000f7130c80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 162.910646][ T8921] ================================================================== [ 162.910669][ T8921] Disabling lock debugging due to kernel taint