last executing test programs: 18m13.567873814s ago: executing program 32 (id=12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000180)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) 17m48.255251514s ago: executing program 33 (id=87): mount$9p_fd(0x0, 0x0, 0x0, 0x1200880, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xe) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r0, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) 17m24.327683131s ago: executing program 34 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x2) sendfile(r0, r0, 0x0, 0x1000000201005) 17m23.291404355s ago: executing program 35 (id=152): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket(0x1e, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000380)=@ethtool_cmd={0x46, 0xffff, 0x4619, 0x6, 0x4, 0x4, 0x9, 0xc8, 0x8, 0x9, 0x3, 0x6, 0x8, 0x4, 0x5, 0xffffe203, [0x0, 0x100]}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) 17m10.523104388s ago: executing program 36 (id=171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) move_pages(r0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0x86) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={0x0}) 16m19.763193681s ago: executing program 37 (id=234): socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, 0x0, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 13m25.050689695s ago: executing program 38 (id=716): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, r1, 0x0, r2}, 0x10) 13m22.100229844s ago: executing program 39 (id=724): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x2edb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, 0x0, 0x0) 13m19.624866333s ago: executing program 40 (id=729): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) timer_create(0x3, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000200)='G', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 13m19.611807783s ago: executing program 7 (id=731): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13bc", 0x2}], 0x1}, 0x48043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 13m18.452015481s ago: executing program 7 (id=732): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x7) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000002c0)="11", 0x1}, {&(0x7f0000000600)="f0f5e4fec2fca9b539389edd465f65ef9e48944c599bc99dee114b521e0809e2ffcbd02ca41e14175f5b57eb3564e4e6bbed1301920fab9d3b02b0999f2899e4ab0354276ef4fee6e7fd2a8a07de2257572442b05df3a3f5ea03c484796d6e449b568e0039d296d837b487", 0x6b}], 0x2) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x5, 0xa4fb, 0x7d3, 0x8000000000000001, 0x5}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x0) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='oom_score_adj < -0', 0x12) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) dup(0xffffffffffffffff) 13m18.042914231s ago: executing program 7 (id=733): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 13m17.855076285s ago: executing program 7 (id=734): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_debug\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys_debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x16) write(r1, &(0x7f0000000140)='0', 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) 13m17.66028379s ago: executing program 7 (id=735): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f00000041c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@nombcache}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") epoll_create(0x9) socket$inet_tcp(0x2, 0x1, 0x0) 13m16.634946134s ago: executing program 7 (id=736): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 13m16.279186513s ago: executing program 41 (id=736): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 13m9.969503142s ago: executing program 0 (id=717): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_procfs(0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) accept$unix(r4, &(0x7f00000001c0), &(0x7f0000000280)=0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@nombcache}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") epoll_create(0x9) socket$inet_tcp(0x2, 0x1, 0x0) 13m8.764866561s ago: executing program 0 (id=738): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}}, 0x20}}, 0x0) 13m7.703663886s ago: executing program 0 (id=739): mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) 13m7.571935589s ago: executing program 0 (id=740): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_debug\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys_debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x16) write(r1, &(0x7f0000000140)='0', 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) 13m7.50914684s ago: executing program 0 (id=741): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) truncate(&(0x7f0000000100)='./file1\x00', 0x7) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mmap$panthor(&(0x7f00001d4000/0x3000)=nil, 0x3000, 0x1000007, 0x10, 0xffffffffffffffff, 0x6) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0xb00, &(0x7f0000000000)={0x0}}, 0x0) 13m5.543304957s ago: executing program 0 (id=742): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 13m5.215063015s ago: executing program 42 (id=742): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 12m41.398188259s ago: executing program 5 (id=805): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) unshare(0x8040480) ppoll(&(0x7f0000000040)=[{r1, 0x8204}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 12m39.766703348s ago: executing program 5 (id=812): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0xa0) write(r0, &(0x7f00000001c0)='2', 0x1) 12m32.444718951s ago: executing program 5 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f00000008c0)={&(0x7f0000000600)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000085}, 0x80) r5 = dup3(r3, r4, 0x0) write$P9_RREADDIR(r5, 0x0, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x280, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x6) 12m31.376184447s ago: executing program 5 (id=843): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000680)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@quiet}, {@numtail}, {@fat=@usefree}, {@uni_xlate}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_winnt}, {@fat=@errors_remount}, {@shortname_lower}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000140), &(0x7f0000000180)={'U-', 0x6}, 0x16, 0x3) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x44000, &(0x7f0000000500)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x33]}}, {@quota}, {@huge_within_size}, {}, {@inode32}, {@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x78]}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}], [{@appraise}]}) 12m31.056607464s ago: executing program 5 (id=845): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) write$sndseq(r0, 0x0, 0x0) 12m30.648002264s ago: executing program 5 (id=847): syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex(&(0x7f0000000000)=0x2, 0x86, 0x2, 0x0, 0x0, 0x1) 12m30.102538247s ago: executing program 43 (id=847): syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex(&(0x7f0000000000)=0x2, 0x86, 0x2, 0x0, 0x0, 0x1) 12m18.207528079s ago: executing program 1 (id=877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e21cdc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x9, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) clock_settime(0x3, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 12m17.016184757s ago: executing program 1 (id=879): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r0, 0x10001) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 12m14.610852544s ago: executing program 1 (id=880): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x20000801) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 12m14.050826047s ago: executing program 1 (id=882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6d, 0x220940) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) 12m12.986960213s ago: executing program 1 (id=884): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) unshare(0x8040480) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e23, @loopback}, 0x10) 12m12.866545385s ago: executing program 1 (id=885): set_mempolicy(0x2, &(0x7f00000002c0)=0x1ff, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) 11m57.708434405s ago: executing program 44 (id=885): set_mempolicy(0x2, &(0x7f00000002c0)=0x1ff, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) 10m21.215684282s ago: executing program 3 (id=1267): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4a4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r10], 0x3c}}, 0x0) close(r10) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 10m18.015059147s ago: executing program 3 (id=1275): socket(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000f40)=""/4086, 0x47, 0xff6, 0x8}, 0x28) 10m17.807793992s ago: executing program 3 (id=1277): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000940)=[{&(0x7f0000000340)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a", 0xae}], 0x1, 0x739, 0xade) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) 10m17.407493542s ago: executing program 3 (id=1280): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800c10, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "c17769048b0000fd0c000000000000000000000000000000000200", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) accept4$tipc(r0, &(0x7f0000000140), 0x0, 0x81000) syz_genetlink_get_family_id$team(&(0x7f0000000200), r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc40) r5 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x4, r6, 0x0, 0xff, 0x0}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={0x0, 0x2c8}, 0x1, 0x0, 0x0, 0x4010}, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket(0xa, 0x3, 0xff) 10m15.899176468s ago: executing program 3 (id=1285): socket(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000f40)=""/4086, 0x47, 0xff6, 0x8}, 0x28) 10m15.462640538s ago: executing program 3 (id=1288): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000940)=[{&(0x7f0000000340)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a", 0xae}], 0x1, 0x739, 0xade) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) 10m14.725803585s ago: executing program 45 (id=1288): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000940)=[{&(0x7f0000000340)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a", 0xae}], 0x1, 0x739, 0xade) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) 5m27.925840398s ago: executing program 4 (id=2514): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') pread64(r1, &(0x7f0000000840)=""/154, 0x9a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) 5m25.981613356s ago: executing program 4 (id=2523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5m25.622338574s ago: executing program 4 (id=2527): mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) symlink(0x0, &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x148, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x5}}]}, 0x148}}, 0x20000000) 5m23.998066193s ago: executing program 4 (id=2532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m23.398951498s ago: executing program 4 (id=2537): add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) getpid() setns(0xffffffffffffffff, 0x24020000) syz_clone(0xbb083000, 0x0, 0xdcbd779fe612d4ee, 0x0, 0x0, 0x0) 5m23.157493524s ago: executing program 4 (id=2539): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) close(0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 5m7.882627764s ago: executing program 46 (id=2539): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) close(0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 49.420181513s ago: executing program 2 (id=3702): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000340)={@random="5bb65d3f2511", @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0xe, 0x7c, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4}]}}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "f66abb6f369aaa15d35b0033de150bf5c0f9eed577c9053e33e8a600", "ad01c9ea336a20bee7eb5eca2632253a", {"d69e4998ec79f919e2f5fdbe24252c46", "94f2cbbb76aeff3f3f60692fd9841b58"}}}}}}}, 0x0) 48.202380983s ago: executing program 2 (id=3705): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc8802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x1000739, 0x3) 46.096137604s ago: executing program 2 (id=3708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20060400) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='pim6reg0\x00', 0x10) 45.748136733s ago: executing program 2 (id=3709): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800", 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) 44.660046369s ago: executing program 2 (id=3712): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=") quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000f80)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x9, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x0, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x7205fb68, 0xffff, 0x0, 0x4, 0x6, 0x405, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x0, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x6, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0xb41, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x6, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x5, 0x80, 0xb, 0x8001, 0x40, 0xa4, 0x4, 0xffffffff, 0x5, 0xe, 0x9e, 0xffffff00, 0x100007ff, 0x6, 0x7, 0x0, 0xe, 0x8, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0xfff, 0x3, 0x1, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x3, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0xfd2, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x141, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7ff, 0x6, 0x0, 0x4, 0x9, 0x80000001, 0xffff, 0x80000d, 0x0, 0xfffffffd, 0x0, 0x4, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x4, 0xb32a, 0xec000000, 0x40008001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0xa, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) 43.612243034s ago: executing program 2 (id=3717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 42.9594079s ago: executing program 47 (id=3717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 29.608120053s ago: executing program 8 (id=3751): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x5, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c6112f082104c904418e0102030109024b0001050510010904fd06000202ff00052406000005a90004000d240f010000000043ea4e6602052401006b000000000500f406241a010010"], 0x0) 24.692117292s ago: executing program 8 (id=3764): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000280)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$eJzs3c1vHGcdB/DvrDd2Ni3BTZM2oEq1GgkQFolf5IK5EBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTs7a6/XL10njb1pP59o9nmeeWae+T2/2Zl9saIN8IW1MJn6gxRZmHxlvd3e2pxtbm3O3u3Wk4wl2UjqSWpJiv+2Wq0Pk+tJsTNM0Vfu8/7y/GsffbL1cadVr5Zy+9pR+/WpttvoW73RXTeRZKQqH8Ge8W488njFTuTXk1ypSjh1Z5K09vjZ35/e6enROGjvsycSI/B4FZ3XzX3Gk3PVhd5+H9B95a2dbHSDGxtwu/53EAAAAPCkGeQz8Je3s5314vwJhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfCxu7v/9fVEutW59I0f39/9FqXar6cHnxeJs/eFxxAAAAAAAAAMAJenE721nP+W67VZR/83+pbFwsH5/KW1nNUlZyNetZzFrWspLpJOM9A42uL66trUwPsOfMgXvOfEqgY1XZ+GzmDQAAAAAAAACfM7/Kwu7f/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBgUyUinSHG/Z/V4avUkZ5OMtldsJP/s1p9kD047AAAAADgBY8l21nO+224VuZjkufI7gLN5K/eyluWspZml3Cy/F+h86q9tbc42tzZn77aX/eN+/z/HCqMcMZ3vHg4+8uVyi0ZuZblcczU38kaauZlauWfb5Sqe7qh9cd1vx1R8rzJgZDersj3z96pyn3ePNdnDHPPLlPEyI2d2MjJVxdbOxjPdM3PwGTrm2ek/0nRqO8Fe7DvS6N7JPFTOz1Vlez6/Oyznp6I/EzM9z77njs558vW//OmnU1V9eKY0mJGqbJWPjf2ZmO3JxPODZOJ2896d27dWJ5+0TOwzVWbi0k57IT/KTzKZibyalSzn51nMWpYykR+WtcXq5Bc9l/whmbq+p/Xqp0UyWj1DOyfreDG9VO57Psv5cd7IzSzl5fLfTKbz7cxlLvM9Z/jS0We4vOprh1z1rS8dGPyVb1SVRpLfV+VwaOf1mZ689t5zx8u+3jW7WbowQJaOeW+sf7WqtI/x66ocDv2ZmO7JxLNHZ+IP5W1ltXnvzsrtxTcHO9yF96pK+zr6bTIxPDeS9vPlQvtkla29z45237MH9k2XfRd3+mr7+i7t9HWu1I1Dr9TR6j3c/pFmyr7nD+ybLfsu9/Qd9H4LgKF37pvnRhv/bvyj8UHjN43bjVfO/mDsO2MvjObMX898tz418rXaC8Wf80F+ufv5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHirb79zZ7HZXFrpq7RarXcP6RqwUq+O8JC7P0IlE/96qn3kA7q6P2d2gvF85enk5OY+rJX/tVqtak1xyDZ//NvQJKpVGYrUnVLl9O5JwMm4tnb3zWurb7/zreW7i68vvb50b35ubn5qfu7l2Wu3lptLU53H044SeBx2X/RPOxIAAAAAAAAAAABgUCfx3wlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAk21hMvUHKTI9dXWq3d7anG22l259d8t6klqS4hdJ8WFyPZ0l4z3DFYcd5/3l+dc++mTr492x6t3ta0ftN5iNaslEkpFOef+zGu9GVR6pOGoKxc4M2wm70k0cnLb/BwAA//+o5gZ+") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 20.509381733s ago: executing program 8 (id=3772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0xd03, 0xffffffff, 0x76f1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, r3, {}, {0x10, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x20004890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 16.93492587s ago: executing program 6 (id=3778): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = syz_clone(0xe7009100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080)=r2, 0x12) 9.596701158s ago: executing program 8 (id=3783): socket(0xa, 0x2400000001, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c6, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000580)=0x1000) 9.242225397s ago: executing program 6 (id=3784): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x66, 0x30, 0x31, 0x66, 0x62, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000640)={'fscrypt:', @desc4}, &(0x7f0000000740)={0x0, "d120e097f4d5b2b1a14a86db3b96cf27943196bf60bfb7044b0bdb6f87fc1f64f30282455999ff6ab03bfda317a18146d025828e6bf3ca0215686b9993601865", 0x18}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x33, 0x62, 0x31, 0x39, 0x66, 0x61, 0x63, 0x37, 0x38, 0x62, 0x66, 0x64, 0x34, 0x30, 0x36, 0x39]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x30, 0x30, 0x37, 0x30, 0x63, 0x30, 0x30, 0x39, 0x30, 0x63, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x38, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x62, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 9.045395071s ago: executing program 6 (id=3785): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000140), 0x1, 0x5aa, &(0x7f0000000e40)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40) write$uinput_user_dev(r1, &(0x7f0000000300)={'syz0\x00', {0x8001, 0x3, 0x9}, 0x26, [0x4, 0x79, 0x2, 0x8, 0x0, 0x4, 0x8, 0x802, 0x1, 0x2, 0x9, 0x8, 0x7, 0x4, 0x5, 0x705, 0xffffffff, 0x1, 0x3, 0x2, 0xe, 0x5, 0x9, 0x9, 0x1, 0x5dcf10b0, 0xfffff075, 0x1, 0xe16, 0x800006, 0xe, 0x7, 0x7fffffff, 0x924, 0x0, 0x4, 0x9, 0x1d49cc9e, 0x5, 0xffff, 0xa93, 0xc, 0x2, 0xd4, 0x5, 0x0, 0x0, 0x54, 0x100, 0x7, 0x1, 0x4000009, 0x1, 0xc, 0x62c4, 0xffff8001, 0x3, 0xdef, 0x1, 0x9, 0x80, 0xc, 0x2, 0x5], [0x5, 0x4, 0x0, 0x5, 0x8000, 0x9, 0x21, 0x8, 0xff, 0x4, 0x100001, 0x1200000, 0x71, 0x3, 0xa, 0xffff, 0xffff, 0x3, 0x8, 0x7, 0xffff, 0x0, 0x6, 0xfffffffb, 0x5, 0x145, 0x8, 0x0, 0x6, 0x3ff, 0x2, 0x7, 0xe366, 0x2000000, 0x2, 0x400, 0x2, 0x0, 0xfffffbac, 0x8, 0x6, 0x5, 0x7, 0x5, 0x4, 0x7, 0x0, 0xa4, 0x1, 0xc, 0xfffc, 0x4, 0x1, 0xbf, 0x4, 0x5, 0x6, 0x8, 0x3, 0xfffffff0, 0x5, 0x6, 0x5, 0x4], [0x6, 0x2, 0x2, 0x1000, 0x81, 0x9, 0x7, 0xf085, 0x400000a, 0xffffefff, 0x9, 0x897, 0xfffffff9, 0x81, 0x6cad, 0x8, 0x8, 0x99a, 0x8, 0x3, 0x8, 0xb6c2, 0x8, 0x8, 0x10001, 0x2, 0x7, 0x3, 0x2, 0x3, 0x6c, 0xd49, 0xf, 0x401, 0x6, 0x0, 0x5, 0x0, 0x1, 0x3, 0x2, 0x1, 0x2, 0x2e3e1caa, 0x3, 0x800, 0x7fff, 0x0, 0x8001, 0x0, 0xee33, 0x3, 0x1, 0xa9e, 0xfffffffb, 0x7, 0xc, 0x2, 0x4, 0x5, 0x7, 0x4, 0x400], [0x1, 0x7, 0x7, 0xfffffff6, 0x6, 0x9, 0x8001, 0x6, 0x10001, 0x6, 0x2, 0xfffffff8, 0x10, 0x7, 0x8, 0xfe, 0x5e, 0x8, 0xeb, 0x4, 0x1, 0x9, 0xc, 0x3, 0x3, 0x3, 0x5, 0x24, 0x93f, 0x6, 0x4, 0x81, 0x200, 0xfffff7f8, 0x9, 0xacb, 0x8, 0x7ff, 0x2, 0xb4, 0x10, 0x11, 0x9, 0x8, 0x9cf, 0x0, 0x1, 0x8, 0xfbfffc94, 0x3, 0x10001e0d, 0x7, 0x8, 0x8003, 0x4, 0x9, 0x5, 0xa1d1, 0x8, 0x6, 0x7ff, 0xfff, 0x6, 0x3f6]}, 0x45c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000780)) read$msr(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8183) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x0, 0x0, 0x400, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r5, 0x4068aea3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) close_range(r2, r3, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) socket$inet(0x2, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) 5.868165568s ago: executing program 6 (id=3788): r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0xa0802, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_netdev_private(r2, 0x8912, &(0x7f0000000200)="891c591c46686b2f006e") connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22060400) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000000010000", 0x7) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x401}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x2000000, 0x0, 0x40008c0}, 0x0) write(r1, 0x0, 0x0) 5.484405278s ago: executing program 9 (id=3789): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r2) 5.324648521s ago: executing program 8 (id=3790): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x163) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x5b000}], 0x1, 0x5a00, 0x0, 0x3) fsopen(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) fallocate(r2, 0x20, 0x0, 0x8000) 4.486301432s ago: executing program 9 (id=3791): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 3.361350779s ago: executing program 9 (id=3792): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x66, 0x30, 0x31, 0x66, 0x62, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000640)={'fscrypt:', @desc4}, &(0x7f0000000740)={0x0, "d120e097f4d5b2b1a14a86db3b96cf27943196bf60bfb7044b0bdb6f87fc1f64f30282455999ff6ab03bfda317a18146d025828e6bf3ca0215686b9993601865", 0x18}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x33, 0x62, 0x31, 0x39, 0x66, 0x61, 0x63, 0x37, 0x38, 0x62, 0x66, 0x64, 0x34, 0x30, 0x36, 0x39]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x30, 0x30, 0x37, 0x30, 0x63, 0x30, 0x30, 0x39, 0x30, 0x63, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x38, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x62, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 3.064534426s ago: executing program 9 (id=3793): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000200008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010200000000000000000200de082403"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 1.585512242s ago: executing program 8 (id=3794): r0 = socket$packet(0x11, 0x2, 0x300) read(r0, &(0x7f00000006c0)=""/244, 0xf4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r2, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x5}, {0xd, 0xa}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 1.401598366s ago: executing program 9 (id=3795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4) 1.193925452s ago: executing program 9 (id=3796): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) openat$cgroup(r5, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) 774.570712ms ago: executing program 6 (id=3797): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 6 (id=3798): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nombcache}, {@usrquota}, {@errors_remount}, {@nouid32}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r3 = dup(r1) write$bt_hci(r3, &(0x7f0000000480)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffffffffffff, 0xfff], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0xd, 0x4080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x180, r5, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9b}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x438401fc5a6247d4, 0xff}}, @NL80211_ATTR_IE={0xec, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xa, 0x8, @broadcast, 0x10, @value=@device_b, 0x5, 0x9, @device_a, 0x8}}, @dsss={0x3, 0x1, 0x8a}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc0, 0x60}}, @sec_chan_ofs={0x3e, 0x1}, @peer_mgmt={0x75, 0x16, {0x1, 0x1, @val=0x5, @void, @val="0adb77c3e0175b33ba2a63485b455b7e"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xf8, 0x5, @device_b, 0xc, @value=@device_b, 0x145, 0xfff, @broadcast, 0x9}}, @mic={0x8c, 0x18, {0x448, "fd86a01422c7", @long="cfaae88f7a0ba7f47a96db89301b7e06"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @random={0x6, 0x54, "36f07166cdd8e26bdfbc38aabd2399e65524064c14a0c9a7bd259287470d1e8aaa419182b43dcb458dcd1ee6a12353e7fc415bb2c69905b6cb9149981df30b85bfbadefdcc6fc306b8607b8c0571ae071a1a5751"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, "ddddef71cf0a5d562876cca959fa7cbf20c2deb25aba31ee21c0de3fc71006cc8473bd22d0a1485c0b53fc1a6a696ba02828215f0a116e4af4d329dcfed1e627c9e4f240"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004050) kernel console output (not intermixed with test programs): filesystem being mounted at /464/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 959.901828][T19312] EXT4-fs error (device loop9): ext4_empty_dir:3136: inode #12: comm syz.9.3140: invalid size [ 960.150105][T11986] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.404988][T19322] loop6: detected capacity change from 0 to 1024 [ 960.488667][T19322] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 960.527140][T19322] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.3139: lblock 2 mapped to illegal pblock 2 (length 1) [ 960.542966][T19322] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 960.551848][T19322] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.3139: lblock 0 mapped to illegal pblock 48 (length 1) [ 960.567447][T19322] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 960.577774][T19322] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.3139: Failed to acquire dquot type 0 [ 960.590566][T19322] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 960.600803][T19322] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3139: mark_inode_dirty error [ 960.612493][T19322] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 960.622861][T19322] EXT4-fs (loop6): 1 orphan inode deleted [ 960.630179][T19322] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.663260][ T9875] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 960.857944][ T9875] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 960.887296][ T9875] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:14: Failed to release dquot type 0 [ 960.960982][T19328] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3141'. [ 961.250844][T10306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.268514][T10306] EXT4-fs error (device loop6): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 961.320209][T10306] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 961.360445][T10306] EXT4-fs error (device loop6): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 963.040627][T19383] netlink: 'syz.6.3157': attribute type 1 has an invalid length. [ 963.254753][T19383] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3157'. [ 963.305263][T19390] loop9: detected capacity change from 0 to 512 [ 963.372690][T19390] EXT4-fs warning (device loop9): dx_probe:869: inode #2: comm syz.9.3158: Unimplemented hash flags: 0x0001 [ 963.466320][T19390] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.3158: Corrupt directory, running e2fsck is recommended [ 963.485142][T19390] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 963.503851][T19390] EXT4-fs error (device loop9): ext4_iget_extra_inode:4740: inode #15: comm syz.9.3158: corrupted in-inode xattr: invalid ea_ino [ 963.532167][T19390] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.3158: couldn't read orphan inode 15 (err -117) [ 963.577422][T19390] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.699965][T19390] EXT4-fs warning (device loop9): dx_probe:869: inode #2: comm syz.9.3158: Unimplemented hash flags: 0x0001 [ 963.750415][T19390] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.3158: Corrupt directory, running e2fsck is recommended [ 963.779947][T19390] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 3: comm syz.9.3158: path /472/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 963.806292][T19390] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 2: comm syz.9.3158: path /472/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0 [ 963.848507][T19390] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 8: comm syz.9.3158: path /472/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 964.053218][T11986] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.480428][T19423] netlink: 'syz.2.3169': attribute type 1 has an invalid length. [ 964.540606][T19423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3169'. [ 964.559658][T19423] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 964.568794][T19423] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 964.579134][T19423] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 964.588355][T19423] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 964.620219][T19423] bond1: (slave geneve2): making interface the new active one [ 964.657295][T19423] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 968.322056][T19482] loop9: detected capacity change from 0 to 512 [ 968.521551][T19482] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.3184: invalid indirect mapped block 256 (level 2) [ 968.633925][T19482] EXT4-fs (loop9): 2 truncates cleaned up [ 968.679541][T19482] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.940711][T19482] EXT4-fs error (device loop9): ext4_validate_block_bitmap:430: comm syz.9.3184: bg 0: block 5: invalid block bitmap [ 969.270626][T11986] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.595877][T19511] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3190'. [ 970.338251][ T6641] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 970.548519][ T6641] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.577186][ T6641] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 970.624019][ T6641] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 970.688005][ T6641] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 970.697941][ T6641] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 970.706011][ T6641] usb 7-1: Product: syz [ 970.736981][ T6641] usb 7-1: Manufacturer: syz [ 970.766387][T19525] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 970.792625][ T6641] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 970.847294][T19541] loop8: detected capacity change from 0 to 128 [ 970.850939][ T6641] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 970.944532][T19541] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 971.048291][T16762] usb 7-1: USB disconnect, device number 21 [ 971.083893][T19541] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 971.114228][T16762] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 971.150440][T16762] garmin_gps 7-1:1.0: device disconnected [ 971.445985][T19541] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 971.502166][T19560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3200'. [ 971.528078][ T2134] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 971.594942][T17468] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 971.730782][ T2134] usb 10-1: Using ep0 maxpacket: 16 [ 971.770925][ T2134] usb 10-1: config 0 has an invalid descriptor of length 193, skipping remainder of the config [ 971.800292][ T2134] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 971.856629][ T2134] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 971.866507][ T2134] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.878419][ T2134] usb 10-1: config 0 descriptor?? [ 971.898690][ T2134] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 972.123918][ T6641] usb 10-1: USB disconnect, device number 20 [ 972.693062][T19595] loop6: detected capacity change from 0 to 1764 [ 973.128066][ T5818] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 973.242892][T19611] loop6: detected capacity change from 0 to 2048 [ 973.265672][T19611] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 973.303828][T19611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 973.350309][ T5818] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.372438][ T5818] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 973.418192][ T5818] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 973.515539][ T5818] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 973.552155][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 974.345522][ T5818] usb 9-1: Product: syz [ 974.660558][ T5818] usb 9-1: Manufacturer: syz [ 974.669494][T19600] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 974.680537][ T5818] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 974.727051][ T5818] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 974.817030][T19627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3216'. [ 974.936560][ T7236] usb 9-1: USB disconnect, device number 20 [ 974.975479][ T7236] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 975.038798][ T7236] garmin_gps 9-1:1.0: device disconnected [ 975.112321][T19633] loop9: detected capacity change from 0 to 16 [ 975.178725][T19633] erofs: (device loop9): mounted with root inode @ nid 36. [ 975.343047][T19638] loop6: detected capacity change from 0 to 256 [ 975.391399][T19638] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 975.439220][T19638] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 975.492738][T19638] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62e2eca, utbl_chksum : 0xe619d30d) [ 975.544899][T19638] exFAT-fs (loop6): failed to load alloc-bitmap [ 975.586683][T19638] exFAT-fs (loop6): failed to recognize exfat type [ 975.898713][T19650] cgroup: noprefix used incorrectly [ 975.965087][T19650] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3224'. [ 976.207421][T19653] syzkaller0: entered promiscuous mode [ 976.237949][T19653] syzkaller0: entered allmulticast mode [ 976.272613][T16762] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 976.480541][T16762] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 976.510181][T16762] usb 7-1: config 1 has no interface number 0 [ 976.516912][T16762] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 976.542992][T19667] netlink: 'syz.2.3228': attribute type 1 has an invalid length. [ 976.558264][T16762] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 976.587956][T16762] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 976.636874][T16762] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 976.661754][T16762] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.680577][T16762] usb 7-1: Product: syz [ 976.684847][T16762] usb 7-1: Manufacturer: syz [ 976.709515][T16762] usb 7-1: SerialNumber: syz [ 976.842628][T19672] loop2: detected capacity change from 0 to 1024 [ 976.932381][T19672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 976.992487][T19650] loop6: detected capacity change from 0 to 8 [ 977.117046][T16762] usb 7-1: 1:0 : does not exist [ 977.127144][ T28] audit: type=1800 audit(2000000292.400:66): pid=19675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3229" name="bus" dev="loop2" ino=990 res=0 errno=0 [ 977.133787][T16762] usb 7-1: BAAD GENERIC IO: no channels? [ 977.358828][T16762] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 977.411889][T16762] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 977.464596][T16762] snd_usb_pod 7-1:1.1: set_interface failed [ 977.476872][T16762] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 977.524337][T16762] snd_usb_pod: probe of 7-1:1.1 failed with error -71 [ 977.598111][T16762] usb 7-1: USB disconnect, device number 22 [ 977.685931][T10375] udevd[10375]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 980.204751][T19715] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3242'. [ 980.214339][T19715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3242'. [ 981.703816][T19685] netlink: 'syz.2.3231': attribute type 1 has an invalid length. [ 981.712722][T19685] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 981.714440][T19688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3231'. [ 982.616140][T19757] loop9: detected capacity change from 0 to 512 [ 982.704337][T19757] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 982.866114][T19757] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.936651][T19769] netlink: 'syz.2.3254': attribute type 1 has an invalid length. [ 982.954192][T19757] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 983.146792][T19775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3254'. [ 983.176343][T11986] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.860624][T19806] loop6: detected capacity change from 0 to 256 [ 983.937305][T19810] xt_socket: unknown flags 0x4c [ 984.003156][T19806] FAT-fs (loop6): Unrecognized mount option "shortname=mixe" or missing value [ 985.520296][T19832] loop6: detected capacity change from 0 to 1024 [ 985.574658][T19832] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 985.614673][T19832] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.3269: lblock 2 mapped to illegal pblock 2 (length 1) [ 985.632543][T19832] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 985.643165][T19832] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.3269: lblock 0 mapped to illegal pblock 48 (length 1) [ 985.658837][T19832] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 985.668138][T19832] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.3269: Failed to acquire dquot type 0 [ 985.683637][T19832] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 985.695404][T19832] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3269: mark_inode_dirty error [ 985.718339][T19832] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 985.728699][T19832] EXT4-fs (loop6): 1 orphan inode deleted [ 985.736025][T19832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.749215][ T9875] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 985.844522][ T9875] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 985.888216][ T9875] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:14: Failed to release dquot type 0 [ 986.024367][T10306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.065958][T10306] EXT4-fs error (device loop6): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 986.081457][T10306] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 986.092778][T10306] EXT4-fs error (device loop6): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 986.795608][T19862] loop2: detected capacity change from 0 to 1024 [ 986.851354][T19862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 986.887051][T19862] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.025978][T19862] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.3279: Freeing blocks not in datazone - block = 0, count = 16 [ 987.148230][T16762] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 987.348149][T16762] usb 7-1: Using ep0 maxpacket: 32 [ 987.363447][T16762] usb 7-1: unable to get BOS descriptor or descriptor too short [ 987.388568][T16762] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 7 [ 987.412974][T16762] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 987.425326][T16762] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.443411][T16762] usb 7-1: Product: syz [ 987.456357][T16762] usb 7-1: Manufacturer: syz [ 987.465277][T16762] usb 7-1: SerialNumber: syz [ 987.478356][T19875] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3282'. [ 987.592026][T18651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 988.076510][T16762] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 988.129650][T16762] usb 7-1: USB disconnect, device number 23 [ 988.341778][T19890] loop2: detected capacity change from 0 to 1024 [ 988.437574][T19890] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 988.512132][T19890] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.3283: lblock 2 mapped to illegal pblock 2 (length 1) [ 988.531118][T19890] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 988.539610][T19890] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.3283: lblock 0 mapped to illegal pblock 48 (length 1) [ 988.554699][T19890] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 988.563616][T19890] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.3283: Failed to acquire dquot type 0 [ 988.575916][T19890] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 988.585749][T19890] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.3283: mark_inode_dirty error [ 988.599282][T19890] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 988.609667][T19890] EXT4-fs (loop2): 1 orphan inode deleted [ 988.616883][T19890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.699374][ T9875] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 988.724240][T10386] udevd[10386]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 988.725955][ T9875] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 988.797187][ T9875] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:14: Failed to release dquot type 0 [ 988.960011][T18651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.008432][T18651] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 989.087944][T18651] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 989.129622][T18651] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 989.345547][T19908] loop2: detected capacity change from 0 to 512 [ 989.400126][T19908] EXT4-fs (loop2): Test dummy encryption mode enabled [ 989.468734][T19908] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 989.528483][T19908] EXT4-fs (loop2): 1 truncate cleaned up [ 989.562933][T19908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.104492][T19950] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3293'. [ 992.117892][T19950] netlink: 'syz.8.3293': attribute type 7 has an invalid length. [ 992.125783][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3293'. [ 992.142463][T18651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.226905][T19952] bridge_slave_0: left allmulticast mode [ 992.307095][T19952] bridge_slave_0: left promiscuous mode [ 992.321188][T19952] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.379980][T19952] bridge_slave_1: left allmulticast mode [ 992.385722][T19952] bridge_slave_1: left promiscuous mode [ 992.408257][T19952] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.483985][T19952] bond0: (slave bond_slave_0): Releasing backup interface [ 992.624724][T19952] bond0: (slave bond_slave_1): Releasing backup interface [ 992.818912][T19952] team0: Port device team_slave_0 removed [ 992.907961][T19952] team0: Port device team_slave_1 removed [ 992.948625][T19952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.988068][T19952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.050455][T19952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.085100][T19952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.236568][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.243988][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.304863][T19952] bond1: (slave geneve2): Releasing active interface [ 993.348775][T19952] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 993.368134][T19952] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 993.388418][T19952] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 993.407027][T19952] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 993.453664][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 993.472291][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 993.489107][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 993.500945][T19954] netlink: 'syz.8.3293': attribute type 10 has an invalid length. [ 993.509640][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 993.517724][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 993.526076][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 993.584277][T19954] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 994.669358][T20007] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3301'. [ 994.703580][T19980] chnl_net:caif_netlink_parms(): no params data found [ 995.419167][T19980] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.447196][T19980] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.475390][T19980] bridge_slave_0: entered allmulticast mode [ 995.489927][T19980] bridge_slave_0: entered promiscuous mode [ 995.608721][ T51] Bluetooth: hci4: command tx timeout [ 995.620014][T20019] syzkaller0: entered promiscuous mode [ 995.625804][T20019] syzkaller0: entered allmulticast mode [ 995.636061][T19980] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.663736][T19980] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.679304][T19980] bridge_slave_1: entered allmulticast mode [ 995.687602][T19980] bridge_slave_1: entered promiscuous mode [ 996.909974][T20046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 997.693905][ T51] Bluetooth: hci4: command tx timeout [ 999.317716][T20049] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3307'. [ 999.337955][T20049] netlink: 'syz.9.3307': attribute type 7 has an invalid length. [ 999.350393][T20049] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3307'. [ 999.512563][T20051] netlink: 'syz.9.3307': attribute type 10 has an invalid length. [ 999.540716][T19980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.572470][T19980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.665422][T20057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3309'. [ 999.696658][T19980] team0: Port device team_slave_0 added [ 999.747515][T19980] team0: Port device team_slave_1 added [ 999.768272][ T51] Bluetooth: hci4: command tx timeout [ 999.806503][T20059] loop8: detected capacity change from 0 to 1024 [ 999.926545][T20059] hfsplus: invalid length 32517 has been corrected to 255 [ 999.993585][T19980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.011736][T19980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.085575][T19980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.126206][T19980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.134898][T19980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.181931][T19980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.261654][ T9888] hfsplus: b-tree write err: -5, ino 2 [ 1000.271636][ T9888] hfsplus: b-tree write err: -5, ino 4 [ 1000.280228][T20061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3311'. [ 1000.791733][T20081] cgroup: noprefix used incorrectly [ 1000.849773][T19980] hsr_slave_0: entered promiscuous mode [ 1000.862858][T19980] hsr_slave_1: entered promiscuous mode [ 1000.903042][T19980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1000.932555][T19980] Cannot create hsr debugfs directory [ 1000.955056][T20085] loop9: detected capacity change from 0 to 2048 [ 1001.087984][T13417] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1001.095937][T20085] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1001.309468][T13417] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1001.337157][ T3488] hsr_slave_0: left promiscuous mode [ 1001.348493][T13417] usb 3-1: config 1 has no interface number 0 [ 1001.354730][T13417] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1001.383921][ T3488] hsr_slave_1: left promiscuous mode [ 1001.384891][T13417] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 1001.446189][T13417] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 1001.505162][T13417] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 1001.517302][T13417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.536085][T13417] usb 3-1: Product: syz [ 1001.546140][T13417] usb 3-1: Manufacturer: syz [ 1001.553425][T13417] usb 3-1: SerialNumber: syz [ 1001.593715][ T3488] bond5 (unregistering): Released all slaves [ 1001.699719][T20085] EXT4-fs error (device loop9): __ext4_get_inode_loc:4497: comm syz.9.3317: Invalid inode table block 0 in block_group 0 [ 1001.703076][ T3488] bond4 (unregistering): Released all slaves [ 1001.761188][T20085] EXT4-fs error (device loop9): ext4_map_blocks:720: inode #15: block 1803188595: comm syz.9.3317: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 1001.797565][ T3488] bond3 (unregistering): Released all slaves [ 1001.825482][T20081] loop2: detected capacity change from 0 to 8 [ 1001.838389][T20085] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1001.856345][ T3488] bond2 (unregistering): Released all slaves [ 1001.871685][ T51] Bluetooth: hci4: command tx timeout [ 1001.879823][T20085] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1001.879823][T20085] [ 1001.892319][T20085] EXT4-fs error (device loop9) in ext4_setattr:5683: Corrupt filesystem [ 1002.030548][T13417] usb 3-1: 1:0 : does not exist [ 1002.068678][ T9888] EXT4-fs error (device loop9): __ext4_get_inode_loc:4497: comm kworker/u4:18: Invalid inode table block 0 in block_group 0 [ 1002.072466][T13417] usb 3-1: BAAD GENERIC IO: no channels? [ 1002.141312][ T9888] EXT4-fs error (device loop9): ext4_ind_map_blocks:604: inode #15: comm kworker/u4:18: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 1002.189013][T13417] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 1002.206377][T13417] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1002.218399][ T9888] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 117 [ 1002.240547][T13417] snd_usb_pod 3-1:1.1: set_interface failed [ 1002.256331][ T9888] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1002.256331][ T9888] [ 1002.267579][T13417] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1002.267582][ T9888] EXT4-fs error (device loop9): __ext4_get_inode_loc:4497: comm kworker/u4:18: Invalid inode table block 0 in block_group 0 [ 1002.275821][T13417] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 1002.310631][ T9899] EXT4-fs error (device loop9): __ext4_get_inode_loc:4497: comm kworker/u4:22: Invalid inode table block 0 in block_group 0 [ 1002.325321][T13417] usb 3-1: USB disconnect, device number 18 [ 1002.347296][T11986] EXT4-fs (loop9): Inode 15 (ffff888058b9da00): i_reserved_data_blocks (1) not cleared! [ 1002.379843][T11986] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.442234][T10375] udevd[10375]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.630950][ T3488] bond1 (unregistering): Released all slaves [ 1003.071289][T13417] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1003.091311][ T3488] bond0 (unregistering): Released all slaves [ 1003.264827][T13417] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.278181][T13417] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1003.292158][T13417] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1003.302701][T13417] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1003.314953][T13417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.346571][T13417] usb 3-1: config 0 descriptor?? [ 1003.785154][T13417] hid-multitouch 0003:0EEF:72C4.0001: item 0 1 0 9 parsing failed [ 1003.795629][T13417] hid-multitouch: probe of 0003:0EEF:72C4.0001 failed with error -22 [ 1004.002315][T16762] usb 3-1: USB disconnect, device number 19 [ 1004.898689][T20107] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3318'. [ 1004.970461][T20113] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3319'. [ 1004.988261][T20113] netlink: 'syz.9.3319': attribute type 7 has an invalid length. [ 1005.017016][T20113] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3319'. [ 1005.253342][T20115] netlink: 'syz.9.3319': attribute type 10 has an invalid length. [ 1005.520453][T20132] loop8: detected capacity change from 0 to 128 [ 1005.543440][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1005.587267][T20132] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1005.688705][T20132] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.872932][T20132] fscrypt: loop8: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1005.964833][ T3488] IPVS: stop unused estimator thread 0... [ 1006.088550][T17468] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1006.138727][T20140] loop2: detected capacity change from 0 to 4096 [ 1006.161304][T20143] loop9: detected capacity change from 0 to 2048 [ 1006.185090][T20140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1006.229336][T20143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1006.238247][T20140] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1006.244565][T20140] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1006.288858][T20140] EXT4-fs (loop2): group descriptors corrupted! [ 1006.656261][T20153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3329'. [ 1006.776033][T19980] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1006.831516][T19980] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1006.872205][T19980] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1006.936267][T19980] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1006.946072][T20164] loop2: detected capacity change from 0 to 128 [ 1007.008596][T20164] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1007.050057][T20164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1007.628627][T19980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.724596][T19980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.745626][T20177] netlink: 'syz.2.3336': attribute type 1 has an invalid length. [ 1007.809676][ T9989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.816942][ T9989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.944977][T20179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3336'. [ 1007.975051][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.982269][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.361665][T16762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1008.457574][T16762] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1008.469554][T20195] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3340'. [ 1008.702831][T19980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.048032][T17554] smpboot: CPU 1 is now offline [ 1010.536534][T20230] netlink: 'syz.8.3346': attribute type 1 has an invalid length. [ 1010.730213][T20232] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3346'. [ 1011.009539][T19980] veth0_vlan: entered promiscuous mode [ 1011.105900][T19980] veth1_vlan: entered promiscuous mode [ 1011.321011][T19980] veth0_macvtap: entered promiscuous mode [ 1011.373116][T19980] veth1_macvtap: entered promiscuous mode [ 1011.499434][T19980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.571296][T19980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.639318][T19980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.749594][T19980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.831777][T19980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.843809][T20250] loop8: detected capacity change from 0 to 128 [ 1011.889519][T19980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.959354][T20253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3351'. [ 1012.017025][T20253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3351'. [ 1012.203855][T20256] bridge_slave_0: left allmulticast mode [ 1012.225422][T20256] bridge_slave_0: left promiscuous mode [ 1012.248931][T20256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.303418][T20256] bridge_slave_1: left allmulticast mode [ 1012.345070][T20256] bridge_slave_1: left promiscuous mode [ 1012.371714][T20256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.531227][T20256] bond0: (slave bond_slave_0): Releasing backup interface [ 1012.643089][T20256] bond0: (slave bond_slave_1): Releasing backup interface [ 1012.874037][T20256] team0: Port device team_slave_0 removed [ 1012.979609][T20256] team0: Port device team_slave_1 removed [ 1013.026626][T20256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.074897][T20256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.132658][T20256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.172658][T20256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.393206][T20256] bond1: (slave geneve2): Releasing active interface [ 1013.407560][T20256] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1013.425583][T20256] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1013.435180][T20256] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1013.447619][T20256] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1013.484824][T20258] netlink: 'syz.2.3351': attribute type 10 has an invalid length. [ 1013.520173][T20258] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1013.545900][T19980] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.565073][T19980] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.576412][T19980] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.596309][T19980] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.944185][ T9888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.993610][ T9888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.631491][T20294] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[17468] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20294] [ 1014.729573][ T9989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.784901][ T9989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.007966][ T5817] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1017.051180][T20332] loop6: detected capacity change from 0 to 256 [ 1017.150889][T20332] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1017.277949][ T5817] usb 9-1: Using ep0 maxpacket: 32 [ 1017.322269][ T5817] usb 9-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.444352][ T5817] usb 9-1: New USB device found, idVendor=f696, idProduct=1f96, bcdDevice=6b.75 [ 1017.504887][ T5817] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.597972][ T5817] usb 9-1: Product: syz [ 1017.627222][ T5817] usb 9-1: Manufacturer: syz [ 1017.680520][ T5817] usb 9-1: SerialNumber: syz [ 1017.784697][T20346] loop6: detected capacity change from 0 to 256 [ 1017.848557][T20346] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1017.964318][T16762] usb 9-1: USB disconnect, device number 21 [ 1018.286906][T20353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3368'. [ 1021.197173][T20358] loop9: detected capacity change from 0 to 512 [ 1021.550530][T20376] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3376'. [ 1022.688646][T16762] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1022.918044][T16762] usb 10-1: Using ep0 maxpacket: 8 [ 1022.962073][T16762] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.040027][T16762] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1023.123823][T16762] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1023.189130][T16762] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.249235][T16762] usbtmc 10-1:16.0: bulk endpoints not found [ 1023.906504][T20421] loop6: detected capacity change from 0 to 1024 [ 1023.924652][T20421] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1023.964097][T20421] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.3374: lblock 2 mapped to illegal pblock 2 (length 1) [ 1023.980017][T20421] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1023.988266][T20421] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.3374: lblock 0 mapped to illegal pblock 48 (length 1) [ 1024.003026][T20421] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1024.011922][T20421] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.3374: Failed to acquire dquot type 0 [ 1024.023814][T20421] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1024.039546][T20421] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3374: mark_inode_dirty error [ 1024.068458][T20421] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1024.078839][T20421] EXT4-fs (loop6): 1 orphan inode deleted [ 1024.085512][T20421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.145508][ T9877] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 1024.264490][ T9877] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1024.333435][ T9877] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:15: Failed to release dquot type 0 [ 1024.550558][T19980] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.612835][T19980] EXT4-fs error (device loop6): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1024.691653][T19980] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1024.772527][T19980] EXT4-fs error (device loop6): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1025.825461][ T5818] usb 10-1: USB disconnect, device number 21 [ 1027.791295][T20484] loop6: detected capacity change from 0 to 1024 [ 1027.858897][T20484] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 1027.941635][T20484] EXT4-fs (loop6): group descriptors corrupted! [ 1027.972397][T20488] loop9: detected capacity change from 0 to 512 [ 1028.123930][T20488] ext4: Bad value for 'data' [ 1031.476957][T20531] loop6: detected capacity change from 0 to 128 [ 1031.574719][T20531] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x610000ff (sector = 1) [ 1031.981555][ T9888] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x610000ff (sector = 1) [ 1034.084513][T20561] loop2: detected capacity change from 0 to 512 [ 1034.278284][T20561] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1034.343536][T20564] bridge_slave_0: left allmulticast mode [ 1034.378219][T20561] FAT-fs (loop2): Filesystem has been set read-only [ 1034.387961][T20564] bridge_slave_0: left promiscuous mode [ 1034.427212][T20564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.526135][T20564] bridge_slave_1: left allmulticast mode [ 1034.539243][T20569] loop6: detected capacity change from 0 to 7 [ 1034.584843][T20564] bridge_slave_1: left promiscuous mode [ 1034.627975][T20564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.737297][T20564] bond0: (slave bond_slave_0): Releasing backup interface [ 1034.883615][T20564] bond0: (slave bond_slave_1): Releasing backup interface [ 1035.109271][T20564] team0: Port device team_slave_0 removed [ 1035.219646][ T5818] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1035.236130][T20564] team0: Port device team_slave_1 removed [ 1035.264452][T20564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.282333][T20564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.294562][T20564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.304709][T20564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.770297][T20565] netlink: 'syz.6.3415': attribute type 10 has an invalid length. [ 1036.778950][T16762] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1036.858604][ T5818] usb 9-1: Using ep0 maxpacket: 16 [ 1036.893535][ T5818] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 1036.916675][ T5818] usb 9-1: config 1 has no interface number 0 [ 1036.958303][ T5818] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1036.975337][T20565] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1037.009837][T16762] usb 10-1: no configurations [ 1037.017529][T20584] loop2: detected capacity change from 0 to 512 [ 1037.024800][T16762] usb 10-1: can't read configurations, error -22 [ 1037.041656][ T5818] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1037.108869][ T5818] usb 9-1: config 1 interface 105 has no altsetting 0 [ 1037.145072][T20584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1037.180456][ T5818] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1037.208963][T16762] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1037.227432][T20584] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.239259][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1037.274205][ T5818] usb 9-1: Product: syz [ 1037.297935][ T5818] usb 9-1: Manufacturer: syz [ 1037.324409][ T5818] usb 9-1: SerialNumber: syz [ 1037.355927][T20576] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1037.396241][T20576] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1037.442116][T16762] usb 10-1: no configurations [ 1037.467369][T16762] usb 10-1: can't read configurations, error -22 [ 1037.493932][T16762] usb usb10-port1: attempt power cycle [ 1037.753689][T18651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.901565][T20576] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1037.928116][T16762] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1037.974001][T20576] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1038.038224][T16762] usb 10-1: no configurations [ 1038.066085][T16762] usb 10-1: can't read configurations, error -22 [ 1038.385851][T16762] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1039.664991][T20604] loop6: detected capacity change from 0 to 1024 [ 1040.172192][T16762] usb 10-1: device descriptor read/8, error -71 [ 1040.219412][T20604] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1040.261570][T20604] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.3424: lblock 2 mapped to illegal pblock 2 (length 1) [ 1040.276472][T20604] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1040.284953][T20604] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.3424: lblock 0 mapped to illegal pblock 48 (length 1) [ 1040.300360][T20604] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1040.309547][T20604] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.3424: Failed to acquire dquot type 0 [ 1040.327296][T20604] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1040.338005][T20604] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3424: mark_inode_dirty error [ 1040.355007][T20604] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1040.365696][T20604] EXT4-fs (loop6): 1 orphan inode deleted [ 1040.372687][T20604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.385240][T16762] usb usb10-port1: unable to enumerate USB device [ 1040.419857][ T9989] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 1040.475174][ T5818] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1040.660724][ T5818] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1040.677252][ T9989] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1040.737726][ T9989] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:27: Failed to release dquot type 0 [ 1040.771274][ T5818] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1040.856139][T19980] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.006358][ T5818] aqc111 9-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a2:46:a9:3f:5d:6e [ 1041.181518][T19980] EXT4-fs error (device loop6): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1042.348616][ T5818] usb 9-1: USB disconnect, device number 22 [ 1042.355751][ T5818] aqc111 9-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1042.408780][T19980] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1042.461421][T20626] loop2: detected capacity change from 0 to 128 [ 1042.472514][T19980] EXT4-fs error (device loop6): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1042.599616][T20626] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1042.707592][T20626] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1042.746840][ T5818] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1042.851497][ T5818] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1042.888553][T20626] EXT4-fs warning (device loop2): ext4_group_extend:1892: will only finish group (8193 blocks, 8129 new) [ 1042.918537][T20633] netlink: 'syz.6.3428': attribute type 1 has an invalid length. [ 1042.936048][ T5818] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1042.970385][T20626] EXT4-fs warning (device loop2): ext4_group_extend:1897: can't read last block, resize aborted [ 1042.990260][T20633] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3428'. [ 1043.270974][T18651] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1046.578854][T20684] syzkaller0: entered promiscuous mode [ 1046.584389][T20684] syzkaller0: entered allmulticast mode [ 1046.624368][T20690] loop2: detected capacity change from 0 to 128 [ 1046.701357][T20690] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1046.801203][T20690] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1046.940556][T20690] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.3441: checksumming directory block 0 [ 1047.169207][T18651] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1047.329977][T20696] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3442'. [ 1048.765176][T20701] loop2: detected capacity change from 0 to 1024 [ 1049.064465][T20701] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1049.138384][T20701] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.3443: lblock 2 mapped to illegal pblock 2 (length 1) [ 1049.154893][T20701] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1049.163502][T20701] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.3443: lblock 0 mapped to illegal pblock 48 (length 1) [ 1049.185806][T20701] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1049.194832][T20701] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.3443: Failed to acquire dquot type 0 [ 1049.239790][T20701] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1049.249544][T20701] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.3443: mark_inode_dirty error [ 1049.262440][T20701] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1049.272797][T20701] EXT4-fs (loop2): 1 orphan inode deleted [ 1049.279714][T20701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1049.305609][ T9885] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 1049.498100][ T9885] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1049.506687][ T9885] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:17: Failed to release dquot type 0 [ 1049.696333][T18651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.715391][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 1049.777737][T18651] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1049.877465][T18651] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1049.926737][T18651] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1050.648966][T20729] syzkaller0: entered promiscuous mode [ 1050.688343][T20729] syzkaller0: entered allmulticast mode [ 1050.777540][T20735] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1051.165046][T20746] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3453'. [ 1052.765672][T20758] loop8: detected capacity change from 0 to 1024 [ 1053.139365][T20758] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1053.178334][T20758] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 2: comm syz.8.3455: lblock 2 mapped to illegal pblock 2 (length 1) [ 1053.194560][T20758] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1053.203136][T20758] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 48: comm syz.8.3455: lblock 0 mapped to illegal pblock 48 (length 1) [ 1053.218375][T20758] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1053.227173][T20758] EXT4-fs error (device loop8): ext4_acquire_dquot:6953: comm syz.8.3455: Failed to acquire dquot type 0 [ 1053.244211][T20758] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1053.291898][T20758] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.3455: mark_inode_dirty error [ 1053.303629][T20758] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1053.313958][T20758] EXT4-fs (loop8): 1 orphan inode deleted [ 1053.320762][T20758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1053.346913][ T9899] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 1053.506342][ T9899] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1053.638112][ T9899] EXT4-fs error (device loop8): ext4_release_dquot:6989: comm kworker/u4:22: Failed to release dquot type 0 [ 1054.606802][T20766] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3457'. [ 1054.618510][T20766] warning: `syz.6.3457' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1054.644737][T17468] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.676847][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.690352][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.838412][T17468] EXT4-fs error (device loop8): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1054.939212][T17468] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1054.969019][T20773] loop2: detected capacity change from 0 to 16 [ 1055.008874][T17468] EXT4-fs error (device loop8): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1055.068909][T20773] erofs: (device loop2): mounted with root inode @ nid 36. [ 1055.850119][T20784] syzkaller0: entered promiscuous mode [ 1055.895698][T20784] syzkaller0: entered allmulticast mode [ 1056.301866][T20792] loop9: detected capacity change from 0 to 512 [ 1056.419995][T20795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3466'. [ 1056.462271][T20792] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.678091][T20792] ext4 filesystem being mounted at /539/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.894291][T20804] syzkaller0: entered promiscuous mode [ 1056.940844][T20804] syzkaller0: entered allmulticast mode [ 1057.038712][T17554] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1057.249736][T17554] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.314944][T17554] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.329975][T20813] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1057.388374][T17554] usb 9-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1057.436788][T17554] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.400112][T11986] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.835788][T20824] loop6: detected capacity change from 0 to 1024 [ 1058.868923][T17554] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.8-1/input0 [ 1058.924070][T20824] EXT4-fs: Ignoring removed mblk_io_submit option [ 1058.958853][T17554] input input10: Absolute device without dev->absinfo, refusing to register [ 1058.995172][T20824] EXT4-fs: Ignoring removed orlov option [ 1059.069891][T17554] wacom: probe of 0003:056A:033B.0003 failed with error -22 [ 1059.159437][T17554] usb 9-1: USB disconnect, device number 23 [ 1059.188799][T20824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1059.273138][T20827] fido_id[20827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1059.790423][T19980] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.038828][T20841] syzkaller0: entered promiscuous mode [ 1060.098311][T20841] syzkaller0: entered allmulticast mode [ 1060.138990][T20845] loop9: detected capacity change from 0 to 256 [ 1060.290919][T20845] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1060.392962][T20848] loop6: detected capacity change from 0 to 512 [ 1060.459466][T20845] exFAT-fs (loop9): failed to load alloc-bitmap [ 1060.465844][T20845] exFAT-fs (loop9): failed to recognize exfat type [ 1060.474426][T20848] ext3: Unknown parameter 'defcontext' [ 1062.256455][T20864] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 1062.748148][ T5821] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1062.927131][T20878] loop6: detected capacity change from 0 to 1024 [ 1062.975173][ T5821] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1063.032715][ T5821] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1063.115324][T20878] hfsplus: failed to extend attributes file [ 1063.136209][ T5821] usb 9-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1063.198222][ T5821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.206267][ T5821] usb 9-1: Product: syz [ 1063.286089][ T5821] usb 9-1: Manufacturer: syz [ 1063.318790][ T5821] usb 9-1: SerialNumber: syz [ 1063.584957][T20884] loop6: detected capacity change from 0 to 1024 [ 1065.414957][ T5821] usb 9-1: USB disconnect, device number 24 [ 1065.749086][T10161] udevd[10161]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1065.983242][T20895] syzkaller0: entered promiscuous mode [ 1066.029078][T20895] syzkaller0: entered allmulticast mode [ 1067.222174][T20915] loop6: detected capacity change from 0 to 8 [ 1067.272860][T20915] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1067.336160][T20915] SQUASHFS error: Failed to read block 0x91: -5 [ 1067.383978][T20915] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1067.417668][T20915] SQUASHFS error: Unable to read inode 0x11f [ 1067.557544][T20920] netlink: 'syz.9.3493': attribute type 10 has an invalid length. [ 1067.765128][T20922] PM: suspend entry (deep) [ 1067.848462][T20924] syzkaller0: entered promiscuous mode [ 1067.854076][T20924] syzkaller0: entered allmulticast mode [ 1068.031497][T20922] Filesystems sync: 0.242 seconds [ 1068.616945][T20922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1068.654864][T20922] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1068.786524][T20922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1068.831326][T20922] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1069.712179][T20922] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1069.750919][T20922] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1069.759273][T20922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1069.759373][T20922] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1069.909005][T20922] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1069.988059][T20922] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1070.201935][T20922] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1070.247992][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1070.421240][T20922] Freezing user space processes [ 1070.503687][T20922] Freezing user space processes failed after 0.061 seconds (60 tasks refusing to freeze, wq_busy=0): [ 1070.564964][T20922] task:syz-executor state:S stack:21800 pid:9171 ppid:1 flags:0x00004002 [ 1070.575259][T20922] Call Trace: [ 1070.578665][T20922] [ 1070.581624][T20922] __schedule+0x15ae/0x4660 [ 1070.586216][T20922] ? asan.module_dtor+0x20/0x20 [ 1070.591151][T20922] ? do_wait+0x685/0xab0 [ 1070.595422][T20922] ? _raw_spin_unlock+0x40/0x40 [ 1070.600600][T20922] schedule+0xbd/0x170 [ 1070.604720][T20922] do_wait+0x75c/0xab0 [ 1070.609342][T20922] kernel_wait4+0x22f/0x2b0 [ 1070.613891][T20922] ? __ia32_sys_waitid+0xc0/0xc0 [ 1070.618906][T20922] ? kernel_waitid+0x3d0/0x3d0 [ 1070.623728][T20922] ? zap_pid_ns_processes+0x13e/0x690 [ 1070.629157][T20922] zap_pid_ns_processes+0x3a4/0x690 [ 1070.634398][T20922] ? zap_pid_ns_processes+0x13e/0x690 [ 1070.640201][T20922] ? lock_chain_count+0x20/0x20 [ 1070.645071][T20922] ? put_pid_ns+0x130/0x130 [ 1070.650317][T20922] ? _raw_write_unlock_irq+0x23/0x50 [ 1070.656273][T20922] ? lockdep_hardirqs_on+0x98/0x150 [ 1070.661641][T20922] do_exit+0x2042/0x2530 [ 1070.665948][T20922] ? put_task_struct+0xc0/0xc0 [ 1070.670821][T20922] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1070.676818][T20922] ? get_signal+0x100e/0x1390 [ 1070.681583][T20922] ? lock_chain_count+0x20/0x20 [ 1070.686499][T20922] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1070.691572][T20922] do_group_exit+0x22d/0x2f0 [ 1070.696202][T20922] ? lockdep_hardirqs_on+0x98/0x150 [ 1070.701517][T20922] get_signal+0x12a6/0x1390 [ 1070.706067][T20922] arch_do_signal_or_restart+0xc2/0x7b0 [ 1070.711705][T20922] ? __x64_sys_wait4+0x1b8/0x240 [ 1070.716653][T20922] ? get_sigframe_size+0x20/0x20 [ 1070.721726][T20922] ? exit_to_user_mode_loop+0x3b/0x110 [ 1070.727223][T20922] exit_to_user_mode_loop+0x70/0x110 [ 1070.733357][T20922] exit_to_user_mode_prepare+0xee/0x180 [ 1070.739191][T20922] syscall_exit_to_user_mode+0x1a/0x50 [ 1070.744675][T20922] do_syscall_64+0x61/0xb0 [ 1070.749442][T20922] ? clear_bhb_loop+0x40/0x90 [ 1070.754208][T20922] ? clear_bhb_loop+0x40/0x90 [ 1070.759442][T20922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1070.765351][T20922] RIP: 0033:0x7f3d4b15e90e [ 1070.769902][T20922] RSP: 002b:00007ffc16422e18 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1070.778413][T20922] RAX: fffffffffffffe00 RBX: 0000555581c77500 RCX: 00007f3d4b15e90e [ 1070.786420][T20922] RDX: 0000000040000000 RSI: 00007ffc16422ebc RDI: ffffffffffffffff [ 1070.794436][T20922] RBP: 00007ffc16422ebc R08: 0000000000000000 R09: 0000000000000000 [ 1070.802491][T20922] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001e8 [ 1070.810594][T20922] R13: 0000555581c8aa00 R14: 00000000000d2aa4 R15: 00007ffc16422f10 [ 1070.818636][T20922] [ 1070.821717][T20922] task:syz.4.2539 state:D stack:26760 pid:16985 ppid:9171 flags:0x00004004 [ 1070.830986][T20922] Call Trace: [ 1070.834301][T20922] [ 1070.837261][T20922] __schedule+0x15ae/0x4660 [ 1070.842142][T20922] ? __lock_acquire+0x7d80/0x7d80 [ 1070.847183][T20922] ? lock_chain_count+0x20/0x20 [ 1070.852155][T20922] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1070.858140][T20922] ? asan.module_dtor+0x20/0x20 [ 1070.863486][T20922] ? _raw_spin_unlock+0x40/0x40 [ 1070.868476][T20922] ? prepare_to_wait_event+0x3db/0x470 [ 1070.873989][T20922] ? prepare_to_wait_event+0x434/0x470 [ 1070.879539][T20922] schedule+0xbd/0x170 [ 1070.883649][T20922] p9_client_rpc+0x492/0xeb0 [ 1070.888649][T20922] ? p9_fid_create+0x220/0x220 [ 1070.893434][T20922] ? do_raw_spin_lock+0x11f/0x2b0 [ 1070.898620][T20922] ? __rwlock_init+0x150/0x150 [ 1070.903432][T20922] ? wake_bit_function+0x200/0x200 [ 1070.908616][T20922] ? _raw_spin_unlock+0x28/0x40 [ 1070.913511][T20922] ? p9_fd_cancel+0x1cb/0x210 [ 1070.918269][T20922] p9_client_rpc+0xbeb/0xeb0 [ 1070.922891][T20922] ? __lock_acquire+0x7d80/0x7d80 [ 1070.927977][T20922] ? p9_fid_create+0x220/0x220 [ 1070.932762][T20922] ? wake_bit_function+0x200/0x200 [ 1070.937953][T20922] ? p9_fd_create+0x311/0x3f0 [ 1070.942655][T20922] p9_client_create+0xa04/0x1050 [ 1070.947935][T20922] ? do_trace_9p_fid_put+0x20/0x20 [ 1070.953177][T20922] ? lockdep_softirqs_off+0x440/0x440 [ 1070.958641][T20922] ? __raw_spin_lock_init+0x45/0x100 [ 1070.964458][T20922] v9fs_session_init+0x1aa/0x1960 [ 1070.969646][T20922] ? v9fs_show_options+0x700/0x700 [ 1070.974794][T20922] v9fs_mount+0xd0/0xb40 [ 1070.979154][T20922] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 1070.984999][T20922] legacy_get_tree+0xea/0x180 [ 1070.989756][T20922] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 1070.995596][T20922] vfs_get_tree+0x8c/0x280 [ 1071.000115][T20922] do_new_mount+0x24a/0xa40 [ 1071.004661][T20922] __se_sys_mount+0x2e7/0x3d0 [ 1071.009414][T20922] ? __x64_sys_mount+0xc0/0xc0 [ 1071.014196][T20922] ? lockdep_hardirqs_on+0x98/0x150 [ 1071.019475][T20922] ? __x64_sys_mount+0x20/0xc0 [ 1071.024253][T20922] do_syscall_64+0x55/0xb0 [ 1071.028722][T20922] ? clear_bhb_loop+0x40/0x90 [ 1071.033417][T20922] ? clear_bhb_loop+0x40/0x90 [ 1071.038178][T20922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1071.044104][T20922] RIP: 0033:0x7f3d4b19e0d9 [ 1071.048874][T20922] RSP: 002b:00007f3d4c00d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1071.057367][T20922] RAX: ffffffffffffffda RBX: 00007f3d4b425fa0 RCX: 00007f3d4b19e0d9 [ 1071.065927][T20922] RDX: 0000200000000080 RSI: 0000200000000100 RDI: 0000000000000000 [ 1071.074027][T20922] RBP: 00007f3d4b235024 R08: 0000200000000280 R09: 0000000000000000 [ 1071.082087][T20922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.090130][T20922] R13: 00007f3d4b426038 R14: 00007f3d4b425fa0 R15: 00007ffc16422b18 [ 1071.098172][T20922] [ 1071.101266][T20922] task:syz-executor state:R running task stack:20744 pid:19980 ppid:19947 flags:0x00004006 [ 1071.112123][T20922] Call Trace: [ 1071.115413][T20922] [ 1071.118481][T20922] __schedule+0x15ae/0x4660 [ 1071.123040][T20922] ? verify_lock_unused+0x140/0x140 [ 1071.128362][T20922] ? asan.module_dtor+0x20/0x20 [ 1071.133257][T20922] ? mark_lock+0x94/0x320 [ 1071.137649][T20922] ? lock_chain_count+0x20/0x20 [ 1071.142571][T20922] ? preempt_schedule+0xc0/0xd0 [ 1071.147446][T20922] preempt_schedule_common+0x82/0xc0 [ 1071.153101][T20922] preempt_schedule+0xc0/0xd0 [ 1071.157890][T20922] ? schedule_preempt_disabled+0x20/0x20 [ 1071.163541][T20922] preempt_schedule_thunk+0x1a/0x30 [ 1071.169304][T20922] ? unwind_next_frame+0x2017/0x2990 [ 1071.174623][T20922] unwind_next_frame+0x201c/0x2990 [ 1071.179882][T20922] ? evict+0x4b7/0x8a0 [ 1071.183982][T20922] ? evict+0x4b7/0x8a0 [ 1071.188162][T20922] ? stack_trace_save+0x100/0x100 [ 1071.193204][T20922] arch_stack_walk+0x144/0x190 [ 1071.198052][T20922] ? do_unlinkat+0x38c/0x590 [ 1071.202677][T20922] stack_trace_save+0xaa/0x100 [ 1071.207452][T20922] ? stack_trace_snprint+0xf0/0xf0 [ 1071.212688][T20922] save_stack+0x125/0x230 [ 1071.217030][T20922] ? __reset_page_owner+0x190/0x190 [ 1071.222314][T20922] ? free_unref_page_prepare+0x7d7/0x8f0 [ 1071.228018][T20922] ? free_unref_page_list+0xbe/0x860 [ 1071.233312][T20922] ? release_pages+0x208a/0x2300 [ 1071.238315][T20922] ? __folio_batch_release+0x71/0xe0 [ 1071.243616][T20922] ? shmem_undo_range+0x5ff/0x1a80 [ 1071.248774][T20922] ? shmem_evict_inode+0x285/0xa70 [ 1071.254188][T20922] ? evict+0x4b7/0x8a0 [ 1071.258462][T20922] ? page_ext_get+0x22/0x2b0 [ 1071.263075][T20922] ? page_ext_get+0x1e2/0x2b0 [ 1071.267854][T20922] __reset_page_owner+0x4e/0x190 [ 1071.273276][T20922] ? rcu_is_watching+0x15/0xb0 [ 1071.278176][T20922] free_unref_page_prepare+0x7d7/0x8f0 [ 1071.283657][T20922] free_unref_page_list+0xbe/0x860 [ 1071.289301][T20922] ? __folio_memcg+0x63/0x170 [ 1071.294014][T20922] ? folio_memcg+0x127/0x4a0 [ 1071.298704][T20922] release_pages+0x208a/0x2300 [ 1071.303510][T20922] ? lru_cache_disable+0x30/0x30 [ 1071.308512][T20922] ? do_raw_spin_unlock+0x121/0x230 [ 1071.313754][T20922] __folio_batch_release+0x71/0xe0 [ 1071.318933][T20922] shmem_undo_range+0x5ff/0x1a80 [ 1071.323903][T20922] ? verify_lock_unused+0x140/0x140 [ 1071.329236][T20922] ? shmem_truncate_range+0xa0/0xa0 [ 1071.334470][T20922] ? inode_wait_for_writeback+0x1e3/0x230 [ 1071.340276][T20922] ? __lock_acquire+0x7d80/0x7d80 [ 1071.345306][T20922] ? do_raw_spin_lock+0x11f/0x2b0 [ 1071.350513][T20922] shmem_evict_inode+0x285/0xa70 [ 1071.355823][T20922] ? inode_wait_for_writeback+0x1e3/0x230 [ 1071.361698][T20922] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1071.367262][T20922] ? sb_clear_inode_writeback+0x330/0x330 [ 1071.373500][T20922] ? do_raw_spin_lock+0x11f/0x2b0 [ 1071.378651][T20922] ? bit_waitqueue+0x30/0x30 [ 1071.383260][T20922] ? do_raw_spin_unlock+0x121/0x230 [ 1071.388535][T20922] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1071.394096][T20922] evict+0x4b7/0x8a0 [ 1071.398042][T20922] ? __lock_acquire+0x7d80/0x7d80 [ 1071.403097][T20922] ? proc_nr_inodes+0x230/0x230 [ 1071.408042][T20922] ? do_raw_spin_unlock+0x121/0x230 [ 1071.413260][T20922] ? _raw_spin_unlock+0x28/0x40 [ 1071.418191][T20922] do_unlinkat+0x38c/0x590 [ 1071.422651][T20922] ? fsnotify_link_count+0xf0/0xf0 [ 1071.427826][T20922] ? getname_flags+0x20a/0x500 [ 1071.432622][T20922] __x64_sys_unlink+0x49/0x50 [ 1071.437331][T20922] do_syscall_64+0x55/0xb0 [ 1071.441830][T20922] ? clear_bhb_loop+0x40/0x90 [ 1071.446526][T20922] ? clear_bhb_loop+0x40/0x90 [ 1071.451470][T20922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1071.457673][T20922] RIP: 0033:0x7f172d59d1c7 [ 1071.462230][T20922] RSP: 002b:00007ffc02b360a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1071.470728][T20922] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f172d59d1c7 [ 1071.479227][T20922] RDX: 00007ffc02b360d0 RSI: 00007ffc02b36160 RDI: 00007ffc02b36160 [ 1071.487280][T20922] RBP: 00007ffc02b36160 R08: 00007ffc02b37160 R09: 00000000ffffffff [ 1071.495322][T20922] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc02b371f0 [ 1071.503369][T20922] R13: 00007f172d634474 R14: 000000000010530b R15: 00007ffc02b37230 [ 1071.511408][T20922] [ 1071.598075][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1071.957938][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1071.964038][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1071.972543][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1072.003541][T20922] OOM killer enabled. [ 1072.007584][T20922] Restarting tasks ... done. [ 1072.206145][T20922] random: crng reseeded on system resumption [ 1072.288064][T20922] PM: suspend exit [ 1072.327878][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 1072.691232][T20966] bond0: (slave bridge0): Releasing backup interface [ 1072.862281][T20968] netlink: 'syz.8.3508': attribute type 10 has an invalid length. [ 1072.967246][T20968] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1073.616660][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 1074.007968][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 1074.014060][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1074.020688][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1076.189035][T20991] Bluetooth: hci4: command 0x0c1a tx timeout [ 1076.934033][T21021] syzkaller0: entered promiscuous mode [ 1077.001599][T21021] syzkaller0: entered allmulticast mode [ 1077.566599][T21032] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3523'. [ 1077.586211][ T28] audit: type=1800 audit(2000000392.860:67): pid=21036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3525" name="pnp_string" dev="configfs" ino=61314 res=0 errno=0 [ 1078.315692][T21055] loop6: detected capacity change from 0 to 256 [ 1078.386291][T21055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3530'. [ 1083.218390][T21071] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3535'. [ 1083.626188][T21082] loop8: detected capacity change from 0 to 1024 [ 1083.796804][T21086] loop6: detected capacity change from 0 to 128 [ 1083.855112][T21082] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1083.948621][ T28] audit: type=1804 audit(2000000399.200:68): pid=21086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3539" name="/newroot/57/file1/bus" dev="loop6" ino=1048799 res=1 errno=0 [ 1084.316281][T17468] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.350372][T21097] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1085.803992][T21126] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1086.216946][T21131] loop8: detected capacity change from 0 to 16 [ 1086.291784][T21131] erofs: (device loop8): mounted with root inode @ nid 36. [ 1086.349705][T21133] loop9: detected capacity change from 0 to 16 [ 1086.508306][T21133] erofs: (device loop9): mounted with root inode @ nid 36. [ 1091.325268][T21181] loop6: detected capacity change from 0 to 1024 [ 1091.519655][T17554] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1091.666996][T21181] syz.6.3564: attempt to access beyond end of device [ 1091.666996][T21181] loop6: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1091.784369][T21181] Buffer I/O error on dev loop6, logical block 2889, async page read [ 1091.793033][T17554] usb 3-1: Using ep0 maxpacket: 32 [ 1091.824677][T17554] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 1091.861873][T17554] usb 3-1: config 2 has no interface number 0 [ 1091.924784][T21180] syz.6.3564: attempt to access beyond end of device [ 1091.924784][T21180] loop6: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1091.939221][T17554] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 1091.997913][T17554] usb 3-1: config 2 interface 88 has no altsetting 0 [ 1092.013184][T21180] Buffer I/O error on dev loop6, logical block 2889, async page read [ 1092.030921][T17554] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1092.070801][T17554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1092.079397][T21195] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3568'. [ 1092.089008][T21181] syz.6.3564: attempt to access beyond end of device [ 1092.089008][T21181] loop6: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1092.123802][T17554] usb 3-1: Product: syz [ 1092.138450][T17554] usb 3-1: Manufacturer: syz [ 1092.158747][T21181] Buffer I/O error on dev loop6, logical block 2889, async page read [ 1092.178946][T17554] usb 3-1: SerialNumber: syz [ 1092.218433][T21180] syz.6.3564: attempt to access beyond end of device [ 1092.218433][T21180] loop6: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1092.238206][T21179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1092.310305][T21180] Buffer I/O error on dev loop6, logical block 2889, async page read [ 1092.356734][T21181] syz.6.3564: attempt to access beyond end of device [ 1092.356734][T21181] loop6: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1092.460000][T21181] Buffer I/O error on dev loop6, logical block 2889, async page read [ 1092.486806][T17554] asix: probe of 3-1:2.88 failed with error -71 [ 1092.527093][T21200] loop8: detected capacity change from 0 to 2048 [ 1092.534081][T21202] syz.6.3564: attempt to access beyond end of device [ 1092.534081][T21202] loop6: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1092.570114][T17554] usb 3-1: USB disconnect, device number 20 [ 1092.605144][T21200] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 1092.642845][T21202] Buffer I/O error on dev loop6, logical block 2889, async page read [ 1092.710039][T21180] syz.6.3564: attempt to access beyond end of device [ 1092.710039][T21180] loop6: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1092.750545][T21200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1092.794558][T21180] Buffer I/O error on dev loop6, logical block 2889, async page read [ 1092.840308][T21181] syz.6.3564: attempt to access beyond end of device [ 1092.840308][T21181] loop6: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1093.113229][T21181] Buffer I/O error on dev loop6, logical block 2889, async page read [ 1093.392856][T21209] UDF-fs: error (device loop8): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 1093.425048][T21180] syz.6.3564: attempt to access beyond end of device [ 1093.425048][T21180] loop6: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1093.480707][T21180] Buffer I/O error on dev loop6, logical block 2889, async page read [ 1093.627936][T21202] syz.6.3564: attempt to access beyond end of device [ 1093.627936][T21202] loop6: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1093.744031][T21202] Buffer I/O error on dev loop6, logical block 2889, async page read [ 1093.883874][T21215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3573'. [ 1093.970619][T21203] hfsplus: request for non-existent node 1280 in B*Tree [ 1094.138199][T21203] hfsplus: request for non-existent node 1280 in B*Tree [ 1094.158091][ T5817] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1094.376924][ T5817] usb 9-1: not running at top speed; connect to a high speed hub [ 1094.427083][ T5817] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.490546][ T5817] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1094.544708][ T5817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.643090][ T5817] usb 9-1: Found UVC 1.00 device (046d:0825) [ 1094.887927][T14120] Bluetooth: hci4: command 0x0c1a tx timeout [ 1095.018842][ T5817] usb 9-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1095.079454][T21239] loop2: detected capacity change from 0 to 1024 [ 1095.086195][ T5817] uvcvideo 9-1:1.1: No frame descriptor found for the default format. [ 1095.127308][ T5817] uvcvideo 9-1:1.1: Failed to initialize the device (-22). [ 1095.204497][T21239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1095.256666][ T5821] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1095.297104][ T5817] usb 9-1: USB disconnect, device number 25 [ 1095.327318][T21239] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.339223][T21244] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1095.599249][ T5821] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 1096.969392][ T5821] usb 7-1: config 0 has no interface number 0 [ 1097.031643][ T5821] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1097.081036][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.141047][ T5821] usb 7-1: Product: syz [ 1097.145288][ T5821] usb 7-1: Manufacturer: syz [ 1097.184017][ T5821] usb 7-1: SerialNumber: syz [ 1097.204263][ T5821] usb 7-1: config 0 descriptor?? [ 1097.308091][ T5615] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1097.499125][T21256] loop9: detected capacity change from 0 to 1024 [ 1097.519522][ T5821] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 1097.568570][T21256] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1097.599235][ T5821] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 1097.612469][ T5615] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.664470][ T5821] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 1097.677470][ T5615] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1097.721349][T21237] loop6: detected capacity change from 0 to 128 [ 1097.730992][ T5821] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 1097.771461][ T5615] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1097.806905][T21237] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1097.829250][ T5821] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1097.864905][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.929281][T21237] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1097.949810][ T5615] usb 3-1: Product: syz [ 1097.991764][ T5615] usb 3-1: Manufacturer: syz [ 1098.040538][ T5615] usb 3-1: SerialNumber: syz [ 1098.233095][ T5615] usb 3-1: can't set config #1, error -71 [ 1098.265024][T11986] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.301071][T18651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1098.313661][T21267] netlink: 'syz.8.3584': attribute type 1 has an invalid length. [ 1098.339772][ T5615] usb 3-1: USB disconnect, device number 21 [ 1098.418211][ T5818] usb 7-1: USB disconnect, device number 24 [ 1098.479506][ T5818] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1098.571945][ T5818] keyspan 7-1:0.133: device disconnected [ 1098.587668][T21269] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3584'. [ 1098.717542][T21269] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1098.766909][T21271] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3584'. [ 1099.452596][T21289] syz.6.3589 invoked oom-killer: gfp_mask=0x482cc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_NOMEMALLOC), order=2, oom_score_adj=1000 [ 1099.544366][T21289] CPU: 0 PID: 21289 Comm: syz.6.3589 Not tainted syzkaller #0 [ 1099.551892][T21289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1099.561958][T21289] Call Trace: [ 1099.565246][T21289] [ 1099.568199][T21289] dump_stack_lvl+0x18c/0x250 [ 1099.572911][T21289] ? show_regs_print_info+0x20/0x20 [ 1099.578130][T21289] ? load_image+0x420/0x420 [ 1099.582639][T21289] ? ___ratelimit+0x478/0x610 [ 1099.587361][T21289] ? radix_tree_cpu_dead+0x160/0x160 [ 1099.592655][T21289] dump_header+0xd8/0x820 [ 1099.597011][T21289] oom_kill_process+0x390/0x580 [ 1099.601885][T21289] out_of_memory+0xe0e/0x1200 [ 1099.606576][T21289] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1099.612240][T21289] ? mutex_lock_nested+0x20/0x20 [ 1099.617208][T21289] ? unregister_oom_notifier+0x20/0x20 [ 1099.622681][T21289] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1099.628243][T21289] ? try_charge_memcg+0xc91/0x17c0 [ 1099.633492][T21289] ? drain_local_stock+0x630/0x630 [ 1099.638635][T21289] ? do_raw_spin_unlock+0x121/0x230 [ 1099.643910][T21289] try_charge_memcg+0xca1/0x17c0 [ 1099.648873][T21289] ? folio_flags+0x120/0x120 [ 1099.653475][T21289] ? percpu_ref_tryget+0x15/0x180 [ 1099.658505][T21289] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1099.664235][T21289] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1099.670246][T21289] ? percpu_ref_tryget+0x15/0x180 [ 1099.675299][T21289] ? percpu_ref_tryget+0x15/0x180 [ 1099.680327][T21289] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1099.686050][T21289] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1099.691780][T21289] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1099.697604][T21289] obj_cgroup_charge+0x36e/0x630 [ 1099.702552][T21289] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1099.708452][T21289] ? obj_cgroup_charge+0xed/0x630 [ 1099.713486][T21289] ? mod_objcg_mlstate+0x320/0x320 [ 1099.718607][T21289] ? percpu_ref_tryget+0x15/0x180 [ 1099.723647][T21289] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1099.729553][T21289] slab_pre_alloc_hook+0x2e2/0x300 [ 1099.734711][T21289] ? __alloc_skb+0x138/0x2c0 [ 1099.739318][T21289] ? __alloc_skb+0x138/0x2c0 [ 1099.743913][T21289] __kmem_cache_alloc_node+0x53/0x250 [ 1099.749323][T21289] ? __alloc_skb+0x138/0x2c0 [ 1099.753915][T21289] __kmalloc_node_track_caller+0xa4/0x230 [ 1099.759668][T21289] ? rcu_is_watching+0x15/0xb0 [ 1099.764442][T21289] ? __alloc_skb+0x138/0x2c0 [ 1099.769035][T21289] kmalloc_reserve+0x116/0x240 [ 1099.773821][T21289] __alloc_skb+0x138/0x2c0 [ 1099.778261][T21289] alloc_skb_with_frags+0xcd/0x7a0 [ 1099.783404][T21289] sock_alloc_send_pskb+0x883/0x9a0 [ 1099.788673][T21289] ? sock_kzfree_s+0x50/0x50 [ 1099.793282][T21289] ? __lock_acquire+0x7d80/0x7d80 [ 1099.798342][T21289] ? sock_def_readable+0xad/0x420 [ 1099.803422][T21289] ? sock_def_readable+0xad/0x420 [ 1099.808450][T21289] ? sock_def_readable+0x2ac/0x420 [ 1099.813592][T21289] unix_stream_sendmsg+0x48b/0xbf0 [ 1099.818728][T21289] ? unix_show_fdinfo+0x280/0x280 [ 1099.823759][T21289] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1099.830192][T21289] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1099.835743][T21289] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1099.841035][T21289] ? security_socket_sendmsg+0x80/0xa0 [ 1099.846507][T21289] ? unix_show_fdinfo+0x280/0x280 [ 1099.851542][T21289] ____sys_sendmsg+0x61b/0x980 [ 1099.856323][T21289] ? __asan_memset+0x22/0x40 [ 1099.860925][T21289] ? __sys_sendmsg_sock+0x30/0x30 [ 1099.865960][T21289] ? __import_iovec+0x5f2/0x850 [ 1099.870832][T21289] ? import_iovec+0x73/0xa0 [ 1099.875353][T21289] ___sys_sendmsg+0x2a6/0x360 [ 1099.880044][T21289] ? __sys_sendmsg+0x2b0/0x2b0 [ 1099.884851][T21289] ? init_file+0x12c/0x1f0 [ 1099.889293][T21289] ? alloc_file+0x87/0x600 [ 1099.893729][T21289] __se_sys_sendmsg+0x1d0/0x2c0 [ 1099.898616][T21289] ? __x64_sys_sendmsg+0x80/0x80 [ 1099.903576][T21289] ? lockdep_hardirqs_on+0x98/0x150 [ 1099.908790][T21289] do_syscall_64+0x55/0xb0 [ 1099.913215][T21289] ? clear_bhb_loop+0x40/0x90 [ 1099.917902][T21289] ? clear_bhb_loop+0x40/0x90 [ 1099.922585][T21289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1099.928491][T21289] RIP: 0033:0x7f172d59e0d9 [ 1099.932933][T21289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.952542][T21289] RSP: 002b:00007f172b7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.960963][T21289] RAX: ffffffffffffffda RBX: 00007f172d825fa0 RCX: 00007f172d59e0d9 [ 1099.968942][T21289] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000009 [ 1099.976918][T21289] RBP: 00007f172d635024 R08: 0000000000000000 R09: 0000000000000000 [ 1099.984910][T21289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1099.992887][T21289] R13: 00007f172d826038 R14: 00007f172d825fa0 R15: 00007ffc02b36e38 [ 1100.000882][T21289] [ 1100.150640][T21300] loop8: detected capacity change from 0 to 128 [ 1100.270355][T21306] loop2: detected capacity change from 0 to 16 [ 1100.307666][T21306] erofs: (device loop2): mounted with root inode @ nid 36. [ 1100.329174][T21300] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1100.404630][T21306] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 1100.869101][T21316] netlink: 'syz.2.3596': attribute type 1 has an invalid length. [ 1101.029684][T21289] memory: usage 12kB, limit 96kB, failcnt 42 [ 1101.035970][T21319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3596'. [ 1101.071350][T21289] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 1101.142963][T21289] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1101.150533][T21319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1101.213461][T21289] Memory cgroup stats for /syz6/test: [ 1101.213999][T21289] cache 0 [ 1101.223911][T21322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3596'. [ 1101.254970][T21289] rss 0 [ 1101.276049][T21289] rss_huge 0 [ 1101.307906][T21289] shmem 0 [ 1101.310936][T21289] mapped_file 0 [ 1101.349408][T21289] dirty 0 [ 1101.352425][T21289] writeback 0 [ 1101.355712][T21289] workingset_refault_anon 0 [ 1101.427966][T21289] workingset_refault_file 0 [ 1101.432520][T21289] swap 4096 [ 1101.435627][T21289] pgpgin 1 [ 1101.496520][T21289] pgpgout 1 [ 1101.545918][T21289] pgfault 22 [ 1101.560255][T21289] pgmajfault 0 [ 1101.564056][T21289] inactive_anon 0 [ 1101.601180][T21289] active_anon 0 [ 1101.604700][T21289] inactive_file 0 [ 1101.644520][T21289] active_file 0 [ 1101.662527][T21289] unevictable 0 [ 1101.682023][T21289] hierarchical_memory_limit 98304 [ 1101.716325][T21289] hierarchical_memsw_limit 9223372036854771712 [ 1101.757976][T21289] total_cache 0 [ 1101.761485][T21289] total_rss 0 [ 1101.827995][T21289] total_rss_huge 0 [ 1101.842214][T21289] total_shmem 0 [ 1101.845727][T21289] total_mapped_file 0 [ 1101.872942][T21289] total_dirty 0 [ 1101.876450][T21289] total_writeback 0 [ 1101.921517][T21289] total_workingset_refault_anon 0 [ 1101.926603][T21289] total_workingset_refault_file 0 [ 1101.971820][T21289] total_swap 4096 [ 1101.975506][T21289] total_pgpgin 1 [ 1102.048049][T21289] total_pgpgout 1 [ 1102.051746][T21289] total_pgfault 22 [ 1102.055474][T21289] total_pgmajfault 0 [ 1102.099146][T21289] total_inactive_anon 0 [ 1102.103376][T21289] total_active_anon 0 [ 1102.107358][T21289] total_inactive_file 0 [ 1102.157257][T21289] total_active_file 0 [ 1102.221382][T21289] total_unevictable 0 [ 1102.247293][T21289] anon_cost 0 [ 1102.294554][T21289] file_cost 0 [ 1102.331590][T21289] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.3589,pid=21285,uid=0 [ 1102.380093][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3604'. [ 1102.420047][T21289] Memory cgroup out of memory: Killed process 21289 (syz.6.3589) total-vm:102376kB, anon-rss:1372kB, file-rss:22912kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1102.888014][ T5615] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1104.540358][ T5615] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1104.593075][ T5615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.641650][ T5615] usb 10-1: Product: syz [ 1104.650938][T21365] netlink: 'syz.6.3608': attribute type 1 has an invalid length. [ 1104.669927][ T5615] usb 10-1: Manufacturer: syz [ 1104.674693][ T5615] usb 10-1: SerialNumber: syz [ 1104.863506][T21367] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3608'. [ 1104.976377][T21367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1105.023079][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3608'. [ 1105.076403][T21369] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3608'. [ 1105.840644][ T5615] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1105.847580][ T5615] cdc_ncm 10-1:1.0: setting rx_max = 16384 [ 1105.974277][T21393] loop2: detected capacity change from 0 to 1024 [ 1106.041130][ T5615] cdc_ncm 10-1:1.0: setting tx_max = 16384 [ 1106.138953][T21397] syzkaller0: entered promiscuous mode [ 1106.146149][ T5615] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1106.187275][T21397] syzkaller0: entered allmulticast mode [ 1106.265821][ T5615] usb 10-1: USB disconnect, device number 26 [ 1106.342336][ T5615] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 1106.720205][ T5821] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1106.937987][ T5821] usb 7-1: Using ep0 maxpacket: 32 [ 1106.988204][ T5821] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1107.068516][ T5821] usb 7-1: config 0 has no interface number 0 [ 1107.122081][ T5821] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1107.172131][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.232878][ T5821] usb 7-1: Product: syz [ 1107.271616][ T5821] usb 7-1: Manufacturer: syz [ 1107.308272][ T5821] usb 7-1: SerialNumber: syz [ 1107.356356][ T5821] usb 7-1: config 0 descriptor?? [ 1107.414974][ T5821] smsc95xx v2.0.0 [ 1107.530764][T21418] netlink: 'syz.8.3621': attribute type 1 has an invalid length. [ 1107.728454][T21423] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3621'. [ 1107.769017][T21423] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3621'. [ 1107.832225][ T5821] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1107.857962][T21421] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3621'. [ 1107.887920][ T5821] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1107.909316][T21421] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1108.353507][ T5821] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1108.403046][ T5821] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 1108.461615][ T5821] usb 7-1: USB disconnect, device number 25 [ 1109.198475][T21449] loop8: detected capacity change from 0 to 512 [ 1109.291889][T21449] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1109.425770][T21449] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1109.770111][T21469] loop6: detected capacity change from 0 to 128 [ 1109.856484][T21469] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1110.043661][T17468] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.046522][T21494] loop6: detected capacity change from 0 to 8192 [ 1111.109443][T21494] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1111.826183][T21515] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3639'. [ 1113.238325][T21530] loop9: detected capacity change from 0 to 2048 [ 1113.420199][T21530] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.451478][T21532] loop6: detected capacity change from 0 to 8192 [ 1113.624137][T21530] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.798103][T11986] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.971250][T21559] loop2: detected capacity change from 0 to 512 [ 1116.072131][T21562] loop6: detected capacity change from 0 to 512 [ 1116.103485][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.132423][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.175347][T21559] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.3650: invalid block [ 1116.320141][T21562] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 1116.341710][T21559] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.3650: Invalid block bitmap block 0 in block_group 0 [ 1116.396356][T21562] System zones: 0-2, 18-18, 34-35 [ 1116.454520][T21562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1116.495219][T21559] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1116.525372][T21559] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.3650: attempt to clear invalid blocks 983261 len 1 [ 1116.543884][T21562] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1116.680006][T21559] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3650: invalid indirect mapped block 2683928664 (level 0) [ 1116.782132][T21559] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.3650: Invalid inode table block 0 in block_group 0 [ 1117.011572][T21572] loop9: detected capacity change from 0 to 1024 [ 1117.293055][T21559] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1117.340494][T21572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1117.351500][T21559] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1117.384101][T19980] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.418655][T21559] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.3650: Invalid inode table block 0 in block_group 0 [ 1117.543958][T21559] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1117.575008][T21572] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1117.770902][T21559] EXT4-fs error (device loop2): ext4_truncate:4302: inode #13: comm syz.2.3650: mark_inode_dirty error [ 1117.842095][T21590] loop6: detected capacity change from 0 to 8 [ 1117.907822][T21559] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1117.994635][T21559] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.3650: Invalid inode table block 0 in block_group 0 [ 1118.043772][T21590] SQUASHFS error: Unable to read directory block [629:26] [ 1118.140959][T21559] EXT4-fs (loop2): 1 truncate cleaned up [ 1118.147526][T21559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1118.460616][T11986] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.625012][T18651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.223223][ T5818] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1120.464804][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.533005][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.743014][ T5818] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1120.799973][ T5818] usb 7-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 1120.860069][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.919739][ T5818] usb 7-1: config 0 descriptor?? [ 1121.202885][ T5818] usbhid 7-1:0.0: can't add hid device: -71 [ 1121.268108][ T5818] usbhid: probe of 7-1:0.0 failed with error -71 [ 1121.328878][ T5818] usb 7-1: USB disconnect, device number 26 [ 1121.775693][T21633] netlink: 'syz.2.3662': attribute type 10 has an invalid length. [ 1122.010507][T21637] netlink: 'syz.6.3664': attribute type 1 has an invalid length. [ 1122.312021][T21639] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3664'. [ 1122.631930][T21639] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1122.664725][T21644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3664'. [ 1122.710684][T21644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3664'. [ 1128.586712][T21684] hub 8-0:1.0: USB hub found [ 1128.594949][T21684] hub 8-0:1.0: 1 port detected [ 1128.967578][T21691] loop8: detected capacity change from 0 to 1024 [ 1130.988939][T21734] xt_TCPMSS: Only works on TCP SYN packets [ 1131.484360][T21742] loop6: detected capacity change from 0 to 512 [ 1131.546383][T21742] EXT4-fs: Ignoring removed oldalloc option [ 1131.622753][T21742] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1131.862052][T21742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 1131.913417][T21742] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1131.979358][T21742] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.3687: bad orphan inode 267 [ 1132.059129][T21742] EXT4-fs (loop6): Remounting filesystem read-only [ 1132.104516][T21742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1132.405453][T19980] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1132.703918][T21756] loop9: detected capacity change from 0 to 1024 [ 1133.301904][T21767] loop2: detected capacity change from 0 to 256 [ 1133.453236][T21767] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 1133.766950][T21773] loop6: detected capacity change from 0 to 164 [ 1134.377507][T21779] rock: directory entry would overflow storage [ 1134.384362][T21779] rock: sig=0x4f50, size=4, remaining=3 [ 1134.389999][T21779] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1134.928520][T21784] loop9: detected capacity change from 0 to 512 [ 1134.935840][T21784] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1135.564057][T21792] loop8: detected capacity change from 0 to 512 [ 1135.665349][T21792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 1135.757929][T21792] System zones: 1-12 [ 1135.791975][T21792] EXT4-fs error (device loop8): ext4_iget_extra_inode:4740: inode #15: comm syz.8.3700: corrupted in-inode xattr: overlapping e_value [ 1136.801441][T21792] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.3700: couldn't read orphan inode 15 (err -117) [ 1136.906126][T21792] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1138.486160][T21809] loop9: detected capacity change from 0 to 512 [ 1138.529093][T21809] EXT4-fs (loop9): first meta block group too large: 67043329 (group descriptor block count 1) [ 1138.621983][T21185] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1138.677202][T17468] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.143108][T21842] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3713'. [ 1141.406908][T21850] loop6: detected capacity change from 0 to 512 [ 1141.807853][T17554] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1142.034192][T17554] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1142.056049][T17554] usb 7-1: not running at top speed; connect to a high speed hub [ 1142.128259][T17554] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1142.163695][T17554] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1142.210921][T17554] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1142.258730][T17554] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.267559][ T9896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.306181][T17554] usb 7-1: Product: syz [ 1142.341614][T17554] usb 7-1: Manufacturer: syz [ 1142.346262][T17554] usb 7-1: SerialNumber: syz [ 1142.404975][T21850] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1142.669789][ T9896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.709721][T17554] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1142.747637][T17554] usb 7-1: MIDIStreaming interface descriptor not found [ 1142.913752][T17554] usb 7-1: USB disconnect, device number 27 [ 1143.013188][T21089] udevd[21089]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1143.402834][T20991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1143.415339][T20991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1143.424015][T20991] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1143.434973][T20991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1143.442805][T20991] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1143.489417][T20991] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1143.496971][ T9896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.789520][T21888] loop6: detected capacity change from 0 to 256 [ 1143.856659][ T9896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.847933][T14120] Bluetooth: hci0: command tx timeout [ 1146.170148][T21906] loop9: detected capacity change from 0 to 8 [ 1146.278133][T21876] chnl_net:caif_netlink_parms(): no params data found [ 1146.310869][T21908] loop6: detected capacity change from 0 to 2048 [ 1146.444489][T21908] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1146.545668][T21908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1147.932944][T14120] Bluetooth: hci0: command tx timeout [ 1147.998640][T21876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.027247][T21942] loop6: detected capacity change from 0 to 1024 [ 1148.038233][T21876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.045495][T21876] bridge_slave_0: entered allmulticast mode [ 1148.117169][T21876] bridge_slave_0: entered promiscuous mode [ 1148.418587][T21876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.425726][T21876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.463791][T21876] bridge_slave_1: entered allmulticast mode [ 1148.501959][T21876] bridge_slave_1: entered promiscuous mode [ 1148.584435][T21947] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3734'. [ 1148.612441][T21948] syz_tun: entered allmulticast mode [ 1148.784273][T21876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.933388][T21876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.228896][ T5818] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1149.252229][T21876] team0: Port device team_slave_0 added [ 1149.365210][T21876] team0: Port device team_slave_1 added [ 1149.438010][ T5818] usb 10-1: Using ep0 maxpacket: 32 [ 1149.459306][ T5818] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1149.481976][ T5818] usb 10-1: config 0 has no interface number 0 [ 1149.497942][ T5818] usb 10-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 1149.533714][ T5818] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1149.586791][ T5818] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1149.612235][ T5818] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.632033][ T5818] usb 10-1: Product: syz [ 1149.636332][ T5818] usb 10-1: Manufacturer: syz [ 1149.662419][ T5818] usb 10-1: SerialNumber: syz [ 1149.700294][ T5818] usb 10-1: config 0 descriptor?? [ 1149.721519][T21957] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1149.760784][ T5818] smsc75xx v1.0.0 [ 1149.977071][T21876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.006372][T21957] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1150.030958][T14120] Bluetooth: hci0: command tx timeout [ 1150.048019][T21876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.144914][T21876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.319010][T21876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.345770][T21876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.425885][T21876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.503057][ T5818] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1150.565111][ T5818] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1150.584798][ T9896] hsr_slave_0: left promiscuous mode [ 1150.623155][ T9896] hsr_slave_1: left promiscuous mode [ 1150.943105][ T9896] veth1_macvtap: left promiscuous mode [ 1150.965070][ T9896] veth0_macvtap: left promiscuous mode [ 1150.995290][ T9896] veth1_vlan: left promiscuous mode [ 1151.016812][ T5818] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1151.041088][ T9896] veth0_vlan: left promiscuous mode [ 1151.074941][ T5818] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1151.135853][ T5818] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1151.178077][ T5818] smsc75xx: probe of 10-1:0.184 failed with error -71 [ 1151.238119][ T5818] usb 10-1: USB disconnect, device number 27 [ 1151.471469][T21989] loop6: detected capacity change from 0 to 256 [ 1151.873081][T21994] loop6: detected capacity change from 0 to 256 [ 1151.984887][T21994] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1152.091665][T14120] Bluetooth: hci0: command tx timeout [ 1152.139500][T21997] loop9: detected capacity change from 0 to 1024 [ 1152.854044][T22005] loop9: detected capacity change from 0 to 2048 [ 1152.924273][T22002] kvm: kvm [22001]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe60c [ 1152.951835][T22005] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1153.534782][ T9896] bond4 (unregistering): Released all slaves [ 1153.574077][ T9896] bond3 (unregistering): Released all slaves [ 1153.644942][ T9896] bond2 (unregistering): Released all slaves [ 1153.804720][ T9896] bond1 (unregistering): Released all slaves [ 1153.830629][T22012] loop6: detected capacity change from 0 to 16 [ 1153.873976][T22012] erofs: (device loop6): mounted with root inode @ nid 36. [ 1153.961438][T22010] loop8: detected capacity change from 0 to 512 [ 1153.977554][T22012] erofs: (device loop6): z_erofs_readahead: readahead error at folio 3600 @ nid 36 [ 1154.014081][T22012] erofs: (device loop6): z_erofs_readahead: readahead error at folio 3599 @ nid 36 [ 1154.317278][T22010] ext4: Bad value for 'data' [ 1154.327859][ T5818] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1154.549014][ T5818] usb 10-1: Using ep0 maxpacket: 8 [ 1154.563075][ T5818] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 1154.595653][ T5818] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.637038][ T5818] usb 10-1: Product: syz [ 1154.655224][ T5818] usb 10-1: Manufacturer: syz [ 1154.676042][ T5818] usb 10-1: SerialNumber: syz [ 1154.970532][ T5818] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1155.260969][ T5818] snd-usb-audio: probe of 10-1:1.1 failed with error -2 [ 1155.312334][ T5818] usb 10-1: USB disconnect, device number 28 [ 1155.561550][T22016] udc dummy_udc.0: failed to start g1: -4 [ 1155.574031][T22016] configfs-gadget.g1: probe of gadget.0 failed with error -4 [ 1155.613491][T22016] UDC core: g1: couldn't find an available UDC or it's busy [ 1156.375523][T22031] loop9: detected capacity change from 0 to 1024 [ 1156.462467][T22031] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1156.961745][T22034] loop9: detected capacity change from 0 to 256 [ 1157.147563][T22036] loop6: detected capacity change from 0 to 512 [ 1157.182475][T22036] ext4: Bad value for 'data' [ 1157.199837][T22034] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1157.437302][T22034] FAT-fs (loop9): Filesystem has been set read-only [ 1158.029456][T16762] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1158.167373][T22040] loop6: detected capacity change from 0 to 256 [ 1158.201751][T22040] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1158.254392][T16762] usb 9-1: Using ep0 maxpacket: 8 [ 1158.332591][T16762] usb 9-1: config 5 has an invalid interface number: 253 but max is 0 [ 1158.361442][T16762] usb 9-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.427849][T16762] usb 9-1: config 5 has no interface number 0 [ 1158.470751][T16762] usb 9-1: config 5 interface 253 has no altsetting 0 [ 1158.518344][ T5615] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1158.602981][T16762] usb 9-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=8e.41 [ 1158.649222][T16762] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.657257][T16762] usb 9-1: Product: syz [ 1158.666791][T22044] loop6: detected capacity change from 0 to 512 [ 1158.689117][T16762] usb 9-1: Manufacturer: syz [ 1158.693964][T22044] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1158.738612][T16762] usb 9-1: SerialNumber: syz [ 1158.757990][ T5615] usb 10-1: Using ep0 maxpacket: 32 [ 1158.771105][ T5615] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.787938][T22044] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1158.845453][ T5615] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.895370][T22044] EXT4-fs (loop6): 1 truncate cleaned up [ 1158.917997][ T5615] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1158.939558][T22044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1158.958140][ T5615] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.005575][ T5615] usb 10-1: config 0 descriptor?? [ 1159.032330][T16762] rndis_wlan 9-1:5.253: skipping garbage [ 1159.055161][ T5615] hub 10-1:0.0: USB hub found [ 1159.072249][T16762] usb 9-1: bad CDC descriptors [ 1159.105743][T16762] rndis_host 9-1:5.253: skipping garbage [ 1159.168190][T16762] usb 9-1: bad CDC descriptors [ 1159.173558][T16762] cdc_acm 9-1:5.253: skipping garbage [ 1159.239578][T16762] usb 9-1: USB disconnect, device number 26 [ 1159.307650][ T5615] hub 10-1:0.0: 1 port detected [ 1159.435393][T19980] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.068675][ T5821] hub 10-1:0.0: activate --> -90 [ 1160.456278][ T9896] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1160.481822][T16762] usb 10-1: USB disconnect, device number 29 [ 1160.533373][ T9896] bond0 (unregistering): Released all slaves [ 1160.898589][T21876] hsr_slave_0: entered promiscuous mode [ 1160.969776][T21876] hsr_slave_1: entered promiscuous mode [ 1162.483052][T22073] xt_socket: unknown flags 0x4c [ 1162.775622][T22076] loop6: detected capacity change from 0 to 512 [ 1162.826191][T22076] ext4: Bad value for 'data' [ 1163.375125][T22069] loop8: detected capacity change from 0 to 1024 [ 1164.923188][T22103] loop6: detected capacity change from 0 to 512 [ 1165.000204][T22103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1165.053027][T22098] netlink: 'syz.9.3771': attribute type 1 has an invalid length. [ 1165.093459][T22103] ext4 filesystem being mounted at /124/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1165.266108][T22100] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3771'. [ 1165.318782][T22103] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 15: comm syz.6.3773: lblock 2 mapped to illegal pblock 15 (length 1) [ 1165.382947][T22100] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1165.397971][T22103] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1165.421544][T22103] EXT4-fs error (device loop6): ext4_write_dquot:6933: comm syz.6.3773: Failed to commit dquot type 0 [ 1165.466269][T22103] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #4: block 19: comm syz.6.3773: lblock 2 mapped to illegal pblock 19 (length 1) [ 1165.575594][T22103] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1165.624794][T22103] EXT4-fs error (device loop6): ext4_write_dquot:6933: comm syz.6.3773: Failed to commit dquot type 1 [ 1165.675874][T22103] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Out of memory [ 1165.742868][T22103] EXT4-fs error (device loop6): ext4_dirty_inode:6144: inode #18: comm syz.6.3773: mark_inode_dirty error [ 1165.782681][T22108] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3142710850 in block_group 0 [ 1165.823409][T22103] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 15: comm syz.6.3773: lblock 2 mapped to illegal pblock 15 (length 1) [ 1165.869352][T22108] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3142710850 in block_group 0 [ 1167.267911][T22120] xt_socket: unknown flags 0x4c [ 1167.303463][T22103] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1167.343280][T22103] EXT4-fs error (device loop6): ext4_write_dquot:6933: comm syz.6.3773: Failed to commit dquot type 0 [ 1167.472257][T22103] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1167.704068][T19980] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1169.366589][T22130] syzkaller0: entered promiscuous mode [ 1169.527637][T22130] syzkaller0: entered allmulticast mode [ 1173.685254][T22162] netlink: 'syz.9.3781': attribute type 1 has an invalid length. [ 1173.722523][T22162] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1173.741880][T22163] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3781'. [ 1173.875449][T21876] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1174.194427][T21876] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1174.531099][T21876] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1174.551597][ T9896] tipc: Left network mode [ 1174.589900][T21876] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1174.657263][ T5817] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1174.885796][ T5817] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1174.908627][ T5817] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.931417][ T5817] usb 10-1: Product: syz [ 1174.945969][ T5817] usb 10-1: Manufacturer: syz [ 1174.969718][ T5817] usb 10-1: SerialNumber: syz [ 1175.226498][ T5817] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1175.264982][ T5817] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1175.323299][ T5817] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1175.362829][ T5817] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1175.420382][ T5817] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1175.503377][ T5817] lan78xx: probe of 10-1:1.0 failed with error -71 [ 1175.578834][ T5817] usb 10-1: USB disconnect, device number 30 [ 1175.740017][T21876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.119675][T22207] loop6: detected capacity change from 0 to 1024 [ 1176.181305][T22207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1176.211461][T22207] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1176.366475][T22210] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1176.534750][T21876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.607904][T16762] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1176.750376][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.757540][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.809019][T16762] usb 7-1: device descriptor read/64, error -71 [ 1176.818276][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.825387][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.859173][T22222] loop8: detected capacity change from 0 to 512 [ 1177.108700][T16762] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1177.172917][ T9896] hsr_slave_0: left promiscuous mode [ 1177.192132][ T9896] hsr_slave_1: left promiscuous mode [ 1177.272994][ T9896] bond2 (unregistering): Released all slaves [ 1177.286862][T22222] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1177.294502][T16762] usb 7-1: device descriptor read/64, error -71 [ 1177.428752][T16762] usb usb7-port1: attempt power cycle [ 1177.498759][T22222] EXT4-fs error (device loop8): ext4_orphan_get:1404: inode #15: comm syz.8.3783: inode has both inline data and extents flags [ 1177.562000][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.573257][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.669293][ T9896] bond1 (unregistering): Released all slaves [ 1177.859346][T22222] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.3783: couldn't read orphan inode 15 (err -117) [ 1177.872345][T16762] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1177.938066][T16762] usb 7-1: device descriptor read/8, error -71 [ 1178.217968][T16762] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1178.280175][T16762] usb 7-1: device descriptor read/8, error -71 [ 1178.299581][T22222] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.319310][ T9896] bond0 (unregistering): Released all slaves [ 1178.422562][T16762] usb usb7-port1: unable to enumerate USB device [ 1179.103662][T22222] fscrypt (loop8): Error allocating 'xts(aes)' transform: -4 [ 1179.136832][T19980] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1179.412206][T22245] Bluetooth: MGMT ver 1.22 [ 1179.777115][T17468] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.455506][T22253] loop8: detected capacity change from 0 to 512 [ 1181.506944][T22253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1182.003071][T22253] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1182.307463][T22253] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1182.418423][ T5817] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1182.619044][ T5817] usb 10-1: not running at top speed; connect to a high speed hub [ 1182.639107][ T5817] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.665712][ T5817] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1182.699361][ T5817] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1182.731421][ T5817] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.754589][ T5817] usb 10-1: config 0 descriptor?? [ 1182.959583][ T28] audit: type=1800 audit(2000000498.240:69): pid=22263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3790" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1183.036821][T16762] usb 10-1: USB disconnect, device number 31 [ 1183.531759][T17468] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.823326][T22245] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.854144][T22245] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.881735][T22245] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.891729][T22245] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.519008][T21876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.191201][T22290] loop6: detected capacity change from 0 to 512 [ 1185.291111][T22290] [ 1185.293524][T22290] ====================================================== [ 1185.300539][T22290] WARNING: possible circular locking dependency detected [ 1185.307548][T22290] syzkaller #0 Not tainted [ 1185.311963][T22290] ------------------------------------------------------ [ 1185.318991][T22290] syz.6.3798/22290 is trying to acquire lock: [ 1185.325050][T22290] ffff888024b6ac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 1185.335049][T22290] [ 1185.335049][T22290] but task is already holding lock: [ 1185.342417][T22290] ffff888058a928c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3d3/0x6d0 [ 1185.352253][T22290] [ 1185.352253][T22290] which lock already depends on the new lock. [ 1185.352253][T22290] [ 1185.362656][T22290] [ 1185.362656][T22290] the existing dependency chain (in reverse order) is: [ 1185.371680][T22290] [ 1185.371680][T22290] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 1185.379244][T22290] down_write+0x97/0x200 [ 1185.384036][T22290] ext4_destroy_inline_data+0x28/0xe0 [ 1185.389936][T22290] ext4_do_writepages+0x4f2/0x3990 [ 1185.395579][T22290] ext4_writepages+0x1dd/0x350 [ 1185.400870][T22290] do_writepages+0x351/0x590 [ 1185.405988][T22290] filemap_fdatawrite_wbc+0x122/0x180 [ 1185.411880][T22290] filemap_flush+0xe4/0x150 [ 1185.416898][T22290] ext4_convert_inline_data+0x18a/0x5b0 [ 1185.422968][T22290] ext4_setattr+0xffc/0x1f10 [ 1185.428093][T22290] notify_change+0xb05/0xde0 [ 1185.433215][T22290] do_truncate+0x1b0/0x240 [ 1185.438148][T22290] vfs_truncate+0x266/0x300 [ 1185.443178][T22290] do_sys_truncate+0xf6/0x1c0 [ 1185.448380][T22290] do_syscall_64+0x55/0xb0 [ 1185.453315][T22290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1185.459727][T22290] [ 1185.459727][T22290] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1185.468142][T22290] __lock_acquire+0x37ef/0x7d80 [ 1185.473512][T22290] lock_acquire+0x19e/0x420 [ 1185.478585][T22290] percpu_down_read+0x44/0x1a0 [ 1185.483887][T22290] ext4_writepages+0x1a4/0x350 [ 1185.489168][T22290] do_writepages+0x351/0x590 [ 1185.494281][T22290] __writeback_single_inode+0x14e/0xee0 [ 1185.500356][T22290] writeback_single_inode+0x21f/0x760 [ 1185.506266][T22290] write_inode_now+0x183/0x210 [ 1185.511556][T22290] iput+0x58f/0x900 [ 1185.515898][T22290] ext4_xattr_block_set+0x2228/0x2fe0 [ 1185.521798][T22290] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 1185.528220][T22290] __ext4_expand_extra_isize+0x306/0x400 [ 1185.534385][T22290] __ext4_mark_inode_dirty+0x458/0x6d0 [ 1185.540376][T22290] ext4_evict_inode+0x7dd/0xe70 [ 1185.545760][T22290] evict+0x4b7/0x8a0 [ 1185.550195][T22290] ext4_orphan_cleanup+0xc33/0x1470 [ 1185.555922][T22290] ext4_fill_super+0x5fb5/0x6870 [ 1185.561385][T22290] get_tree_bdev+0x3e5/0x520 [ 1185.566496][T22290] vfs_get_tree+0x8c/0x280 [ 1185.571433][T22290] do_new_mount+0x24a/0xa40 [ 1185.576456][T22290] __se_sys_mount+0x2e7/0x3d0 [ 1185.581656][T22290] do_syscall_64+0x55/0xb0 [ 1185.586609][T22290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1185.593033][T22290] [ 1185.593033][T22290] other info that might help us debug this: [ 1185.593033][T22290] [ 1185.603278][T22290] Possible unsafe locking scenario: [ 1185.603278][T22290] [ 1185.610728][T22290] CPU0 CPU1 [ 1185.616093][T22290] ---- ---- [ 1185.621458][T22290] lock(&ei->xattr_sem); [ 1185.625793][T22290] lock(&sbi->s_writepages_rwsem); [ 1185.633507][T22290] lock(&ei->xattr_sem); [ 1185.640356][T22290] rlock(&sbi->s_writepages_rwsem); [ 1185.645641][T22290] [ 1185.645641][T22290] *** DEADLOCK *** [ 1185.645641][T22290] [ 1185.653777][T22290] 3 locks held by syz.6.3798/22290: [ 1185.658964][T22290] #0: ffff888024b6c0e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x345/0x520 [ 1185.669062][T22290] #1: ffff888024b6c608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b4/0xe70 [ 1185.678459][T22290] #2: ffff888058a928c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3d3/0x6d0 [ 1185.688760][T22290] [ 1185.688760][T22290] stack backtrace: [ 1185.694642][T22290] CPU: 0 PID: 22290 Comm: syz.6.3798 Not tainted syzkaller #0 [ 1185.702094][T22290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1185.712152][T22290] Call Trace: [ 1185.715435][T22290] [ 1185.718366][T22290] dump_stack_lvl+0x18c/0x250 [ 1185.723066][T22290] ? load_image+0x420/0x420 [ 1185.727571][T22290] ? show_regs_print_info+0x20/0x20 [ 1185.732787][T22290] ? print_circular_bug+0x12b/0x1a0 [ 1185.737991][T22290] check_noncircular+0x2fc/0x400 [ 1185.742938][T22290] ? look_up_lock_class+0x75/0x140 [ 1185.748061][T22290] ? print_deadlock_bug+0x5d0/0x5d0 [ 1185.753265][T22290] ? lockdep_lock+0xf5/0x230 [ 1185.757857][T22290] ? mark_lock+0x94/0x320 [ 1185.762194][T22290] ? _find_first_zero_bit+0xd6/0x100 [ 1185.767489][T22290] __lock_acquire+0x37ef/0x7d80 [ 1185.772353][T22290] ? mark_lock+0x94/0x320 [ 1185.776691][T22290] ? verify_lock_unused+0x140/0x140 [ 1185.781906][T22290] ? __lock_acquire+0x1336/0x7d80 [ 1185.786945][T22290] ? __lock_acquire+0x7d80/0x7d80 [ 1185.791983][T22290] lock_acquire+0x19e/0x420 [ 1185.796491][T22290] ? ext4_writepages+0x1a4/0x350 [ 1185.801433][T22290] ? __might_sleep+0xe0/0xe0 [ 1185.806030][T22290] ? read_lock_is_recursive+0x20/0x20 [ 1185.811408][T22290] ? mark_lock+0x94/0x320 [ 1185.815743][T22290] ? __lock_acquire+0x1336/0x7d80 [ 1185.820766][T22290] ? look_up_lock_class+0x75/0x140 [ 1185.825883][T22290] percpu_down_read+0x44/0x1a0 [ 1185.830653][T22290] ? ext4_writepages+0x1a4/0x350 [ 1185.835602][T22290] ext4_writepages+0x1a4/0x350 [ 1185.840380][T22290] ? ext4_read_folio+0x2f0/0x2f0 [ 1185.845325][T22290] ? __rwlock_init+0x150/0x150 [ 1185.850117][T22290] ? do_raw_spin_unlock+0x121/0x230 [ 1185.855327][T22290] ? ext4_read_folio+0x2f0/0x2f0 [ 1185.860262][T22290] do_writepages+0x351/0x590 [ 1185.864878][T22290] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 1185.870607][T22290] ? writeback_single_inode+0x214/0x760 [ 1185.876160][T22290] ? __lock_acquire+0x7d80/0x7d80 [ 1185.881205][T22290] ? do_raw_spin_lock+0x11f/0x2b0 [ 1185.886236][T22290] __writeback_single_inode+0x14e/0xee0 [ 1185.891809][T22290] writeback_single_inode+0x21f/0x760 [ 1185.897191][T22290] ? write_inode_now+0x210/0x210 [ 1185.902163][T22290] write_inode_now+0x183/0x210 [ 1185.906946][T22290] ? bdi_split_work_to_wbs+0x900/0x900 [ 1185.912439][T22290] ? do_raw_spin_unlock+0x121/0x230 [ 1185.917642][T22290] iput+0x58f/0x900 [ 1185.921459][T22290] ext4_xattr_block_set+0x2228/0x2fe0 [ 1185.926848][T22290] ? ext4_xattr_block_find+0x320/0x320 [ 1185.932330][T22290] ? xattr_find_entry+0x2a6/0x2f0 [ 1185.937366][T22290] ? ext4_xattr_block_find+0xce/0x320 [ 1185.942748][T22290] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 1185.948658][T22290] __ext4_expand_extra_isize+0x306/0x400 [ 1185.954302][T22290] __ext4_mark_inode_dirty+0x458/0x6d0 [ 1185.959779][T22290] ext4_evict_inode+0x7dd/0xe70 [ 1185.964631][T22290] ? evict+0x482/0x8a0 [ 1185.968702][T22290] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1185.974598][T22290] ? do_raw_spin_unlock+0x121/0x230 [ 1185.979797][T22290] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1185.985701][T22290] evict+0x4b7/0x8a0 [ 1185.989616][T22290] ? __lock_acquire+0x7d80/0x7d80 [ 1185.994655][T22290] ? proc_nr_inodes+0x230/0x230 [ 1185.999514][T22290] ? do_raw_spin_unlock+0x121/0x230 [ 1186.004721][T22290] ? _raw_spin_unlock+0x28/0x40 [ 1186.009571][T22290] ext4_orphan_cleanup+0xc33/0x1470 [ 1186.014771][T22290] ? ext4_orphan_del+0xc90/0xc90 [ 1186.019704][T22290] ? ext4_register_li_request+0x182/0x930 [ 1186.025430][T22290] ? errseq_check_and_advance+0x66/0x120 [ 1186.031060][T22290] ext4_fill_super+0x5fb5/0x6870 [ 1186.036005][T22290] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1186.042246][T22290] ? __might_sleep+0xe0/0xe0 [ 1186.046855][T22290] ? read_lock_is_recursive+0x20/0x20 [ 1186.052227][T22290] ? snprintf+0xe9/0x140 [ 1186.056476][T22290] ? down_read_killable+0x340/0x340 [ 1186.061690][T22290] ? setup_bdev_super+0x56b/0x660 [ 1186.066719][T22290] get_tree_bdev+0x3e5/0x520 [ 1186.071314][T22290] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1186.077554][T22290] ? setup_bdev_super+0x660/0x660 [ 1186.082590][T22290] ? apparmor_capable+0x137/0x1a0 [ 1186.087612][T22290] ? bpf_lsm_capable+0x9/0x10 [ 1186.092307][T22290] ? security_capable+0x89/0xb0 [ 1186.097179][T22290] vfs_get_tree+0x8c/0x280 [ 1186.101593][T22290] do_new_mount+0x24a/0xa40 [ 1186.106112][T22290] __se_sys_mount+0x2e7/0x3d0 [ 1186.110813][T22290] ? __x64_sys_mount+0xc0/0xc0 [ 1186.115594][T22290] ? lockdep_hardirqs_on+0x98/0x150 [ 1186.120812][T22290] ? __x64_sys_mount+0x20/0xc0 [ 1186.125576][T22290] do_syscall_64+0x55/0xb0 [ 1186.129997][T22290] ? clear_bhb_loop+0x40/0x90 [ 1186.134685][T22290] ? clear_bhb_loop+0x40/0x90 [ 1186.139370][T22290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1186.145281][T22290] RIP: 0033:0x7f172d59f34a [ 1186.149703][T22290] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.169308][T22290] RSP: 002b:00007f172b7d4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1186.177719][T22290] RAX: ffffffffffffffda RBX: 00007f172b7d4ee0 RCX: 00007f172d59f34a [ 1186.185684][T22290] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f172b7d4ea0 [ 1186.193649][T22290] RBP: 0000200000000040 R08: 00007f172b7d4ee0 R09: 0000000000000000 [ 1186.201628][T22290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 1186.209599][T22290] R13: 00007f172b7d4ea0 R14: 000000000000047a R15: 000000000000002c [ 1186.217584][T22290] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1187.164400][T22290] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.3798: iget: bad extra_isize 58 (inode size 256) [ 1187.207279][T22290] EXT4-fs (loop6): Remounting filesystem read-only [ 1187.219162][T22290] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 1187.247786][T22290] EXT4-fs (loop6): 1 orphan inode deleted [ 1187.254274][T22290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1187.594131][T22290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.624694][ T9983] netdevsim netdevsim9 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1189.374692][ T9983] netdevsim netdevsim9 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1189.714585][ T9983] netdevsim netdevsim9 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1189.771545][ T9983] netdevsim netdevsim9 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1190.828354][T22295] syz_tun (unregistering): left allmulticast mode [ 1191.007172][ T9983] hsr_slave_0: left promiscuous mode [ 1191.017602][ T9983] hsr_slave_1: left promiscuous mode [ 1191.038945][ T9983] veth1_macvtap: left promiscuous mode [ 1191.044505][ T9983] veth0_macvtap: left promiscuous mode [ 1191.057439][ T9983] veth1_vlan: left promiscuous mode [ 1191.072077][ T9983] veth0_vlan: left promiscuous mode [ 1191.602087][ T9983] bond12 (unregistering): Released all slaves [ 1191.616348][ T9983] bond11 (unregistering): Released all slaves [ 1191.630253][ T9983] bond10 (unregistering): Released all slaves [ 1191.644858][ T9983] bond9 (unregistering): Released all slaves [ 1191.666960][ T9983] bond8 (unregistering): Released all slaves [ 1191.683770][ T9983] bond7 (unregistering): Released all slaves [ 1191.885654][ T9983] bond6 (unregistering): Released all slaves [ 1192.072364][ T9983] bond5 (unregistering): Released all slaves [ 1192.257009][ T9983] bond4 (unregistering): Released all slaves [ 1192.432262][ T9983] bond3 (unregistering): Released all slaves [ 1192.627316][ T9983] bond2 (unregistering): Released all slaves [ 1192.641971][ T9983] bond1 (unregistering): Released all slaves [ 1192.825302][ T9983] bond0 (unregistering): Released all slaves [ 1193.925273][ T9983] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.992691][ T9983] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.043669][ T9983] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.115225][ T9983] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.999636][ T9983] hsr_slave_0: left promiscuous mode [ 1195.017503][ T9983] hsr_slave_1: left promiscuous mode [ 1195.046807][ T9983] hsr_slave_0: left promiscuous mode [ 1195.057301][ T9983] hsr_slave_1: left promiscuous mode [ 1195.063921][ T9983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.074154][ T9983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.082345][ T9983] bridge_slave_1: left allmulticast mode [ 1195.089335][ T9983] bridge_slave_1: left promiscuous mode [ 1195.094991][ T9983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.103755][ T9983] bridge_slave_0: left allmulticast mode [ 1195.111773][ T9983] bridge_slave_0: left promiscuous mode [ 1195.117482][ T9983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.131722][ T9983] veth1_macvtap: left promiscuous mode [ 1195.137247][ T9983] veth0_macvtap: left promiscuous mode [ 1195.143957][ T9983] veth1_vlan: left promiscuous mode [ 1195.150392][ T9983] veth0_vlan: left promiscuous mode