last executing test programs: 12m25.371355479s ago: executing program 32 (id=2064): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000800)="01", 0xfdef, 0x2d, 0x0, 0x0) 11m17.297754484s ago: executing program 1 (id=2271): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed0000620300ff000000003f440000000000007a0a00fe00ffffffc30300ff40000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1"], 0x0, 0xf}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001"], 0xfdef) 11m16.795860863s ago: executing program 1 (id=2284): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xfffd, 0xe9, @mcast1, 0x5}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x80, 0xa, 0x15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8000, 0x80, 0x1, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x40) 11m14.982691411s ago: executing program 1 (id=2276): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x5, 0x2a2, &(0x7f0000000980)="$eJzs201PE0Ecx/FfS3kWWkVRMMaJXPSygfoGbAgkxiYapMaHxGSRrTYtLek2mBoj3Lz6OohHbybGN8DFV+DBGxePHIxr2F2ghUJIjLtav5/LTjP7287kP9vMobP98N1KuehaRbuhZMIoJfVpR8ooqR4FEuE16bf71GpDN8byX6/cf/T4Ti6fn1swZj63eDNrjBm9+unl6/fXPjeGH3wY/divrczT7e/Zb1vjWxPbPxdflFxTck211jC2WarVGvZSxTHLJbdsGXOv4tiuY0pV16m39RcrtdXVprGryyNDq3XHdY1dbZqy0zSNmmnUm8Z+bpeqxrIsMzIknKw37gEgEvV6zp6VNHmkp7AZy4AAAECsOuz/N2LZ/98KH8j+P0KFzYUFOxf3KPBn7e7/n4Tvbzv2/wAAAAAAAAAAAAAAAAAAAAAA/At2PC/teV5679or+Sd8vPDzoKQhSevh/SOSRiWlJWUknZV0TtKYpPOSLkgal3RR0iVJEy3PUn/Mk8URrfVP6aD+PYfqPyzpzO/WH3+dHW/vPN/J7z/1706n/f2n/t2p5eDugLTydq2wVgiuQX+uqJIqcjSttH74tQwF7fnb+blp48vo8sp6mF9fK/S052eU3l0wnfIzQd6055P+utvPZ5XeXWCd8tmO+QFdn2rJW0rryzPVVNGyvyYP8m9mjJm9mz+Un/Tv63aW2dexfpZ1XH+QP8X68KY71ielyVS8c4fkNl+V7UrFqUfYGIz6SxOKdoJd1VDQmAoXTOzjoRFR3fEfOCj68fckohwQAAAAAAAAAAAAAAAAAOBUovg7YdxzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsF8BAAD//4stTg8=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x5, 0xfffa}, 0x20) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, &(0x7f0000000940)) sendmsg$inet6(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0, 0x0, 0x0, 0x4b}, 0x8000) msync(&(0x7f0000a04000/0x3000)=nil, 0x3000, 0x3) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f00005a2000/0x2000)=nil, 0x2000, 0x4, 0x13, r5, 0xc5c1d000) sendto$packet(r0, 0x0, 0x0, 0x40000, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0x4b, 0x6, @random="ceda2b60a941"}, 0x14) 11m8.950813514s ago: executing program 1 (id=2294): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtclass={0x74, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x2}}]}, 0x74}}, 0x0) 11m8.643741462s ago: executing program 1 (id=2296): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) statx(r0, 0x0, 0x800, 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) userfaultfd(0x80001) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000080)) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a', @ANYRESHEX, @ANYBLOB, @ANYRES8], 0x0) 11m5.82579031s ago: executing program 1 (id=2301): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000100)={[{@fat=@gid}, {@uni_xlateno}, {@utf8}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@rodir}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8no}, {@rodir}, {@utf8no}, {@shortname_win95}]}, 0x3, 0x29e, &(0x7f0000000800)="$eJzs3c1qa1UUAOB1mn8dJANHItwDOnB0ufUJWuQKYkFQIqgDLd5ckCRcaCHQKsaOfAKfQPBtnIgv4AMoztqBeOT0JGnSnqSmlqTo9026utZe2ftk79JOsvv5a8P+sxfHz8++/jWazSR29mIvLpLoxE5MfRulfvm9PA8APHAXWRZ/ZIVGkTpZHFGL8u+rOxtZIABw7+Z//297LQDAZnz48Sfv7R8cPP0gTZsRw+9G3SSKr0V9/3l8GYPoxZNox58R2UwRv/PuwdOoprlOvDEcj7p55/Czn86LPyf2f4u47N+NdnTK+3fTwlz/eNStxUuT+fcG0Xv/h2jHK+X9b5X0R7ceb74+t/7H0Y6fv4gXMYhnk2ef9n+zm6ZvZ9+ff/Vpns37k/Go25iNm4yubHhrAAAAAAAAAAAAAAAAAAAAAAD4D3ucznQW79+ZXvxfFJuT8Qv1FfcDjefu53mSpmmWXO+vxqvVqG7ruQEAAAAAAAAAAAAAAAAAAOAhOT457R8OBr2jNYKPbpYqsZCZfqy/pD3+Wsw0ImKt2ReCR+t2RWWytEEScW1MPSJWtNeicdl5+1yV5aX8BW6UWvl6ekdJNfqHP2Z325TrQTLLtOZLj6KYK8+0imAu828nHTTjMpierv5hctvmNssOybKg8s/Xk5Ucv+Xt9bLTmysZ3Foxe/3lO711WXtJKYmI2uzNXP06tXvZwaufFAAAAAAAAAAAAAAAAAAAYMOuPvRbUjzbwoIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYAuu/v//GsF40nyjlLUjTk77WSXPVGNS2vIjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/wdwAAAP//h9dhCg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000003c0)={@multicast1, @remote}, &(0x7f0000000400)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xf}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103081, 0x0) 10m50.250318997s ago: executing program 33 (id=2301): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000100)={[{@fat=@gid}, {@uni_xlateno}, {@utf8}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@rodir}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8no}, {@rodir}, {@utf8no}, {@shortname_win95}]}, 0x3, 0x29e, &(0x7f0000000800)="$eJzs3c1qa1UUAOB1mn8dJANHItwDOnB0ufUJWuQKYkFQIqgDLd5ckCRcaCHQKsaOfAKfQPBtnIgv4AMoztqBeOT0JGnSnqSmlqTo9026utZe2ftk79JOsvv5a8P+sxfHz8++/jWazSR29mIvLpLoxE5MfRulfvm9PA8APHAXWRZ/ZIVGkTpZHFGL8u+rOxtZIABw7+Z//297LQDAZnz48Sfv7R8cPP0gTZsRw+9G3SSKr0V9/3l8GYPoxZNox58R2UwRv/PuwdOoprlOvDEcj7p55/Czn86LPyf2f4u47N+NdnTK+3fTwlz/eNStxUuT+fcG0Xv/h2jHK+X9b5X0R7ceb74+t/7H0Y6fv4gXMYhnk2ef9n+zm6ZvZ9+ff/Vpns37k/Go25iNm4yubHhrAAAAAAAAAAAAAAAAAAAAAAD4D3ucznQW79+ZXvxfFJuT8Qv1FfcDjefu53mSpmmWXO+vxqvVqG7ruQEAAAAAAAAAAAAAAAAAAOAhOT457R8OBr2jNYKPbpYqsZCZfqy/pD3+Wsw0ImKt2ReCR+t2RWWytEEScW1MPSJWtNeicdl5+1yV5aX8BW6UWvl6ekdJNfqHP2Z325TrQTLLtOZLj6KYK8+0imAu828nHTTjMpierv5hctvmNssOybKg8s/Xk5Ucv+Xt9bLTmysZ3Foxe/3lO711WXtJKYmI2uzNXP06tXvZwaufFAAAAAAAAAAAAAAAAAAAYMOuPvRbUjzbwoIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYAuu/v//GsF40nyjlLUjTk77WSXPVGNS2vIjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/wdwAAAP//h9dhCg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000003c0)={@multicast1, @remote}, &(0x7f0000000400)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xf}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103081, 0x0) 7m42.626614824s ago: executing program 6 (id=2840): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') socket$igmp(0x2, 0x3, 0x2) setns(0xc9, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xd, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m42.130406702s ago: executing program 6 (id=2843): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000040), 0x4) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000880)='syz0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='add', 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000e00)={{0x108, 0xe, 0x6, 0x1b, 0x3a9, 0x8000, 0x104, 0x9}, "601d2ebd54186bc29a1aea5f04d99d113f75f853635b9958e969ecad268225c89ae1fed994e1b8ea84e3942f65f59a355f4299894b8469f0f30034", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x65b) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 7m37.794271511s ago: executing program 6 (id=2851): r0 = socket$inet(0x2, 0xa, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) 7m36.228306685s ago: executing program 6 (id=2854): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x1, 0x5, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x7, 0x0, 0x44, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x39979dd0be5a3d50}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x8, 0x0, 0x2e, 0x80, 0x3}, {0x5000, 0x4000, 0x0, 0x0, 0x6, 0x5, 0x5, 0x6, 0x5, 0x3, 0x2, 0x2}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x0, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0x1ff8, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x8, 0xf7, 0x83}, {0x9000, 0x3909e40c33606d9c, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x41, 0x27}, {0x3000, 0xdddd0000, 0x4, 0xb9, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x0, 0x70}, {0x5000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x4, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x30}, {0x5000, 0x7}, 0x80000031, 0x0, 0xdddd0000, 0x2034, 0x0, 0x1500, 0xeeef0000, [0x6800000000000000, 0x204, 0xfffffffffffffffd, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m31.816978694s ago: executing program 6 (id=2863): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xfffd, 0xe9, @mcast1, 0x5}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x80, 0xa, 0x15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8000, 0x80, 0x1, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x40) 7m31.116621857s ago: executing program 6 (id=2865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) capset(0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x0, 0x101, 0x0}) 7m15.877936672s ago: executing program 34 (id=2865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) capset(0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x0, 0x101, 0x0}) 3m12.677526883s ago: executing program 5 (id=3690): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) quotactl$Q_GETINFO(0x8df5db095f74cf5d, 0x0, 0x0, &(0x7f0000000180)) lseek(r0, 0x2000, 0x3) io_submit(0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in=@local, 0x4e20, 0x6, 0x0, 0x80, 0xa, 0xb0}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0xfffffffffffffffe}, {0x0, 0x1000000000001, 0xfffffffffffffffc, 0x104}, 0x0, 0x200, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x4, 0x0, 0xb7, 0xfffffffe, 0xffff}}, 0xe8) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='decodes '], 0xc) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 3m9.809159743s ago: executing program 5 (id=3704): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/79, 0x4f}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x6}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x28, 0x80005, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m9.282704465s ago: executing program 5 (id=3707): write(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x4f5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000002600)}, 0x5}], 0x4, 0x120, 0x0) 3m7.264942844s ago: executing program 5 (id=3713): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='usbip', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 3m7.04544264s ago: executing program 5 (id=3715): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty=0x3a}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002d40)={0x2020}, 0x2020) 3m6.569197891s ago: executing program 5 (id=3717): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/79, 0x4f}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x6}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x28, 0x80005, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m51.536970696s ago: executing program 35 (id=3717): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/79, 0x4f}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x6}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x28, 0x80005, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m24.909074005s ago: executing program 4 (id=3827): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x25089, &(0x7f00000005c0), 0x2, 0x445, &(0x7f00000020c0)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000001040)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44d57ecc7d80c5ce0c6769643d", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16=0x0], 0x1, 0x723, &(0x7f0000002540)="$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") r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) getsockname(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r2, &(0x7f0000002640)=""/82, 0x52, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x6) write(r4, &(0x7f0000000080)='g', 0x1) 2m24.481075926s ago: executing program 4 (id=3830): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="af4e6a961c0b", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x400, 0x0, 0x10, 0x84, 0x0, @dev, @rand_addr=0x64010101, {[@generic={0x7, 0x2}]}}, 'yxqe'}}}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x39, 0x7, 0x3, 0x180, 0x100, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x26, 0x0, 0xa, 0x0, 0xbd9], 0x4000, 0x43180}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0x0, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x17, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xffff1000, 0xc, 0xa0, 0xb1, 0x8, 0x3, 0x6, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x1, 0x40, 0x70}, {0x9000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0xe0040010, 0x0, 0x3000, 0x2024, 0x3, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m20.517138368s ago: executing program 4 (id=3837): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 2m19.14362548s ago: executing program 4 (id=3840): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000500)="022e2ea8e8f4c6b8e22e3d59db88a344d1dbd1fbfbe3457a73a18fc91ad4292de75d70f7b9a3ede2b776efcd330886f740a87fddc51d44d791f46c3936ab25d0e9845d688fe844ea", 0x48}], 0x1) 2m18.833134096s ago: executing program 4 (id=3841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m18.558202714s ago: executing program 4 (id=3845): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000000000000030000000000"]) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, &(0x7f0000000540)=0x119) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private=0xa010100}, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4, 0x0, 0x40}) 2m3.442323737s ago: executing program 36 (id=3845): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000000000000030000000000"]) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, &(0x7f0000000540)=0x119) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private=0xa010100}, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4, 0x0, 0x40}) 1m31.554412123s ago: executing program 7 (id=3973): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xf9, 0x1224, &(0x7f0000000600)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000000)=""/49, 0x31) 1m30.48927382s ago: executing program 7 (id=3978): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000100905810300020500000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0xfffe, 0xc, 0x9, 0x9, 0xe, 0x1, 0x1c1, 0x167, 0x460, 0x8, 0x9}}, 0x0, 0x0, 0x0, 0x0}) 1m26.759818112s ago: executing program 7 (id=3991): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x141200) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400), 0x7, 0x80) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r0, 0x9, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x13, 0x2, "c2a79f80619839d8b4eb2c47ae9960ac4722c140dc5d5a1a4e03c7a275ec82861d5e711d988a515edf316f1393f05cbfea3c1a23ad753c463fcd0c531a8d003c", "5a3254cce02e5698dc965f14e9e791321c72c46971637fa055dde4541983b15fe406cdc4268c082354a142a369a2943576c41675b9787de04b5beb460b12015d", "310f5a129d7620decd357f472e1d9e4d0457c68b9ce4cb66a2d52bd8d15d59d2", [0x1000, 0xd87]}}) 1m26.559036615s ago: executing program 7 (id=3993): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 1m26.25088199s ago: executing program 7 (id=3996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) utime(0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000004fc0)=0x16, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x0, 0x0) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000280)=""/40, 0x28}, {&(0x7f00000005c0)=""/111, 0x6f}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x321002, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f00007d5000/0x400000)=nil) write$binfmt_misc(r2, &(0x7f00000003c0)="1d520d70a6a403653dc980ad37516a83ad2f13a3a9e57efda8187d0909cacfb84b100184b4a6b74be282294fbe6f4665d9c3a0676beeed5b7cad9afb1f30da2514c14d27b50240ad5c7483b377cbadb89bc311030797c452492f981db2aca38cd241556e982048363e3082e7ebd6156163ec2b9df3a04daa6a0b374448674ef4f919ad8db1e13484244a4e1d5bdeea685d3ed7821df265720a40c81f5460f249989f5dc3e409e37bc6021b66679a41857ee5a279c5e79f83c63cea51a94f7fec3d242b0110f5ef3e899c12511d41ec46bd2c253310eba91ac3f17b10ced16c0e28bfbbcf1ae323c5771038407dd993be3a494dbc61ee9ae44afa", 0xfa) write$tun(r0, 0x0, 0x11) mount$9p_fd(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000380), 0x4801, 0x0) 1m25.504174889s ago: executing program 7 (id=4002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, 0x0, 0x0) 1m25.045413587s ago: executing program 37 (id=4002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, 0x0, 0x0) 37.40937382s ago: executing program 9 (id=4153): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000100)={[{@dioread_nolock}, {@resuid}, {@jqfmt_vfsv0}, {@acl}, {@quota}, {@nouser_xattr}, {@jqfmt_vfsold}]}, 0x3, 0x4a5, &(0x7f0000000180)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0xd}, {0x0, 0xd}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) close(0x4) 36.625185667s ago: executing program 9 (id=4158): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x200006, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='0x', 0x2) 36.275891061s ago: executing program 9 (id=4161): write(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x4f5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000002600)}, 0x5}], 0x4, 0x120, 0x0) 22.734587659s ago: executing program 9 (id=4228): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x0, &(0x7f0000000100)}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x7}, 0x0) r2 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) prlimit64(r2, 0x0, 0x0, 0x0) 21.491909043s ago: executing program 9 (id=4233): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r0, &(0x7f0000000180), 0x1000) 20.873099134s ago: executing program 9 (id=4239): write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x4f5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000002600)}, 0x5}], 0x4, 0x120, 0x0) 8.28315922s ago: executing program 0 (id=4296): mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x700000c, 0x14032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)={0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x24c16a82ae8a2de6) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000000400)=[{&(0x7f0000000180)=""/203, 0xcb}], 0x1) 7.797941043s ago: executing program 0 (id=4298): getsockopt$MRT(0xffffffffffffffff, 0x0, 0xce, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001080)="673707ff000000", 0x7}, {&(0x7f0000000600)="9efec94c4db26d3233218998259b6a79a180000000000000dfe52c1b51218206f5", 0x21}], 0x2}, 0x20008b88) 7.556431754s ago: executing program 0 (id=4301): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000054000000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r1, 0x88, 0xfffffffffffffebe, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92") sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4088801, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write(r0, 0x0, 0x0) 4.863120207s ago: executing program 38 (id=4239): write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x4f5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000002600)}, 0x5}], 0x4, 0x120, 0x0) 3.793302444s ago: executing program 8 (id=4317): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000300)='c', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @rand_addr=0x64010102}, 0xc) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000080)) 3.76318777s ago: executing program 0 (id=4318): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000f00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x40, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0086c43, &(0x7f0000000080)=0x6ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f00000000c0)='./tracing/events/ftrace/filter\x00', 0x20, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum, @union={0xb}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x1}, 0x28) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 3.38538447s ago: executing program 8 (id=4321): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@minixdf}]}, 0x9, 0x468, &(0x7f0000002a00)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x800841, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x0, 0x11, r1, 0x82000000) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, 0x0) 3.156147869s ago: executing program 3 (id=4322): socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x82, 0xffffffff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 2.999600963s ago: executing program 2 (id=4323): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) quotactl$Q_GETINFO(0x8df5db095f74cf5d, 0x0, 0x0, &(0x7f0000000180)) lseek(r0, 0x2000, 0x3) io_submit(0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in=@local, 0x4e20, 0x6, 0x0, 0x80, 0xa, 0xb0}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0xfffffffffffffffe}, {0x0, 0x1000000000001, 0xfffffffffffffffc, 0x104}, 0x0, 0x200, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x4, 0x0, 0xb7, 0xfffffffe, 0xffff}}, 0xe8) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='decode'], 0xc) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 2.842911586s ago: executing program 8 (id=4324): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000010090581030002050000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0xfffe, 0xc, 0x9, 0x9, 0xe, 0x1, 0x1c1, 0x167, 0x460, 0x8, 0x9}}, 0x0, 0x0, 0x0, 0x0}) 2.722372462s ago: executing program 3 (id=4325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)='%+9llu \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r2, r1}, 0xc) 1.893240527s ago: executing program 2 (id=4326): r0 = fanotify_init(0x40, 0x40000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) preadv(r2, 0x0, 0x0, 0x8001, 0x3) 1.892939898s ago: executing program 0 (id=4327): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000054000000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r1, 0x88, 0xfffffffffffffebe, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92") sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4088801, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write(r0, 0x0, 0x0) 1.78600951s ago: executing program 3 (id=4328): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x249, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) pipe(0x0) read$FUSE(r3, &(0x7f0000000f40)={0x2020}, 0x2020) pipe2(&(0x7f00000002c0), 0x4000) sendmsg$nl_generic(r3, &(0x7f00000034c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x200080c1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) 1.725816013s ago: executing program 2 (id=4329): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) dup(r0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r4, @ANYRES32=r4, @ANYRES32=r1], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 697.136452ms ago: executing program 8 (id=4330): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000300)='c', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @rand_addr=0x64010102}, 0xc) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000080)) 670.204287ms ago: executing program 3 (id=4331): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32], 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000280)={0x7, 0x9e, 0xee, {0xfffffffa, 0x72b}, 0x3, 0xd97}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="f4b14d1d0514cae321fcf7999987d8de6951a7ac365ded63d2a51650cd2fde4165a6acec4efdeaead267b551d30019ce84a995b996db1f57ea2c37674b3df601507686b5333cc48fa7ceef3e27e59d027c063ee6ab9cc5b45acc0811667c2448491b4f217832d09533bae59aac6007736cfc34550008000069d89cfcd4491512fb2b97"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r1, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab0000280090001"], 0xec}}, 0xc804) 453.359104ms ago: executing program 2 (id=4332): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="af4e6a961c0b", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x1c, 0x400, 0x0, 0x10, 0x84, 0x0, @dev, @rand_addr=0x64010101, {[@generic={0x7, 0x2}]}}, 'yxqe'}}}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x39, 0x7, 0x3, 0x180, 0x100, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x26, 0x0, 0xa, 0x0, 0xbd9], 0x4000, 0x43180}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0x0, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x17, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xffff1000, 0xc, 0xa0, 0xb1, 0x8, 0x3, 0x6, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x1, 0x40, 0x70}, {0x9000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0xe0040010, 0x0, 0x3000, 0x2024, 0x3, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 419.137951ms ago: executing program 8 (id=4333): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) lseek(r2, 0x2, 0x1) 352.156275ms ago: executing program 3 (id=4334): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18) 277.180111ms ago: executing program 0 (id=4335): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) quotactl$Q_GETINFO(0x8df5db095f74cf5d, 0x0, 0x0, &(0x7f0000000180)) lseek(r0, 0x2000, 0x3) io_submit(0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in=@local, 0x4e20, 0x6, 0x0, 0x80, 0xa, 0xb0}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0xfffffffffffffffe}, {0x0, 0x1000000000001, 0xfffffffffffffffc, 0x104}, 0x0, 0x200, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x4, 0x0, 0xb7, 0xfffffffe, 0xffff}}, 0xe8) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='decodes'], 0xc) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 264.432064ms ago: executing program 8 (id=4336): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000001080)=ANY=[@ANYBLOB="400abb000000a04e6f0a89d64f05766b6eeede1707c43f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 253.094426ms ago: executing program 2 (id=4337): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 661.92µs ago: executing program 2 (id=4338): socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a2, 0x0) 0s ago: executing program 3 (id=4339): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1a) write(r2, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da99563bcef07ea1a9", 0x45) r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x0, 0x28}, 0x28) read(r3, &(0x7f00000091c0)=""/16384, 0x4000) kernel console output (not intermixed with test programs): has an invalid descriptor of length 0, skipping remainder of the config [ 1070.792491][ T7949] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1070.802324][ T7949] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1070.820550][ T7949] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1070.841743][ T7949] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1070.853628][ T7949] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1070.865300][T14048] EXT4-fs (loop7): unmounting filesystem. [ 1070.879285][ T7949] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1070.893426][ T7949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.907192][ T7949] usb 3-1: Product: syz [ 1070.911585][ T7949] usb 3-1: Manufacturer: syz [ 1070.916420][ T7949] usb 3-1: SerialNumber: syz [ 1070.955665][ T4315] usb 5-1: Using ep0 maxpacket: 16 [ 1071.001277][ T4315] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1071.026709][ T4315] usb 5-1: config 6 has an invalid interface number: 231 but max is 0 [ 1071.034958][ T4315] usb 5-1: config 6 has no interface number 0 [ 1071.063396][ T4315] usb 5-1: New USB device found, idVendor=04f2, idProduct=aff9, bcdDevice=98.5b [ 1071.073882][T16512] loop7: detected capacity change from 0 to 512 [ 1071.080531][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.090253][ T4315] usb 5-1: Product: syz [ 1071.094477][ T4315] usb 5-1: Manufacturer: syz [ 1071.100973][ T4315] usb 5-1: SerialNumber: syz [ 1071.141918][ T7949] usb 3-1: selecting invalid altsetting 0 [ 1071.172397][T16512] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1071.211807][T16512] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.474007][ T7949] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 1071.684592][ T7949] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1071.795754][T15967] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1072.067122][ T7949] usb 3-1: USB disconnect, device number 89 [ 1072.147302][T15967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.173151][T15967] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1072.214622][T15967] usb 1-1: config 1 has no interface number 0 [ 1072.243820][T15967] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1072.308807][T15967] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1072.374818][T15967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.400419][T15967] usb 1-1: Product: syz [ 1072.404660][T15967] usb 1-1: Manufacturer: syz [ 1072.412911][T15062] udevd[15062]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1072.438143][T15967] usb 1-1: SerialNumber: syz [ 1072.462819][T16525] loop2: detected capacity change from 0 to 2048 [ 1072.481390][T14048] EXT4-fs (loop7): unmounting filesystem. [ 1072.490967][T15967] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 1072.506449][T15967] cdc_ncm 1-1:1.1: bind() failure [ 1072.601133][T16525] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1072.686633][T15967] usb 1-1: USB disconnect, device number 63 [ 1073.368612][T16541] loop2: detected capacity change from 0 to 2048 [ 1073.595065][T16541] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1073.669992][T16541] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.719199][ T14] usb 5-1: USB disconnect, device number 70 [ 1073.943501][T14862] EXT4-fs (loop2): unmounting filesystem. [ 1073.952508][T16554] loop4: detected capacity change from 0 to 512 [ 1074.019123][T16554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1074.069674][T16562] loop5: detected capacity change from 0 to 512 [ 1074.077305][T16562] EXT4-fs: inline encryption not supported [ 1074.084022][T16554] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.258050][T16562] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1074.264984][T16562] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1075.008164][T16562] EXT4-fs error (device loop5): ext4_orphan_get:1435: comm syz.5.3580: bad orphan inode 131083 [ 1075.195797][T16562] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1075.233616][T14379] EXT4-fs (loop4): unmounting filesystem. [ 1075.375739][ T4315] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1075.527185][T10628] EXT4-fs (loop5): unmounting filesystem. [ 1075.575867][ T4315] usb 1-1: Using ep0 maxpacket: 32 [ 1075.583463][ T4315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.638396][T16587] loop7: detected capacity change from 0 to 512 [ 1075.644817][ T4315] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1075.684653][ T4315] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1075.696046][ T4315] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1075.710153][ T4315] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1075.720168][ T4315] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1075.729204][ T4315] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1075.740110][T16587] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1075.745592][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.762017][ T4315] usb 1-1: Product: syz [ 1075.766918][ T4315] usb 1-1: Manufacturer: syz [ 1075.771574][ T4315] usb 1-1: SerialNumber: syz [ 1075.799437][T16587] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.3584: invalid indirect mapped block 256 (level 1) [ 1075.830954][T16591] loop4: detected capacity change from 0 to 512 [ 1075.892208][T16591] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1075.935031][T16587] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.3584: invalid indirect mapped block 2683928664 (level 1) [ 1075.976879][T16591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c1a8, mo2=0002] [ 1075.997135][ T4315] usb 1-1: selecting invalid altsetting 0 [ 1075.997853][T16587] EXT4-fs (loop7): 1 truncate cleaned up [ 1076.008631][T16597] loop5: detected capacity change from 0 to 128 [ 1076.052463][T16591] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1076.069296][T16587] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1076.092065][T16587] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.7.3584: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1076.154417][T16591] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3586: invalid indirect mapped block 2683928664 (level 1) [ 1076.192826][ T4315] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 1076.207114][T16591] EXT4-fs (loop4): Remounting filesystem read-only [ 1076.224714][T16591] EXT4-fs (loop4): 1 truncate cleaned up [ 1076.241013][T16591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1076.304117][T14048] EXT4-fs (loop7): unmounting filesystem. [ 1076.509322][ T4315] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 1076.672356][ T4315] usb 1-1: USB disconnect, device number 64 [ 1076.687445][ T26] audit: type=1800 audit(1790479778.203:1809): pid=16591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3586" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 1076.851359][T16609] loop5: detected capacity change from 0 to 2048 [ 1076.966621][T15060] udevd[15060]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.084979][T16609] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1077.102147][T16609] ext4 filesystem being mounted at /330/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.965293][T14379] EXT4-fs (loop4): unmounting filesystem. [ 1078.096400][T10628] EXT4-fs (loop5): unmounting filesystem. [ 1078.273075][T16632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3595'. [ 1078.333847][ T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 1078.344540][ T49] CPU: 1 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1078.351973][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1078.362072][ T49] Workqueue: hci4 hci_rx_work [ 1078.366924][ T49] Call Trace: [ 1078.370234][ T49] [ 1078.373209][ T49] dump_stack_lvl+0x188/0x24e [ 1078.377944][ T49] ? show_regs_print_info+0x12/0x12 [ 1078.383192][ T49] ? load_image+0x410/0x410 [ 1078.387773][ T49] sysfs_create_dir_ns+0x26a/0x290 [ 1078.393013][ T49] ? __lock_acquire+0x7c40/0x7c40 [ 1078.398094][ T49] ? sysfs_warn_dup+0xa0/0xa0 [ 1078.402829][ T49] ? do_raw_spin_unlock+0x11d/0x230 [ 1078.408080][ T49] kobject_add_internal+0x617/0xca0 [ 1078.413363][ T49] kobject_add+0x160/0x230 [ 1078.417835][ T49] ? kobject_init+0x1c0/0x1c0 [ 1078.422554][ T49] ? __raw_spin_lock_init+0x41/0x100 [ 1078.427867][ T49] ? klist_children_get+0x50/0x50 [ 1078.433035][ T49] ? get_device_parent+0x121/0x3e0 [ 1078.438227][ T49] device_add+0x470/0x1050 [ 1078.442690][ T49] hci_conn_add_sysfs+0xd1/0x1e0 [ 1078.447728][ T49] hci_sync_conn_complete_evt+0x707/0xab0 [ 1078.453483][ T49] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 1078.459494][ T49] hci_event_packet+0x806/0x1290 [ 1078.464460][ T49] ? lock_chain_count+0x20/0x20 [ 1078.469339][ T49] ? bis_list+0x280/0x280 [ 1078.473688][ T49] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1078.479617][ T49] ? kcov_remote_start+0x50f/0x810 [ 1078.484756][ T49] ? lockdep_hardirqs_on+0x94/0x140 [ 1078.489990][ T49] ? hci_send_to_monitor+0x9c/0x4a0 [ 1078.495236][ T49] hci_rx_work+0x3eb/0xd40 [ 1078.499719][ T49] ? _raw_spin_unlock+0x40/0x40 [ 1078.504614][ T49] ? process_one_work+0x7b4/0x1160 [ 1078.509757][ T49] process_one_work+0x8ab/0x1160 [ 1078.514737][ T49] ? worker_detach_from_pool+0x240/0x240 [ 1078.520404][ T49] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1078.525481][ T49] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1078.531063][ T49] ? wq_worker_running+0x97/0x190 [ 1078.536110][ T49] worker_thread+0xaf5/0x12a0 [ 1078.540842][ T49] kthread+0x29d/0x330 [ 1078.544933][ T49] ? worker_clr_flags+0x1a0/0x1a0 [ 1078.549987][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1078.554604][ T49] ret_from_fork+0x1f/0x30 [ 1078.559140][ T49] [ 1078.564622][ T49] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1078.580657][ T49] Bluetooth: hci4: failed to register connection device [ 1078.708202][T16637] loop7: detected capacity change from 0 to 128 [ 1078.744151][T16637] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1078.783735][T16643] loop4: detected capacity change from 0 to 1024 [ 1078.859512][T16643] hfsplus: catalog searching failed [ 1078.932003][ T4330] hfsplus: b-tree write err: -5, ino 3 [ 1079.008899][T16647] loop4: detected capacity change from 0 to 512 [ 1079.024403][T16647] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1079.080464][T16647] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c1a8, mo2=0002] [ 1079.100335][T16647] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1079.142861][T16647] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3608: invalid indirect mapped block 2683928664 (level 1) [ 1079.193201][T16647] EXT4-fs (loop4): Remounting filesystem read-only [ 1079.248448][T16647] EXT4-fs (loop4): 1 truncate cleaned up [ 1079.255111][T16647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1079.305744][ T27] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1079.755746][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1079.898295][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.945718][ T26] audit: type=1800 audit(1790479781.393:1810): pid=16647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3608" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 1079.998209][ T27] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1080.033032][ T27] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1080.082771][ T27] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1080.109941][T16656] loop7: detected capacity change from 0 to 2048 [ 1080.117352][ T27] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1080.150759][ T27] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1080.182107][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1080.194461][T16656] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1080.210603][T16656] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.297370][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.335664][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 1080.349494][ T27] usb 1-1: Product: syz [ 1080.353847][ T27] usb 1-1: Manufacturer: syz [ 1080.363104][ T27] usb 1-1: SerialNumber: syz [ 1080.390952][T14048] EXT4-fs (loop7): unmounting filesystem. [ 1080.403083][T14379] EXT4-fs (loop4): unmounting filesystem. [ 1080.591986][ T27] usb 1-1: selecting invalid altsetting 0 [ 1080.701557][T16671] snd_aloop snd_aloop.0: control 0:511:9:syz0:14591 is already present [ 1080.799238][ T27] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 1081.155947][ T27] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 1081.185768][ T27] usb 1-1: USB disconnect, device number 65 [ 1081.207725][T16686] loop5: detected capacity change from 0 to 512 [ 1081.236925][T16686] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1081.314682][T16686] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1081.372011][T16686] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 1081.588079][T10628] EXT4-fs (loop5): unmounting filesystem. [ 1081.802991][T15045] udevd[15045]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1082.415584][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 1082.604227][T16707] loop5: detected capacity change from 0 to 2048 [ 1082.704378][T16707] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1082.725705][T16707] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.859439][T16717] loop7: detected capacity change from 0 to 16 [ 1082.897076][T16717] erofs: (device loop7): erofs_superblock_csum_verify: invalid checksum 0xa3e9170f, 0x7bbbea8c expected [ 1082.941147][T15060] udevd[15060]: incorrect erofs checksum on /dev/loop7 [ 1083.077826][T10628] EXT4-fs (loop5): unmounting filesystem. [ 1083.244118][T16727] binder: 16725:16727 ioctl 40106e80 0 returned -22 [ 1084.018520][T16742] loop2: detected capacity change from 0 to 512 [ 1084.029401][T16742] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1084.054914][T16742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c1a8, mo2=0002] [ 1084.081256][T16742] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1084.128439][T16742] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3641: invalid indirect mapped block 2683928664 (level 1) [ 1084.163707][T16742] EXT4-fs (loop2): Remounting filesystem read-only [ 1084.171092][T16742] EXT4-fs (loop2): 1 truncate cleaned up [ 1084.184677][T16742] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1084.858220][ T26] audit: type=1800 audit(1790479786.373:1811): pid=16742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3641" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 1084.962937][T16752] loop4: detected capacity change from 0 to 2048 [ 1085.022174][T16752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1085.051639][T16752] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.207599][T14379] EXT4-fs (loop4): unmounting filesystem. [ 1085.235067][T14862] EXT4-fs (loop2): unmounting filesystem. [ 1085.835625][ T4355] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1085.865705][ T4315] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1086.017588][ T4355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.032935][ T4355] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1086.053621][ T4355] usb 3-1: New USB device found, idVendor=045e, idProduct=0048, bcdDevice= 0.00 [ 1086.065052][ T4355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.097860][ T4355] usb 3-1: config 0 descriptor?? [ 1086.354954][ T4315] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.371908][ T4315] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1086.395161][ T4315] usb 6-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 1086.411718][T16785] loop7: detected capacity change from 0 to 2048 [ 1086.418802][ T4315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.472434][T16785] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1086.500194][T16785] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.561039][ T4355] input: HID 045e:0048 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:0048.0012/input/input59 [ 1086.631310][T14048] EXT4-fs (loop7): unmounting filesystem. [ 1086.670776][ T4355] microsoft 0003:045E:0048.0012: input,hidraw0: USB HID v0.00 Joystick [HID 045e:0048] on usb-dummy_hcd.2-1/input0 [ 1086.772809][T14957] usb 6-1: USB disconnect, device number 15 [ 1086.790670][ T4355] usb 3-1: USB disconnect, device number 90 [ 1087.071101][T16799] fido_id[16799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1087.695742][ T127] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1087.863358][T16825] loop7: detected capacity change from 0 to 2048 [ 1087.975807][T16825] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1088.005959][T16825] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1088.068356][T16807] loop4: detected capacity change from 0 to 40427 [ 1088.110033][T16807] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1088.173006][T16807] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1088.216578][T16807] F2FS-fs (loop4): Unrecognized mount option "0xffffffffffffffff" or missing value [ 1088.285867][ T127] usb 3-1: Using ep0 maxpacket: 32 [ 1088.296878][ T127] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.317464][ T127] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1088.337198][ T127] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1088.379274][ T127] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1088.421679][ T127] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1088.510964][ T127] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1089.019892][T14048] EXT4-fs (loop7): unmounting filesystem. [ 1090.222813][ T127] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1090.246155][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.373162][T16849] netlink: 'syz.7.3678': attribute type 4 has an invalid length. [ 1091.071700][ T127] usb 3-1: Product: syz [ 1091.076054][ T127] usb 3-1: Manufacturer: syz [ 1091.080894][ T127] usb 3-1: SerialNumber: syz [ 1091.161821][ T127] usb 3-1: can't set config #1, error -71 [ 1091.208824][ T127] usb 3-1: USB disconnect, device number 91 [ 1091.409986][T16852] snd_aloop snd_aloop.0: control 0:511:9:syz0:14591 is already present [ 1092.334582][T16874] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[14862] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[16874] [ 1093.415204][T16889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3689'. [ 1093.745556][T15967] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1093.944848][T15967] usb 3-1: Using ep0 maxpacket: 32 [ 1093.958324][T15967] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.016934][T15967] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1094.070679][T15967] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1094.124732][T15967] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1094.185950][T15967] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1094.215641][T15967] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1094.240909][T15967] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1094.270761][T15967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.298563][T15967] usb 3-1: Product: syz [ 1094.313392][T15967] usb 3-1: Manufacturer: syz [ 1094.333713][T15967] usb 3-1: SerialNumber: syz [ 1094.567113][T15967] usb 3-1: selecting invalid altsetting 0 [ 1094.767434][T15967] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 1095.127381][T15967] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1095.267240][T15967] usb 3-1: USB disconnect, device number 92 [ 1095.486740][T15045] udevd[15045]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1095.683607][T16909] loop7: detected capacity change from 0 to 256 [ 1096.081512][T16921] binder: 16917:16921 ioctl c0306201 0 returned -14 [ 1096.286102][T16926] FAULT_INJECTION: forcing a failure. [ 1096.286102][T16926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.303354][T16926] CPU: 0 PID: 16926 Comm: syz.4.3705 Not tainted syzkaller #0 [ 1096.310902][T16926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1096.321017][T16926] Call Trace: [ 1096.324332][T16926] [ 1096.327298][T16926] dump_stack_lvl+0x188/0x24e [ 1096.332037][T16926] ? show_regs_print_info+0x12/0x12 [ 1096.337287][T16926] ? load_image+0x410/0x410 [ 1096.341833][T16926] ? __lock_acquire+0x7c40/0x7c40 [ 1096.346909][T16926] should_fail_ex+0x390/0x4c0 [ 1096.351633][T16926] _copy_from_user+0x2c/0x170 [ 1096.356343][T16926] __se_sys_memfd_create+0x129/0x340 [ 1096.361735][T16926] do_syscall_64+0x4c/0xa0 [ 1096.366178][T16926] ? clear_bhb_loop+0x60/0xb0 [ 1096.370881][T16926] ? clear_bhb_loop+0x60/0xb0 [ 1096.375591][T16926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1096.381546][T16926] RIP: 0033:0x7fa4ac19e159 [ 1096.385997][T16926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.405643][T16926] RSP: 002b:00007fa4ad0d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1096.414100][T16926] RAX: ffffffffffffffda RBX: 00007fa4ac425fa0 RCX: 00007fa4ac19e159 [ 1096.422097][T16926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340 [ 1096.430091][T16926] RBP: 00007fa4ac23506b R08: 0000000000000000 R09: 0000000000000000 [ 1096.438173][T16926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.446168][T16926] R13: 00007fa4ac426038 R14: 00007fa4ac425fa0 R15: 00007fffbf1bfad8 [ 1096.454186][T16926] [ 1097.438624][ T4283] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1097.667490][ T4283] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.717703][ T4283] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1097.795627][ T4283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.854797][ T4283] usb 3-1: Product: syz [ 1097.859646][ T4315] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1097.887993][ T4283] usb 3-1: Manufacturer: syz [ 1097.912038][ T4283] usb 3-1: SerialNumber: syz [ 1097.959894][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3712'. [ 1098.007395][T16942] netlink: 'syz.7.3712': attribute type 8 has an invalid length. [ 1098.066139][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 1098.090994][ T4315] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.145679][ T4315] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1098.220662][ T4315] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1098.283275][ T4315] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1098.347619][ T4315] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1098.405495][ T4315] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1098.446335][ T4315] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1098.491953][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.559212][ T4315] usb 5-1: Product: syz [ 1098.563487][ T4315] usb 5-1: Manufacturer: syz [ 1098.605581][ T4315] usb 5-1: SerialNumber: syz [ 1098.797966][ T4283] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 1098.812575][ T4283] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 1098.850126][ T4283] cdc_ncm 3-1:1.0: bind() failure [ 1098.863979][ T4315] usb 5-1: selecting invalid altsetting 0 [ 1098.892760][ T4283] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1098.905807][ T4315] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 1098.928937][ T4283] cdc_ncm 3-1:1.1: bind() failure [ 1098.934714][ T4315] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1098.967928][ T4283] usb 3-1: USB disconnect, device number 93 [ 1099.031944][ T4315] usb 5-1: USB disconnect, device number 71 [ 1099.123677][T16953] xt_hashlimit: max too large, truncated to 1048576 [ 1099.595101][T16958] loop2: detected capacity change from 0 to 1024 [ 1099.717442][T16958] hfsplus: request for non-existent node 262144 in B*Tree [ 1099.750982][T16958] hfsplus: request for non-existent node 262144 in B*Tree [ 1099.808237][ T26] audit: type=1804 audit(1790479801.323:1812): pid=16962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3729" name="/newroot/116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=0 res=1 errno=0 [ 1100.126218][T16967] loop2: detected capacity change from 0 to 128 [ 1100.207557][T16967] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1100.231805][T16967] System zones: 1-3, 19-19, 35-36 [ 1100.294208][T16967] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1100.356212][T16967] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.552120][T16967] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 1100.764835][T14862] EXT4-fs (loop2): unmounting filesystem. [ 1101.270630][T16979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3724'. [ 1103.856484][T16982] Bluetooth: MGMT ver 1.22 [ 1103.904505][T16984] loop2: detected capacity change from 0 to 512 [ 1104.057804][T16984] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.3726: missing EA_INODE flag [ 1104.142652][T16984] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3726: error while reading EA inode 2 err=-117 [ 1104.252007][T16984] EXT4-fs (loop2): 1 orphan inode deleted [ 1104.268812][T16984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1104.945770][ T4315] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1105.145535][ T4315] usb 1-1: Using ep0 maxpacket: 32 [ 1105.160545][ T4315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.206116][ T4315] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1105.215415][ T4315] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1105.280923][T17003] loop7: detected capacity change from 0 to 16 [ 1105.297960][ T4315] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1105.336483][T17003] erofs: (device loop7): mounted with root inode @ nid 36. [ 1105.355595][ T4315] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1105.406856][ T4315] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1105.430146][ T4315] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1105.470335][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.519276][ T4315] usb 1-1: Product: syz [ 1105.546490][ T4315] usb 1-1: Manufacturer: syz [ 1105.566233][ T4315] usb 1-1: SerialNumber: syz [ 1105.807957][ T4315] usb 1-1: selecting invalid altsetting 0 [ 1105.854169][ T4315] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 1105.893706][ T4315] usb 1-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1106.038625][ T4315] usb 1-1: USB disconnect, device number 66 [ 1106.197696][T15045] udevd[15045]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1108.236784][T17022] loop7: detected capacity change from 0 to 2048 [ 1108.675864][T17029] FAULT_INJECTION: forcing a failure. [ 1108.675864][T17029] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.731694][T17029] CPU: 0 PID: 17029 Comm: syz.7.3744 Not tainted syzkaller #0 [ 1108.739249][T17029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1108.749358][T17029] Call Trace: [ 1108.752815][T17029] [ 1108.755805][T17029] dump_stack_lvl+0x188/0x24e [ 1108.760562][T17029] ? show_regs_print_info+0x12/0x12 [ 1108.765824][T17029] ? load_image+0x410/0x410 [ 1108.770398][T17029] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1108.776732][T17029] should_fail_ex+0x390/0x4c0 [ 1108.781505][T17029] should_failslab+0x5/0x20 [ 1108.786059][T17029] slab_pre_alloc_hook+0x59/0x300 [ 1108.791144][T17029] ? current_time+0x19b/0x2c0 [ 1108.795918][T17029] ? proc_self_get_link+0xe1/0x170 [ 1108.801124][T17029] __kmem_cache_alloc_node+0x4f/0x270 [ 1108.806561][T17029] ? proc_self_get_link+0xe1/0x170 [ 1108.811737][T17029] kmalloc_trace+0x26/0xe0 [ 1108.816211][T17029] proc_self_get_link+0xe1/0x170 [ 1108.821226][T17029] ? proc_setup_self+0x2d0/0x2d0 [ 1108.826237][T17029] pick_link+0x6ed/0xe20 [ 1108.830557][T17029] step_into+0xc14/0xee0 [ 1108.834869][T17029] ? set_root+0x3a0/0x3a0 [ 1108.839256][T17029] ? lookup_fast+0x14a/0x4c0 [ 1108.843914][T17029] ? security_inode_permission+0xac/0xf0 [ 1108.849605][T17029] link_path_walk+0x744/0xea0 [ 1108.854360][T17029] ? handle_lookup_down+0x130/0x130 [ 1108.859629][T17029] path_openat+0x285/0x2f10 [ 1108.864212][T17029] ? verify_lock_unused+0x140/0x140 [ 1108.869472][T17029] ? do_sys_openat2+0xdd/0x4f0 [ 1108.874315][T17029] ? do_filp_open+0x420/0x420 [ 1108.879069][T17029] do_filp_open+0x1ee/0x420 [ 1108.883635][T17029] ? vfs_tmpfile+0x470/0x470 [ 1108.888304][T17029] ? _raw_spin_unlock+0x24/0x40 [ 1108.893215][T17029] ? alloc_fd+0x590/0x640 [ 1108.897622][T17029] do_sys_openat2+0x14b/0x4f0 [ 1108.902386][T17029] ? do_sys_open+0xe0/0xe0 [ 1108.906868][T17029] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1108.912920][T17029] ? lock_chain_count+0x20/0x20 [ 1108.917843][T17029] __x64_sys_openat+0x135/0x160 [ 1108.922763][T17029] do_syscall_64+0x4c/0xa0 [ 1108.927261][T17029] ? clear_bhb_loop+0x60/0xb0 [ 1108.931995][T17029] ? clear_bhb_loop+0x60/0xb0 [ 1108.936734][T17029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1108.942692][T17029] RIP: 0033:0x7f8cb535e98e [ 1108.947161][T17029] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1108.966910][T17029] RSP: 002b:00007f8cb622aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1108.975385][T17029] RAX: ffffffffffffffda RBX: 00007f8cb622b6c0 RCX: 00007f8cb535e98e [ 1108.983424][T17029] RDX: 0000000000000002 RSI: 00007f8cb622af90 RDI: ffffffffffffff9c [ 1108.991468][T17029] RBP: 00007f8cb543506b R08: 0000000000000000 R09: 0000000000000000 [ 1108.999510][T17029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.007539][T17029] R13: 00007f8cb5626038 R14: 00007f8cb5625fa0 R15: 00007ffe5ac23b58 [ 1109.015761][T17029] [ 1111.238627][T17037] loop4: detected capacity change from 0 to 4096 [ 1111.292089][T17037] EXT4-fs: Ignoring removed i_version option [ 1111.374786][T17037] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1111.531761][T17037] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1111.832238][T14379] EXT4-fs (loop4): unmounting filesystem. [ 1112.365536][ T22] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1112.744542][T17061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1113.418887][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 1113.439085][ T22] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1113.465517][ T22] usb 5-1: config 0 has no interface number 0 [ 1113.471708][ T22] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1113.496019][ T22] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1113.517191][ T22] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1113.535637][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.543712][ T22] usb 5-1: Product: syz [ 1113.565571][ T22] usb 5-1: Manufacturer: syz [ 1113.570292][ T22] usb 5-1: SerialNumber: syz [ 1113.583106][ T22] usb 5-1: config 0 descriptor?? [ 1113.884760][T14862] EXT4-fs (loop2): unmounting filesystem. [ 1114.013233][ T22] appletouch 5-1:0.85: Geyser mode initialized. [ 1114.026125][ T22] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input61 [ 1114.249294][ C1] appletouch 5-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 1114.464778][T15967] usb 5-1: USB disconnect, device number 72 [ 1114.545193][T15967] appletouch 5-1:0.85: input: appletouch disconnected [ 1114.664795][T17074] loop2: detected capacity change from 0 to 1024 [ 1114.692970][T17074] EXT4-fs (loop2): #clusters per group too big: 598016 [ 1115.783032][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.789938][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.928657][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1115.940591][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1115.949575][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1115.957671][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1115.965538][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1115.972887][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1116.081202][T17086] loop4: detected capacity change from 0 to 2048 [ 1118.211598][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 1118.632044][T17105] loop4: detected capacity change from 0 to 512 [ 1118.700063][T17105] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.3769: missing EA_INODE flag [ 1118.717044][ T7639] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.758447][T17105] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.3769: error while reading EA inode 2 err=-117 [ 1118.838621][T17105] EXT4-fs (loop4): 1 orphan inode deleted [ 1118.882547][T17113] loop7: detected capacity change from 0 to 256 [ 1118.890661][T17105] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1118.959049][ T7639] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.420671][ T7639] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.154363][ T26] audit: type=1800 audit(1790479821.663:1813): pid=17122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3775" name="in_ports" dev="configfs" ino=133107 res=0 errno=0 [ 1120.187711][ T7639] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.217252][T17088] chnl_net:caif_netlink_parms(): no params data found [ 1120.335537][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 1120.534344][T17135] Bluetooth: MGMT ver 1.22 [ 1120.623920][T17088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.664657][T17088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.705730][T17088] device bridge_slave_0 entered promiscuous mode [ 1120.808433][T17088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.826903][T17088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.850745][T17088] device bridge_slave_1 entered promiscuous mode [ 1120.978373][T17088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.005072][T17088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.034602][ T7639] tipc: Disabling bearer [ 1121.049226][ T7639] tipc: Left network mode [ 1121.154163][T17088] team0: Port device team_slave_0 added [ 1121.359809][T17088] team0: Port device team_slave_1 added [ 1121.513178][T17088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.556478][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.624445][T17088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.777724][T17088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.784748][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.831920][T17088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.045345][T17155] loop2: detected capacity change from 0 to 2048 [ 1122.099031][T17088] device hsr_slave_0 entered promiscuous mode [ 1122.176502][T17155] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1122.192821][T17155] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1122.226180][T17088] device hsr_slave_1 entered promiscuous mode [ 1122.245667][T17088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1122.283915][T17088] Cannot create hsr debugfs directory [ 1122.415667][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 1122.474523][T14862] EXT4-fs (loop2): unmounting filesystem. [ 1123.300813][T17088] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1124.081777][T17088] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1124.130022][T17088] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1124.207480][ T7639] device hsr_slave_0 left promiscuous mode [ 1124.231692][ T7639] device hsr_slave_1 left promiscuous mode [ 1124.284859][ T7639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.312634][ T7639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.343380][ T7639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.365023][ T7639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.396479][ T7639] device bridge_slave_1 left promiscuous mode [ 1124.403055][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.439191][ T7639] device bridge_slave_0 left promiscuous mode [ 1124.452287][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.495589][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 1124.570191][ T7639] device veth1_macvtap left promiscuous mode [ 1124.603686][ T7639] device veth0_macvtap left promiscuous mode [ 1124.635639][ T7639] device veth1_vlan left promiscuous mode [ 1124.641557][ T7639] device veth0_vlan left promiscuous mode [ 1126.584836][T14379] EXT4-fs (loop4): unmounting filesystem. [ 1127.499816][T17218] loop4: detected capacity change from 0 to 2048 [ 1127.645143][T17218] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1127.674688][T17218] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.876860][ T7639] team0 (unregistering): Port device team_slave_1 removed [ 1127.915065][T14379] EXT4-fs (loop4): unmounting filesystem. [ 1128.074724][ T7639] team0 (unregistering): Port device team_slave_0 removed [ 1128.210588][ T7639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.338215][ T7639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.029509][T15967] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1129.235555][T15967] usb 5-1: Using ep0 maxpacket: 16 [ 1129.255019][T15967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.275131][T15967] usb 5-1: config 0 has no interfaces? [ 1129.281751][T15967] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1129.299519][T15967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.345935][T15967] usb 5-1: config 0 descriptor?? [ 1129.369828][ T7639] bond0 (unregistering): Released all slaves [ 1129.505552][T17088] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1129.870424][T17249] loop2: detected capacity change from 0 to 512 [ 1129.924071][T17088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.954574][T17249] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.3804: missing EA_INODE flag [ 1129.978613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1129.986530][T17249] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3804: error while reading EA inode 2 err=-117 [ 1130.005126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1130.013189][T17249] EXT4-fs (loop2): 1 orphan inode deleted [ 1130.030855][T17249] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1130.058810][T17088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.264606][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1130.273720][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1130.282495][T12560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.289707][T12560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.300181][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1131.171132][T14957] usb 5-1: USB disconnect, device number 73 [ 1131.425160][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1131.574099][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1131.624572][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.631851][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.687029][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1131.759995][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1132.234334][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1132.253400][T14862] EXT4-fs (loop2): unmounting filesystem. [ 1132.325777][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1132.363429][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1132.442674][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1132.466332][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1132.545319][T17088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1132.584287][T17088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1132.637229][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1132.686436][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1132.700793][T17284] loop4: detected capacity change from 0 to 256 [ 1132.708106][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1132.745612][T17284] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1132.764390][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1132.798773][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1132.983044][T17288] loop2: detected capacity change from 0 to 16 [ 1133.045747][T17288] erofs: (device loop2): mounted with root inode @ nid 36. [ 1133.564949][T17266] loop7: detected capacity change from 0 to 40427 [ 1133.646199][T17266] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1133.701324][T17266] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1133.754225][T17266] F2FS-fs (loop7): Unrecognized mount option "0xffffffffffffffff" or missing value [ 1133.956719][T17300] loop4: detected capacity change from 0 to 512 [ 1134.036569][T17300] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1134.436426][T17300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c1a8, mo2=0002] [ 1134.544117][T17300] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1134.596609][T17300] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3818: invalid indirect mapped block 2683928664 (level 1) [ 1134.773678][T17300] EXT4-fs (loop4): Remounting filesystem read-only [ 1134.820419][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1134.828894][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1134.850409][T17300] EXT4-fs (loop4): 1 truncate cleaned up [ 1134.909457][T17088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.923669][T17300] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1135.036807][T17312] loop2: detected capacity change from 0 to 512 [ 1136.193522][ T26] audit: type=1800 audit(1790479837.703:1814): pid=17300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3818" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 1136.243409][T17312] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.3820: missing EA_INODE flag [ 1136.412190][T17312] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3820: error while reading EA inode 2 err=-117 [ 1136.545881][T17312] EXT4-fs (loop2): 1 orphan inode deleted [ 1136.602808][T17312] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1137.968317][T14379] EXT4-fs (loop4): unmounting filesystem. [ 1139.807466][T14862] EXT4-fs (loop2): unmounting filesystem. [ 1140.999287][T17347] loop4: detected capacity change from 0 to 512 [ 1141.371336][ T9371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1141.387136][ T9371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1141.443136][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1141.458035][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1141.469057][T17358] create_pit_timer: 56 callbacks suppressed [ 1141.469078][T17358] pit: kvm: requested 51961 ns i8254 timer period limited to 200000 ns [ 1141.485129][T17088] device veth0_vlan entered promiscuous mode [ 1141.496633][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1141.511069][ T4283] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1141.520790][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1141.532609][T17358] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1141.561216][T17088] device veth1_vlan entered promiscuous mode [ 1141.568502][T17358] pit: kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 1141.592115][T17358] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1141.616676][T17358] pit: kvm: requested 159238 ns i8254 timer period limited to 200000 ns [ 1141.655712][T17358] pit: kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 1141.669649][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1141.682279][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1141.690927][T17358] pit: kvm: requested 170971 ns i8254 timer period limited to 200000 ns [ 1141.702294][ T4283] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.720369][ T4283] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1141.736614][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1141.746143][T17358] pit: kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 1141.765379][T17358] pit: kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 1141.792923][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1141.801271][ T4283] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1141.826875][ T4283] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 1141.838976][T17358] pit: kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 1141.848448][T17088] device veth0_macvtap entered promiscuous mode [ 1141.864007][ T4283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.880535][T17088] device veth1_macvtap entered promiscuous mode [ 1141.904231][ T4283] usb 3-1: config 0 descriptor?? [ 1141.934731][T17366] loop7: detected capacity change from 0 to 1024 [ 1141.967855][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.998389][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.038792][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.330666][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.791752][T17353] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1144.584327][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1144.600266][ T4283] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:06A3:0CD0.0013/input/input62 [ 1144.623891][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.634522][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1144.651267][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.661646][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1144.683166][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.700967][T17088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.713029][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.739779][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.753192][ T4283] saitek 0003:06A3:0CD0.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.2-1/input0 [ 1144.763501][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.783212][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.801682][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.871794][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.882085][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.893997][ T4318] usb 3-1: USB disconnect, device number 94 [ 1144.904995][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.920456][T17088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.042819][ T9371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1145.054677][ T9371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1145.063273][ T9371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1145.072450][ T9371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1145.084323][ T9371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1145.100054][ T9371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1145.146283][T17088] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.155042][T17088] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.234746][T17088] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.281950][T17088] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.401080][T17379] fido_id[17379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1146.659227][T12072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.715569][T12072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.734722][ T9371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.765869][ T9371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.770430][T12072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1146.840918][T12072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1146.852221][T17398] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1147.113058][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3760'. [ 1147.415008][T17421] loop4: detected capacity change from 0 to 512 [ 1149.159132][T17421] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.3845: missing EA_INODE flag [ 1149.220000][T17421] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.3845: error while reading EA inode 2 err=-117 [ 1149.237718][T17421] EXT4-fs (loop4): 1 orphan inode deleted [ 1149.277876][T17435] FAULT_INJECTION: forcing a failure. [ 1149.277876][T17435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1149.294572][T17421] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1149.296966][T17435] CPU: 1 PID: 17435 Comm: syz.2.3848 Not tainted syzkaller #0 [ 1149.310974][T17435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1149.321171][T17435] Call Trace: [ 1149.324498][T17435] [ 1149.327463][T17435] dump_stack_lvl+0x188/0x24e [ 1149.332179][T17435] ? show_regs_print_info+0x12/0x12 [ 1149.337420][T17435] ? load_image+0x410/0x410 [ 1149.341949][T17435] ? __lock_acquire+0x7c40/0x7c40 [ 1149.347001][T17435] should_fail_ex+0x390/0x4c0 [ 1149.351738][T17435] _copy_from_user+0x2c/0x170 [ 1149.356431][T17435] __se_sys_memfd_create+0x129/0x340 [ 1149.361735][T17435] do_syscall_64+0x4c/0xa0 [ 1149.366183][T17435] ? clear_bhb_loop+0x60/0xb0 [ 1149.370879][T17435] ? clear_bhb_loop+0x60/0xb0 [ 1149.375572][T17435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1149.381527][T17435] RIP: 0033:0x7fdc59f9e159 [ 1149.385957][T17435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.405586][T17435] RSP: 002b:00007fdc5aec9028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1149.414034][T17435] RAX: ffffffffffffffda RBX: 00007fdc5a225fa0 RCX: 00007fdc59f9e159 [ 1149.422020][T17435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340 [ 1149.430030][T17435] RBP: 00007fdc5a03506b R08: 0000000000000000 R09: 0000000000000000 [ 1149.438014][T17435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1149.446001][T17435] R13: 00007fdc5a226038 R14: 00007fdc5a225fa0 R15: 00007ffc4b0cc628 [ 1149.453996][T17435] [ 1154.275595][ T4315] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1154.486345][ T4315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.539647][ T4315] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1154.574500][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.610610][ T4315] usb 3-1: Product: syz [ 1154.633357][ T4315] usb 3-1: Manufacturer: syz [ 1154.641255][ T4315] usb 3-1: SerialNumber: syz [ 1155.306880][ T4315] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 1155.313019][ T4315] cdc_ncm 3-1:1.0: bind() failure [ 1156.116800][ T4315] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1156.134073][ T4315] cdc_ncm 3-1:1.1: bind() failure [ 1156.256663][ T4315] usb 3-1: USB disconnect, device number 95 [ 1156.443401][T17505] loop7: detected capacity change from 0 to 2048 [ 1157.589978][T17505] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1159.463986][T14048] EXT4-fs (loop7): unmounting filesystem. [ 1162.052026][T17550] loop8: detected capacity change from 0 to 1024 [ 1164.690631][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1164.702583][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1164.714152][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1164.722316][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1164.730037][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1164.738836][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1165.670298][T17584] chnl_net:caif_netlink_parms(): no params data found [ 1166.815780][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 1166.938893][T17584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.997788][T17584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.030121][ T4318] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1167.071154][T17584] device bridge_slave_0 entered promiscuous mode [ 1167.143516][T17584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.225682][ T4318] usb 9-1: Using ep0 maxpacket: 16 [ 1167.233618][T17584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.241444][ T4318] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1167.347056][T17584] device bridge_slave_1 entered promiscuous mode [ 1167.354607][ T4318] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.465464][ T4318] usb 9-1: config 0 has no interface number 0 [ 1167.527929][ T4318] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1167.551543][T17584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.561297][ T4318] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.581294][ T4318] usb 9-1: Product: syz [ 1167.591422][ T4318] usb 9-1: Manufacturer: syz [ 1167.597252][T17584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.615909][ T4318] usb 9-1: SerialNumber: syz [ 1167.637672][T17436] EXT4-fs (loop4): unmounting filesystem. [ 1167.656630][ T4318] usb 9-1: config 0 descriptor?? [ 1167.700622][ T4318] uvcvideo 9-1:0.105: Found Unit with invalid ID 0 [ 1167.736377][ T4318] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 1167.773502][ T4318] usb 9-1: No valid video chain found. [ 1167.790508][T17584] team0: Port device team_slave_0 added [ 1167.869110][ T4318] usb 9-1: USB disconnect, device number 2 [ 1167.916399][T17584] team0: Port device team_slave_1 added [ 1167.962231][T17584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.970728][T17584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.050913][T17584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.135732][T17584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.152995][T17584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.202598][T17584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.392821][T17584] device hsr_slave_0 entered promiscuous mode [ 1168.450309][T17584] device hsr_slave_1 entered promiscuous mode [ 1168.533792][T17584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1168.545567][T17584] Cannot create hsr debugfs directory [ 1168.896254][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 1169.086072][ T7436] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.278840][T17646] "syz.2.3901" (17646) uses obsolete ecb(arc4) skcipher [ 1169.854101][ T7436] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.108574][ T7436] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.174184][T17657] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3902'. [ 1170.369008][ T7436] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.977577][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 1171.312878][T17663] loop7: detected capacity change from 0 to 1024 [ 1171.389623][T17663] EXT4-fs: Ignoring removed orlov option [ 1171.447660][T17663] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 1171.591309][T17663] loop7: detected capacity change from 0 to 512 [ 1171.698857][T17663] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1171.728530][T17663] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1171.749645][T17584] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1171.868107][T17584] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1171.947263][T17584] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1172.050235][T17584] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1172.278402][T17678] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3908'. [ 1172.779295][T14048] EXT4-fs (loop7): unmounting filesystem. [ 1173.055783][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 1173.118946][ T26] audit: type=1800 audit(1790479874.633:1815): pid=17689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3912" name="sysfs" dev="sda1" ino=2065 res=0 errno=0 [ 1173.160739][T17689] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 1986356271 (only 8 groups) [ 1173.326007][T17584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.627151][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1173.635324][ T7957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1174.590629][T17584] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.635526][ T27] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1174.868519][ T27] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.028138][ T27] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1175.342153][ T27] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1175.478161][ T27] usb 9-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 1175.488164][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.513654][ T27] usb 9-1: config 0 descriptor?? [ 1175.666824][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1175.702538][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1175.742888][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.750112][ T7767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.027687][ T27] hid-penmount 0003:14E1:6000.0014: hidraw0: USB HID v0.00 Device [HID 14e1:6000] on usb-dummy_hcd.8-1/input0 [ 1176.107350][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1176.136566][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1176.197516][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1176.209764][ T4355] usb 9-1: USB disconnect, device number 3 [ 1176.270432][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.277709][ T7767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.422204][ T7639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1176.493346][T17721] fido_id[17721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1176.842360][T17723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3921'. [ 1176.905900][ T7969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1176.978977][ T7969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1177.013499][ T7969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1177.224365][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.230788][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.503771][ T7969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1177.533802][ T7969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1177.577528][ T7969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1177.615826][T17180] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1177.647188][ T7969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1177.693240][ T7969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1178.537402][T17180] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.568724][T17180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1178.585465][T17180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.593628][T17180] usb 1-1: Product: syz [ 1178.597902][T17180] usb 1-1: Manufacturer: syz [ 1178.602539][T17180] usb 1-1: SerialNumber: syz [ 1178.656853][ T7436] device hsr_slave_0 left promiscuous mode [ 1178.736240][ T7436] device hsr_slave_1 left promiscuous mode [ 1178.754850][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.774296][ T7436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.824582][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.840354][ T7436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.878613][ T7436] device bridge_slave_1 left promiscuous mode [ 1178.885193][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.967899][ T7436] device bridge_slave_0 left promiscuous mode [ 1178.974290][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.166079][ T7436] device veth1_macvtap left promiscuous mode [ 1179.180383][ T7436] device veth0_macvtap left promiscuous mode [ 1179.215898][ T7436] device veth1_vlan left promiscuous mode [ 1179.237590][ T7436] device veth0_vlan left promiscuous mode [ 1179.422351][T17180] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 1179.431545][T17180] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 1179.475837][T17180] cdc_ncm 1-1:1.0: bind() failure [ 1179.503456][T17180] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1179.535651][T17180] cdc_ncm 1-1:1.1: bind() failure [ 1179.581257][T17180] usb 1-1: USB disconnect, device number 67 [ 1183.706520][ T7436] team0 (unregistering): Port device team_slave_1 removed [ 1183.868747][ T7436] team0 (unregistering): Port device team_slave_0 removed [ 1184.057352][ T7436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.173711][ T7436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.509139][T17806] overlayfs: failed to clone upperpath [ 1185.187406][ T7436] bond0 (unregistering): Released all slaves [ 1185.341558][T17584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1185.355944][T12072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1185.373119][T12072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1185.392783][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3932'. [ 1187.279466][ T7434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1187.299061][ T7434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1187.323817][T17584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1187.362614][T17840] loop8: detected capacity change from 0 to 512 [ 1187.441507][T17840] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 1187.460105][T17840] EXT4-fs error (device loop8): ext4_iget_extra_inode:4763: inode #15: comm syz.8.3954: corrupted in-inode xattr [ 1187.483187][T17847] loop7: detected capacity change from 0 to 128 [ 1187.493170][T17840] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.3954: couldn't read orphan inode 15 (err -117) [ 1187.507574][T17840] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1187.581432][T17847] FAT-fs (loop7): bogus number of reserved sectors [ 1187.602115][T17847] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1187.614004][T17088] EXT4-fs (loop8): unmounting filesystem. [ 1187.682407][T17847] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1187.872520][T17857] sd 0:0:1:0: device reset [ 1187.901863][T17856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1189.412478][T17884] loop7: detected capacity change from 0 to 512 [ 1189.484650][T17884] EXT4-fs: inline encryption not supported [ 1189.562880][T17884] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1190.347584][T17884] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1190.427730][T17884] EXT4-fs error (device loop7): ext4_orphan_get:1435: comm syz.7.3963: bad orphan inode 131083 [ 1190.440230][T17884] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1191.157793][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1191.198890][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1191.325126][ T7434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1191.364495][ T7434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1191.402347][T17584] device veth0_vlan entered promiscuous mode [ 1191.423692][ T7434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1191.473288][ T7434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1191.520639][T17584] device veth1_vlan entered promiscuous mode [ 1191.643451][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1191.666567][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1191.726037][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1191.776260][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1191.794996][T17884] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1191.834145][T17584] device veth0_macvtap entered promiscuous mode [ 1191.883535][T17584] device veth1_macvtap entered promiscuous mode [ 1191.993640][T17584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.055529][T17584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.105640][T17584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.157205][T17584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.195458][T17584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.242110][T17584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.282801][T17584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.335910][T17584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.375494][T17584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.405517][T17584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.463035][T17584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.476672][T14048] EXT4-fs (loop7): unmounting filesystem. [ 1192.520260][T17584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.591776][T17584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.657868][T17584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.708566][T17925] loop8: detected capacity change from 0 to 16 [ 1192.720415][T17584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.777902][T17925] erofs: (device loop8): mounted with root inode @ nid 36. [ 1192.779675][T17584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.838070][T17925] erofs: (device loop8): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1192.858262][T17584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.896206][T17927] erofs: (device loop8): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1192.937622][T17925] erofs: (device loop8): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1192.945605][T17584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.958886][T17925] erofs: (device loop8): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1192.994321][T17925] erofs: (device loop8): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1193.009305][T17584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.047263][T17584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.054747][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1193.083395][T17925] erofs: (device loop8): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 1193.103995][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1193.185933][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1193.226032][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1193.257126][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1193.346449][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1193.507999][T17584] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.661065][T17584] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.934210][T17584] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.236117][T17584] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.639008][T12560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.686900][T12560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.730662][T12072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1194.834978][T12072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.875639][T12072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.886978][T17945] loop8: detected capacity change from 0 to 128 [ 1194.909280][T17940] loop7: detected capacity change from 0 to 8192 [ 1194.928909][T12072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1194.988524][T17945] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1195.031431][T17940] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1195.817869][T17088] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1195.875537][T17088] FAT-fs (loop8): Filesystem has been set read-only [ 1195.883593][T17088] VFS: Lookup of 'file0' in vfat loop8 would have caused loop [ 1195.936733][T17088] VFS: Lookup of 'file0' in vfat loop8 would have caused loop [ 1196.025580][ T4283] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1196.255991][ T4283] usb 10-1: Using ep0 maxpacket: 32 [ 1196.263625][ T4283] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1196.292340][ T4283] usb 10-1: New USB device found, idVendor=0582, idProduct=0048, bcdDevice= 0.40 [ 1196.318956][ T4283] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.343230][ T4283] usb 10-1: Product: syz [ 1196.361111][ T4283] usb 10-1: Manufacturer: syz [ 1196.373855][ T4283] usb 10-1: SerialNumber: syz [ 1196.381676][T17961] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1196.626160][ T4283] usb 10-1: invalid MIDI in EP 0 [ 1196.662372][ T33] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.778252][ T4283] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 1196.824304][ T4283] usb 10-1: USB disconnect, device number 2 [ 1196.907565][ T33] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.086766][T17975] udevd[17975]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1197.135948][ T33] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.282268][ T33] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.427283][T17984] loop9: detected capacity change from 0 to 16 [ 1197.469752][T17984] erofs: (device loop9): mounted with root inode @ nid 36. [ 1197.518344][T17984] erofs: (device loop9): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1197.564395][T17984] erofs: (device loop9): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1197.606385][T17984] erofs: (device loop9): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1197.629870][T17984] erofs: (device loop9): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1197.692720][T17984] erofs: (device loop9): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1197.791625][T17984] erofs: (device loop9): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 1198.183957][T18003] loop9: detected capacity change from 0 to 1024 [ 1198.247356][T18003] hfsplus: invalid gid specified [ 1198.252992][T18003] hfsplus: unable to parse mount options [ 1199.067012][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1199.078622][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1199.088822][T13789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1199.097354][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1199.105200][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1199.114394][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1199.154731][T18008] loop9: detected capacity change from 0 to 512 [ 1199.203015][T18008] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1199.280254][T18008] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3990: invalid indirect mapped block 256 (level 1) [ 1199.305669][T18008] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.3990: invalid indirect mapped block 2683928664 (level 1) [ 1199.324170][T18008] EXT4-fs (loop9): 1 truncate cleaned up [ 1199.340556][T18008] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1199.537429][ T4283] hid-generic 0005:000C:0009.0015: item fetching failed at offset 0/1 [ 1199.575146][ T4283] hid-generic: probe of 0005:000C:0009.0015 failed with error -22 [ 1199.790380][T17584] EXT4-fs (loop9): unmounting filesystem. [ 1200.161466][T18032] binder: 18031:18032 ioctl c0306201 200000000180 returned -14 [ 1200.172768][T18034] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1200.253423][T18035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1200.293734][T18001] chnl_net:caif_netlink_parms(): no params data found [ 1200.356496][ T4283] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1200.555584][ T4283] usb 10-1: Using ep0 maxpacket: 16 [ 1200.563969][ T4283] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.619331][ T4283] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.665124][ T4283] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.691870][ T4283] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1200.732870][ T4283] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1200.772066][ T4283] usb 10-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1200.811062][ T4283] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.840690][ T4283] usb 10-1: config 0 descriptor?? [ 1201.007268][T18001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.014583][T18001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.035602][T18001] device bridge_slave_0 entered promiscuous mode [ 1201.141646][T18001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.149639][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 1201.161995][T18001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.171929][T18001] device bridge_slave_1 entered promiscuous mode [ 1201.280102][ T4283] logitech-djreceiver 0003:046D:C53A.0016: unknown main item tag 0x0 [ 1201.294287][ T4283] logitech-djreceiver 0003:046D:C53A.0016: unknown main item tag 0x0 [ 1201.314117][ T4283] logitech-djreceiver 0003:046D:C53A.0016: unbalanced collection at end of report description [ 1201.345238][ T4283] logitech-djreceiver 0003:046D:C53A.0016: logi_dj_probe: parse failed [ 1201.354003][ T4283] logitech-djreceiver: probe of 0003:046D:C53A.0016 failed with error -22 [ 1201.474959][T18001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.276611][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1202.288635][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1202.298505][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1202.306671][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1202.328293][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1202.336357][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1202.467196][T18001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.872808][T18001] team0: Port device team_slave_0 added [ 1202.889150][T18001] team0: Port device team_slave_1 added [ 1203.009469][ T33] device hsr_slave_0 left promiscuous mode [ 1203.048671][ T33] device hsr_slave_1 left promiscuous mode [ 1203.100253][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.139068][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.173259][ T4315] usb 10-1: USB disconnect, device number 3 [ 1203.262536][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1203.275543][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 1203.310345][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.376612][ T33] device bridge_slave_1 left promiscuous mode [ 1203.400768][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.471088][ T33] device bridge_slave_0 left promiscuous mode [ 1203.500797][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.736603][ T33] device veth1_macvtap left promiscuous mode [ 1203.755624][ T33] device veth0_macvtap left promiscuous mode [ 1203.762255][ T33] device veth1_vlan left promiscuous mode [ 1203.794832][T18083] loop9: detected capacity change from 0 to 2048 [ 1203.815670][ T33] device veth0_vlan left promiscuous mode [ 1203.885002][T18083] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1203.994174][T18083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1204.415661][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 1204.660266][T18096] loop9: detected capacity change from 0 to 4096 [ 1204.757007][T18096] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1205.594430][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 1205.759101][T18096] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1205.835807][T18110] "syz.0.4019" (18110) uses obsolete ecb(arc4) skcipher [ 1206.512814][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 1206.659350][T17584] EXT4-fs (loop9): unmounting filesystem. [ 1206.907363][T18123] loop9: detected capacity change from 0 to 256 [ 1206.935232][T18123] FAT-fs (loop9): Unrecognized mount option "gid=0xffffffffffffffffÛl(]¥Ñ¤Ù>" or missing value [ 1207.897192][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 1208.555358][T18135] binder: 18134:18135 ioctl c0306201 200000000180 returned -14 [ 1208.576069][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 1209.658159][T18140] loop9: detected capacity change from 0 to 8192 [ 1209.731595][T18140] loop9: p2 [ 1209.734918][T18140] loop9: partition table partially beyond EOD, truncated [ 1209.755963][T18140] loop9: p2 start 268960768 is beyond EOD, truncated [ 1209.783672][T18140] binder: 18139:18140 unknown command 0 [ 1209.794715][T18140] binder: 18139:18140 ioctl c0306201 200000000300 returned -22 [ 1209.978625][ T33] team0 (unregistering): Port device team_slave_1 removed [ 1210.059061][T18147] usb usb8: usbfs: process 18147 (syz.9.4032) did not claim interface 0 before use [ 1210.308412][ T33] team0 (unregistering): Port device team_slave_0 removed [ 1210.429803][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.508878][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.658590][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 1211.483989][ T33] bond0 (unregistering): Released all slaves [ 1211.834605][T18001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.902046][T18001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.005247][T18001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.038036][T18001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.045109][T18001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.119766][T18001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.149523][T18064] chnl_net:caif_netlink_parms(): no params data found [ 1212.340557][T18001] device hsr_slave_0 entered promiscuous mode [ 1212.552256][T18001] device hsr_slave_1 entered promiscuous mode [ 1212.812026][T18001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1212.899397][T18001] Cannot create hsr debugfs directory [ 1213.081807][T18177] loop9: detected capacity change from 0 to 16 [ 1213.115940][T18177] erofs: (device loop9): mounted with root inode @ nid 36. [ 1213.216222][T18177] erofs: (device loop9): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1213.250013][T18177] erofs: (device loop9): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1213.288484][T18177] erofs: (device loop9): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1213.345193][T18064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.352723][T18064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.393388][T18064] device bridge_slave_0 entered promiscuous mode [ 1213.396872][T18183] erofs: (device loop9): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1213.413211][T18177] erofs: (device loop9): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1213.427692][T18064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.456020][T18064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.488057][T18177] erofs: (device loop9): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 1213.524468][T18064] device bridge_slave_1 entered promiscuous mode [ 1213.664741][T18064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.717596][T18187] ip_tables: iptables: counters copy to user failed while replacing table [ 1213.737166][T18064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.843994][T18064] team0: Port device team_slave_0 added [ 1213.907897][T18064] team0: Port device team_slave_1 added [ 1214.067145][T18195] loop9: detected capacity change from 0 to 512 [ 1214.101340][T18064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.125780][T18064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.191140][T18064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.216386][T18195] EXT4-fs warning (device loop9): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 1214.270717][T18064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.281643][T18195] EXT4-fs (loop9): mount failed [ 1214.286830][T18064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.343387][T18064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.586139][ T33] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.753301][T18064] device hsr_slave_0 entered promiscuous mode [ 1214.764023][T18064] device hsr_slave_1 entered promiscuous mode [ 1214.780398][T18064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1214.788375][T18064] Cannot create hsr debugfs directory [ 1214.891265][ T33] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.114176][ T33] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.348380][ T33] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.543195][T18001] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1215.591699][T18001] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1217.642307][T18001] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1217.653987][T18001] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1218.022620][T18001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.073513][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1218.091728][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1218.127583][T18001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.173882][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1218.196613][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1218.261339][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.268598][ T7767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.334803][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1218.373146][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1218.399249][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1218.453297][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.460569][ T7767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.536226][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1218.602583][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1218.633993][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1218.693259][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1218.738107][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1218.773932][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1218.825947][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1218.852479][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1218.883217][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1218.919187][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1218.959149][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1218.989606][T18001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1219.463264][T18268] loop9: detected capacity change from 0 to 4096 [ 1219.520482][T18268] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1219.535340][T18271] overlayfs: failed to clone upperpath [ 1219.616764][T18268] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #15: comm syz.9.4065: corrupted inode contents [ 1219.719756][T18268] EXT4-fs error (device loop9): ext4_dirty_inode:6166: inode #15: comm syz.9.4065: mark_inode_dirty error [ 1219.786055][T18268] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #15: comm syz.9.4065: corrupted inode contents [ 1219.838862][T18268] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #15: comm syz.9.4065: mark_inode_dirty error [ 1219.933843][T18268] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #15: comm syz.9.4065: corrupted inode contents [ 1219.974669][T18268] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #15: comm syz.9.4065: mark_inode_dirty error [ 1220.037609][T18268] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #15: comm syz.9.4065: corrupted inode contents [ 1220.157931][T18268] EXT4-fs error (device loop9): ext4_truncate:4325: inode #15: comm syz.9.4065: mark_inode_dirty error [ 1220.193956][T18268] EXT4-fs error (device loop9) in ext4_setattr:5695: Corrupt filesystem [ 1220.297359][T18276] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #15: comm syz.9.4065: corrupted inode contents [ 1220.368448][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1220.517182][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1221.090486][T17584] EXT4-fs warning (device loop9): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1221.202248][T17584] EXT4-fs (loop9): unmounting filesystem. [ 1221.218548][T18001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.327287][T18301] "syz.9.4068" (18301) uses obsolete ecb(arc4) skcipher [ 1225.594053][ T33] device hsr_slave_0 left promiscuous mode [ 1225.618047][ T33] device hsr_slave_1 left promiscuous mode [ 1225.881715][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1225.889793][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.898299][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1225.906113][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.731064][T18368] "syz.2.4084" (18368) uses obsolete ecb(arc4) skcipher [ 1226.920375][ T33] device bridge_slave_1 left promiscuous mode [ 1226.955962][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.987079][ T33] device bridge_slave_0 left promiscuous mode [ 1226.993391][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.073250][ T33] device veth1_macvtap left promiscuous mode [ 1227.081539][ T33] device veth0_macvtap left promiscuous mode [ 1227.088525][ T33] device veth1_vlan left promiscuous mode [ 1227.094346][ T33] device veth0_vlan left promiscuous mode [ 1230.416336][ T33] team0 (unregistering): Port device team_slave_1 removed [ 1230.501165][ T33] team0 (unregistering): Port device team_slave_0 removed [ 1230.613783][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.694799][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.621172][ T33] bond0 (unregistering): Released all slaves [ 1232.675108][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1232.736477][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1232.931404][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1232.944514][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1232.970542][T18001] device veth0_vlan entered promiscuous mode [ 1232.979778][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1232.989613][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1233.024769][T18001] device veth1_vlan entered promiscuous mode [ 1233.072145][T18064] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1233.137686][T18064] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1233.201359][T18064] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1233.247647][T18064] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1233.274015][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1233.300526][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1233.320208][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1233.460316][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1233.480306][T18001] device veth0_macvtap entered promiscuous mode [ 1233.514405][T18001] device veth1_macvtap entered promiscuous mode [ 1233.580197][T18001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.598560][T18001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.613769][T18001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.629589][T18001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.644303][T18001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.669587][T18001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.687611][T18001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.703386][T18001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.737434][T18001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.746299][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1233.760606][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1233.787263][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1233.799892][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1233.823130][T18001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.842118][T18001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.854217][T18001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.879729][T18001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.901247][T18001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.913449][T18001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.941726][T18001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.956227][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1233.974017][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1234.008232][T18001] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.038500][T18001] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.069786][T18001] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.115538][T18001] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.270815][T18064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.334445][T12072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.363898][T12072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.390741][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1235.422836][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1235.441837][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1235.473681][T18064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.523646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1235.560779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1235.586132][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.593349][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.604685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1235.628550][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.650898][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1235.659700][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.691526][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1235.729199][ T7436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.736430][ T7436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.763781][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1235.813921][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1235.837262][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1235.908321][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1235.955929][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1236.002285][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1236.086678][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1236.139606][T18064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1236.211016][T18064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1236.247105][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1236.258914][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1236.296362][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1236.325120][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1236.357749][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1236.376414][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1238.247869][T18462] loop8: detected capacity change from 0 to 40427 [ 1238.311398][T18462] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1238.351385][T18462] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1238.399079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1238.405056][T18462] F2FS-fs (loop8): Unrecognized mount option "0xffffffffffffffff" or missing value [ 1238.429274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1238.470112][T18064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.673630][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1238.686182][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.692579][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.751478][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1240.133695][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1240.172328][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1240.253856][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1240.336828][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1240.616278][T18064] device veth0_vlan entered promiscuous mode [ 1240.631230][T18064] device veth1_vlan entered promiscuous mode [ 1240.665931][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1240.682213][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1240.903862][T18064] device veth0_macvtap entered promiscuous mode [ 1241.211649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1241.383803][T18064] device veth1_macvtap entered promiscuous mode [ 1241.617467][T18501] loop8: detected capacity change from 0 to 2048 [ 1241.705608][T18064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1241.757082][T18064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.767186][T18064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1241.778003][T18064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.787958][T18064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1241.791158][T18501] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1241.798470][T18064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.798493][T18064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1241.798510][T18064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.798528][T18064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1241.798543][T18064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.802316][T18064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1241.879783][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1241.942936][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1241.977574][T18064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1242.026372][T18064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.083837][T18064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1242.122517][T18064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.162810][T18064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1242.205501][T18064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.246447][T18064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1242.272268][T18064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1242.282672][T18513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4129'. [ 1242.306112][T18001] EXT4-fs (loop8): unmounting filesystem. [ 1242.316952][T18064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1242.380522][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1242.426103][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1242.487005][T18064] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.530257][T18064] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.556263][T18064] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.565046][T18064] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.954334][ T7645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.995605][ T7645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.068578][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1243.472122][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.572223][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.871985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1244.519173][T18541] loop3: detected capacity change from 0 to 8 [ 1245.173137][T18541] SQUASHFS error: Failed to read block 0x730: -5 [ 1245.245534][T18541] SQUASHFS error: Unable to read metadata cache entry [72e] [ 1246.545541][T15967] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1246.745566][T15967] usb 4-1: Using ep0 maxpacket: 32 [ 1246.753715][T15967] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.815034][T15967] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1246.865586][T15967] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1246.935697][T15967] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1247.004493][T15967] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 1247.059159][T15967] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1247.088679][T15967] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1247.136165][T15967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.144286][T15967] usb 4-1: Product: syz [ 1247.205493][T15967] usb 4-1: Manufacturer: syz [ 1247.210181][T15967] usb 4-1: SerialNumber: syz [ 1247.477406][T15967] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1247.628539][T15967] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 1247.799008][T18578] binder: 18577:18578 ioctl c0306201 200000000180 returned -14 [ 1248.323533][T18399] udevd[18399]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1248.533973][T18599] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4153'. [ 1249.093407][T17180] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1249.285821][T17180] usb 9-1: Using ep0 maxpacket: 32 [ 1249.293920][T17180] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1249.348838][T17180] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 7 [ 1249.436964][ T14] usb 4-1: USB disconnect, device number 43 [ 1249.446827][T17180] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1249.515532][T17180] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.564820][T17180] usb 9-1: Product: syz [ 1249.581228][T17180] usb 9-1: Manufacturer: syz [ 1249.599779][T17180] usb 9-1: SerialNumber: syz [ 1250.038625][T17180] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1250.319872][T17180] usb 9-1: USB disconnect, device number 4 [ 1250.905631][T15967] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1251.096980][T15967] usb 4-1: not running at top speed; connect to a high speed hub [ 1251.123980][T18648] loop8: detected capacity change from 0 to 2048 [ 1251.134240][T15967] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1251.170667][T15967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.209421][T15967] usb 4-1: Product: syz [ 1251.213682][T15967] usb 4-1: Manufacturer: syz [ 1251.269607][T15967] usb 4-1: SerialNumber: syz [ 1251.294944][T18648] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1251.318958][T15967] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 1251.334744][T18648] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1251.359480][T15967] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1251.399541][T15967] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1251.432335][T15967] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1251.473380][T15967] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1251.616752][T18643] loop3: detected capacity change from 0 to 2048 [ 1251.725944][T18643] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1251.763727][T18648] EXT4-fs (loop8): unmounting filesystem. [ 1254.042358][ T27] usb 4-1: USB disconnect, device number 44 [ 1254.103621][ T27] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1254.214998][ T27] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1254.315943][ T27] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1254.370188][ T27] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1254.416406][T18673] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1254.456645][ T27] keyspan 4-1:1.0: device disconnected [ 1256.737426][T18713] Cannot find set identified by id 4 to match [ 1257.062772][T18724] netlink: 'syz.0.4193': attribute type 3 has an invalid length. [ 1257.072106][T18723] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1257.318942][T18729] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4195'. [ 1257.687464][T18743] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) ! [ 1259.375500][T18767] binder: 18766:18767 ioctl c0306201 200000000180 returned -14 [ 1259.407940][T18769] netlink: 'syz.0.4206': attribute type 8 has an invalid length. [ 1260.215540][ T14] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1261.186809][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 1261.197539][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.208318][ T14] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1261.217955][ T14] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1261.230096][ T14] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1261.243640][ T14] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1261.265438][ T14] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1261.285987][ T14] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1261.295120][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.345448][ T14] usb 4-1: Product: syz [ 1261.349702][ T14] usb 4-1: Manufacturer: syz [ 1261.354386][ T14] usb 4-1: SerialNumber: syz [ 1261.631320][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1261.639171][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1261.688658][ T14] usb 4-1: selecting invalid altsetting 0 [ 1261.694724][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1261.722829][ T14] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 1261.777984][ T14] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1261.853535][ T14] usb 4-1: USB disconnect, device number 45 [ 1261.935049][T18653] udevd[18653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1263.175664][T18834] input: syz1 as /devices/virtual/input/input63 [ 1263.619586][T18849] xt_cgroup: invalid path, errno=-2 [ 1263.656414][T18847] fuse: Bad value for 'fd' [ 1264.299101][T18852] loop3: detected capacity change from 0 to 1024 [ 1264.431125][T18852] EXT4-fs: Ignoring removed bh option [ 1264.569741][T18852] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1264.620292][T18852] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1264.786917][T18851] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.4232: lblock 3 mapped to illegal pblock 3 (length 3) [ 1264.915546][T18851] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1264.975481][T18851] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1264.975481][T18851] [ 1265.144522][ T7639] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 1265.286446][ T7639] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1265.348831][ T7639] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1265.348831][ T7639] [ 1265.419157][T18064] EXT4-fs (loop3): unmounting filesystem. [ 1267.645690][T18445] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1267.857035][T18445] usb 4-1: not running at top speed; connect to a high speed hub [ 1267.884278][T18445] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1267.938116][T18445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.984928][T18445] usb 4-1: Product: syz [ 1268.013742][T18445] usb 4-1: Manufacturer: syz [ 1268.035223][T18445] usb 4-1: SerialNumber: syz [ 1268.118166][T18445] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 1268.177691][T18445] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1268.272169][T18445] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1268.404201][T18908] loop3: detected capacity change from 0 to 2048 [ 1268.416694][T18445] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1268.483873][T18445] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1268.563555][T18908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1271.679978][ T22] usb 4-1: USB disconnect, device number 46 [ 1271.739774][ T22] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1271.809068][ T22] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1271.878029][ T22] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1271.993602][ T22] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1272.069719][ T22] keyspan 4-1:1.0: device disconnected [ 1274.340924][T19010] input: syz1 as /devices/virtual/input/input64 [ 1277.305985][T19051] input: syz1 as /devices/virtual/input/input65 [ 1277.965448][T17180] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1278.187746][T17180] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.230795][T17180] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1278.282752][T17180] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1278.364508][T17180] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1278.419515][T17180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.474381][T17180] usb 4-1: Product: syz [ 1278.502262][T17180] usb 4-1: Manufacturer: syz [ 1278.531804][T17180] usb 4-1: SerialNumber: syz [ 1278.579187][T17180] cdc_ncm 4-1:1.0: skipping garbage [ 1278.603307][T17180] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1278.638654][T17180] cdc_ncm 4-1:1.0: bind() failure [ 1278.894788][T19084] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4303'. [ 1278.947996][T19087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4304'. [ 1280.882993][ T7949] usb 4-1: USB disconnect, device number 47 [ 1281.068179][T19117] loop3: detected capacity change from 0 to 128 [ 1282.081849][T19127] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4316'. [ 1283.092600][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1283.383465][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1283.400975][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1283.421140][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1283.439846][ T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1283.453048][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1284.092502][T19163] loop3: detected capacity change from 0 to 128 [ 1285.173711][ T57] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.263283][T19178] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4331'. [ 1285.275514][T19178] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4331'. [ 1285.296185][T19178] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4331'. [ 1285.429661][ T57] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.535535][T13789] Bluetooth: hci3: command 0x0409 tx timeout [ 1285.821486][ T57] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.623261][T19202] ------------[ cut here ]------------ [ 1286.629313][T19202] fmt: 'level=%s [ 1286.629313][T19202] ' current_buffer: ' syz.2.3765-17082 [001] .n... 1115.127016: dwc3_ctrl_req: Get Device Status(Length = 0) [ 1286.629313][T19202] <...>-1970561396 [001] .p.35 1115.182309: Unknown type 25955 [ 1286.629313][T19202] -0 [001] ..... 1115.207541: initcall_level: level=' [ 1286.629582][T19202] WARNING: CPU: 1 PID: 19202 at kernel/trace/trace.c:3891 trace_check_vprintf+0xd4a/0x1080 [ 1286.672721][T19202] Modules linked in: [ 1286.676787][T19202] CPU: 1 PID: 19202 Comm: syz.3.4339 Not tainted syzkaller #0 [ 1286.684306][T19202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1286.694467][T19202] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 1286.700648][T19202] Code: e8 bb 20 fc ff c6 05 47 38 86 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 80 83 90 8a 48 8b 74 24 60 48 89 c2 e8 76 a7 c7 ff <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 1286.720378][T19202] RSP: 0018:ffffc90003367a60 EFLAGS: 00010246 [ 1286.726565][T19202] RAX: 2e0dfa88b0385800 RBX: 0000000000000000 RCX: 0000000000080000 [ 1286.734596][T19202] RDX: ffffc90012195000 RSI: 000000000000ad67 RDI: 000000000000ad68 [ 1286.742671][T19202] RBP: ffff8880633b40d8 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 1286.750742][T19202] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffffffff8a800540 [ 1286.758822][T19202] R13: ffffc90003367ba0 R14: dffffc0000000000 R15: 0000000000000002 [ 1286.766916][T19202] FS: 00007f8f500936c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1286.775956][T19202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1286.782599][T19202] CR2: 0000001b2d21dff8 CR3: 0000000076330000 CR4: 00000000003506e0 [ 1286.790719][T19202] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1286.798796][T19202] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1286.806980][T19202] Call Trace: [ 1286.810339][T19202] [ 1286.813344][T19202] trace_event_printf+0xea/0x140 [ 1286.818404][T19202] ? trace_print_seq+0x160/0x160 [ 1286.823503][T19202] ? trace_raw_output_prep+0x230/0x230 [ 1286.829128][T19202] trace_raw_output_initcall_level+0x93/0xd0 [ 1286.835213][T19202] tracing_read_pipe+0x53b/0xb10 [ 1286.840307][T19202] ? s_show+0x300/0x300 [ 1286.844535][T19202] vfs_read+0x2db/0x960 [ 1286.848839][T19202] ? kernel_read+0x1e0/0x1e0 [ 1286.853499][T19202] ? __fget_files+0x28/0x460 [ 1286.858217][T19202] ? __fget_files+0x3fc/0x460 [ 1286.862974][T19202] ? __fdget_pos+0x2ae/0x360 [ 1286.867693][T19202] ? ksys_read+0x70/0x260 [ 1286.872089][T19202] ksys_read+0x14d/0x260 [ 1286.876474][T19202] ? vfs_write+0x9a0/0x9a0 [ 1286.880971][T19202] ? lockdep_hardirqs_on+0x94/0x140 [ 1286.886320][T19202] do_syscall_64+0x4c/0xa0 [ 1286.890859][T19202] ? clear_bhb_loop+0x60/0xb0 [ 1286.895644][T19202] ? clear_bhb_loop+0x60/0xb0 [ 1286.900385][T19202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1286.906393][T19202] RIP: 0033:0x7f8f4f19e159 [ 1286.910858][T19202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.930922][T19202] RSP: 002b:00007f8f50093028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1286.939490][T19202] RAX: ffffffffffffffda RBX: 00007f8f4f426090 RCX: 00007f8f4f19e159 [ 1286.947566][T19202] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000005 [ 1286.955658][T19202] RBP: 00007f8f4f23506b R08: 0000000000000000 R09: 0000000000000000 [ 1286.963692][T19202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1286.971802][T19202] R13: 00007f8f4f426128 R14: 00007f8f4f426090 R15: 00007ffeee7f2318 [ 1286.979925][T19202] [ 1286.983016][T19202] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1286.990451][T19202] CPU: 1 PID: 19202 Comm: syz.3.4339 Not tainted syzkaller #0 [ 1286.997963][T19202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1287.008063][T19202] Call Trace: [ 1287.011388][T19202] [ 1287.014363][T19202] dump_stack_lvl+0x188/0x24e [ 1287.019101][T19202] ? memcpy+0x3c/0x60 [ 1287.023132][T19202] ? show_regs_print_info+0x12/0x12 [ 1287.028387][T19202] ? load_image+0x410/0x410 [ 1287.032965][T19202] panic+0x2d3/0x710 [ 1287.036916][T19202] ? bpf_jit_dump+0xd0/0xd0 [ 1287.041488][T19202] __warn+0x2f8/0x4f0 [ 1287.045529][T19202] ? trace_check_vprintf+0xd4a/0x1080 [ 1287.050990][T19202] ? trace_check_vprintf+0xd4a/0x1080 [ 1287.056447][T19202] report_bug+0x2ba/0x4f0 [ 1287.060833][T19202] ? trace_check_vprintf+0xd4a/0x1080 [ 1287.066258][T19202] handle_bug+0x3a/0x70 [ 1287.070460][T19202] exc_invalid_op+0x16/0x40 [ 1287.075014][T19202] asm_exc_invalid_op+0x16/0x20 [ 1287.079914][T19202] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 1287.085958][T19202] Code: e8 bb 20 fc ff c6 05 47 38 86 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 80 83 90 8a 48 8b 74 24 60 48 89 c2 e8 76 a7 c7 ff <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 1287.105617][T19202] RSP: 0018:ffffc90003367a60 EFLAGS: 00010246 [ 1287.111732][T19202] RAX: 2e0dfa88b0385800 RBX: 0000000000000000 RCX: 0000000000080000 [ 1287.119759][T19202] RDX: ffffc90012195000 RSI: 000000000000ad67 RDI: 000000000000ad68 [ 1287.127797][T19202] RBP: ffff8880633b40d8 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 1287.135832][T19202] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffffffff8a800540 [ 1287.144042][T19202] R13: ffffc90003367ba0 R14: dffffc0000000000 R15: 0000000000000002 [ 1287.152109][T19202] trace_event_printf+0xea/0x140 [ 1287.157146][T19202] ? trace_print_seq+0x160/0x160 [ 1287.162177][T19202] ? trace_raw_output_prep+0x230/0x230 [ 1287.167704][T19202] trace_raw_output_initcall_level+0x93/0xd0 [ 1287.173748][T19202] tracing_read_pipe+0x53b/0xb10 [ 1287.178765][T19202] ? s_show+0x300/0x300 [ 1287.183067][T19202] vfs_read+0x2db/0x960 [ 1287.187291][T19202] ? kernel_read+0x1e0/0x1e0 [ 1287.191948][T19202] ? __fget_files+0x28/0x460 [ 1287.196598][T19202] ? __fget_files+0x3fc/0x460 [ 1287.201340][T19202] ? __fdget_pos+0x2ae/0x360 [ 1287.205991][T19202] ? ksys_read+0x70/0x260 [ 1287.210377][T19202] ksys_read+0x14d/0x260 [ 1287.214676][T19202] ? vfs_write+0x9a0/0x9a0 [ 1287.219157][T19202] ? lockdep_hardirqs_on+0x94/0x140 [ 1287.224499][T19202] do_syscall_64+0x4c/0xa0 [ 1287.228965][T19202] ? clear_bhb_loop+0x60/0xb0 [ 1287.233691][T19202] ? clear_bhb_loop+0x60/0xb0 [ 1287.238424][T19202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1287.244382][T19202] RIP: 0033:0x7f8f4f19e159 [ 1287.248869][T19202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.268527][T19202] RSP: 002b:00007f8f50093028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1287.277000][T19202] RAX: ffffffffffffffda RBX: 00007f8f4f426090 RCX: 00007f8f4f19e159 [ 1287.285032][T19202] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000005 [ 1287.293062][T19202] RBP: 00007f8f4f23506b R08: 0000000000000000 R09: 0000000000000000 [ 1287.301086][T19202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1287.309207][T19202] R13: 00007f8f4f426128 R14: 00007f8f4f426090 R15: 00007ffeee7f2318 [ 1287.317417][T19202] [ 1287.321173][T19202] Kernel Offset: disabled [ 1287.325637][T19202] Rebooting in 86400 seconds..