last executing test programs: 14m2.496996718s ago: executing program 32 (id=1029): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r2, @ANYBLOB="0b1b0500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40880}, 0x4000010) sendto$packet(r0, 0x0, 0x0, 0x24000004, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xfd, 0x6, @local}, 0x14) 12m51.231713092s ago: executing program 33 (id=1525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1ea74798, 0x7ffffffe, 0x0, 0x7fffffff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4004044}, 0xb32019a74e55d2de) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 11m50.430946841s ago: executing program 34 (id=1905): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt(r1, 0x84, 0x19, &(0x7f0000000040)="1b000000", 0x4) 11m44.267678321s ago: executing program 35 (id=1934): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) socket(0x15, 0x5, 0x0) 11m44.245032707s ago: executing program 36 (id=1935): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0xa80, 0x0) mount(0x0, 0x0, 0x0, 0x10810, 0x0) read(r0, 0x0, 0x0) 11m42.638460569s ago: executing program 3 (id=1941): io_setup(0x1, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x9}]) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x880) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 11m41.841020278s ago: executing program 37 (id=1943): socket(0x10, 0x3, 0x0) gettid() syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xfffb, 0x7}, @sack_perm, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @timestamp, @window={0x3, 0xe40, 0x100}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r2, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) writev(r0, 0x0, 0x0) 11m41.462712105s ago: executing program 3 (id=1946): r0 = timerfd_create(0x8, 0x80800) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) close(r0) 11m41.220214419s ago: executing program 3 (id=1947): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180058de21d30000e7ffff9400"/27], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x10008}}, 0x1c}}, 0x8810) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) 11m39.932513675s ago: executing program 3 (id=1949): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, 0x0, 0x0, 0x8000, 0x9, 0xb) 11m39.592169851s ago: executing program 3 (id=1951): syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xffea}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 11m39.010328869s ago: executing program 3 (id=1952): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000900)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000200)=@v3={0x3000000, [{0x5e, 0xd}, {0x6, 0x246}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 11m38.652308661s ago: executing program 38 (id=1952): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000900)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000200)=@v3={0x3000000, [{0x5e, 0xd}, {0x6, 0x246}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 11m3.50388565s ago: executing program 4 (id=2149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 11m2.680131643s ago: executing program 4 (id=2157): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="09000000e700140000007e70fbf788a83baa9900d6f180350000000000000000", 0x20, 0x24040011, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14) 11m2.408195687s ago: executing program 4 (id=2161): inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000a0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40880, 0x20) getdents(r0, &(0x7f0000000480)=""/47, 0x2f) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x3b3e0d8f5629cb81, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) keyctl$clear(0x3, 0xfffffffffffffffd) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(0x0, &(0x7f00000000c0)={0x200000, 0x8200000, 0xa1, 0xfffffffd, 0x4000007}) mount$9p_tcp(&(0x7f0000000300), &(0x7f00000002c0)='./file0\x00', 0x0, 0x206000, 0x0) 10m57.062568926s ago: executing program 4 (id=2180): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x210c04, &(0x7f0000000440)={[{@iocharset={'iocharset', 0x3d, 'cp936'}}, {@dmask={'dmask', 0x3d, 0x6}}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@dmask={'dmask', 0x3d, 0xb0}}, {}, {@allow_utime={'allow_utime', 0x3d, 0xb}}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x1, 0x1530, &(0x7f0000001340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) 10m56.621027084s ago: executing program 4 (id=2185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xdea}, {&(0x7f0000000240)="b0c089c1c3e1216756615dde8fd8e358908803df4459f506479ab9cf61eb02", 0x1f}], 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 10m56.143974358s ago: executing program 4 (id=2191): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000003c0)) 10m55.571252465s ago: executing program 39 (id=2191): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000003c0)) 5m0.840158539s ago: executing program 5 (id=4434): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) 4m57.420790781s ago: executing program 5 (id=4453): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xd7, 0x1ff, 0x1000d}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000580)={0x10, 0xd7, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000005c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) 4m57.212613691s ago: executing program 5 (id=4455): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) unshare(0x2c020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4m56.979611155s ago: executing program 5 (id=4459): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xdc}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56}}]}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f00000017c0)="$eJzs3M1vVFUbAPDn3k6/aF9a3rx5FWJiE4MajUOhBBNW4NqoiSxcUtspaTp82NbENiwK7tWFMS5IDH+CiXvZuDJxgQvFv4AYiSG6ARZj7nyUkekMpczMhfL7JWfuOXNm7vM8c2HuucncBvDMmsoe0oj9EXE6iZioP59GxFC1NxKxUXvd3dsX57KWRKXy/p9JJBFx5/bFuca+kvp2rD4YiYjrbyXx309b466srS/Nlsul5fr40OrZC4dW1tbfWDw7e6Z0pnTu6MybR2eOzcx0sdabFz78+oWf33n58tXPpt/9au+PSZyI8fpccx3dMhVTm59JZrC+LUTEbLeD5WSgXk9znUkhx4QAAOgobVrD/T8mYiDuL94m4odfck0OAAAA6IrKQEQFAAAA2OUS1/8AAACwyzV+B3Dn9sW5Rsv3Fwn9detkREzW6m/c31ybKcRGdTtSvW93z19JNN/WmtTe9timskjf/VTKWvToPuRONi5FxPNbHf+kWv9k9S7u1vrTiJjuQvypB8ZPU/0nuhA/7/oBeDZdO1k7kbWe/9LN9U9scf4rbHHu2om8z3+N9d/dlvXf/foH2qz/3ttmjAP3Xrvebq55/ffB57/NZ/Gz7WMV9QhuXYo4UNiq/mSz/qRN/ae3GWNs7uaVdnNZ/Vm9jdbv+itXIw5WV3Ot9Tcknf4+0aGFxXJpuva4xf7XjnWO33z8s5bFb1wL9EN2/PfEzo7/hW3GmHzuj/3t5h5ef/r7UHKq2huqP/PJ7Orq8uGIoeTt1uePdM6l8ZrGPrL6X32p8///rerPvhM26p9D9q/nUn2bjS8/EHPs4JFvd15/b2X1z+/w+H+xzRjffH/lo3ZzedcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNMhjYjxSNLiZj9Ni8WIsYj4X+xJy+dXVl9fOP/xuflsLmIyBtOFxXJpOiImauMkGx+u9u+PjzwwnomIfRHx5cRodVycO1+ez7t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo1FxHgkaTEi0oj4eyJNi8W8swIAAAC6bjLvBAAAAICec/0PAAAAu1/L9X/hX6ORfuYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArrTvxWs3kojYOD5abZmh+txgrpkBvZbu+J2VSlcTAfpuIO8EgNwUmvqVinM6PEtc4wPJQ+ZH2s4Mdz0XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5cr+y/diOJiI3jo9WWGarPDeaaGdBrad4JALkZ6DSZ9C8PoP8KeScA5MY1PlBb6t+r1LTOj7R95/AjRGm/FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeDuPVlqTFiEir/TQtFiP+ExGTMZgsLJZL0xGxNyJ+nRgczsaH804aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArltZW1+aLZdLyzo77dw7FfEEpKHzZHVGo+chhntZRd7fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5GFlbX1ptlwuLa/knQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQt5W19aXZcrm03MNO3jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCffwIAAP//ZLcP0g==") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 4m53.2580016s ago: executing program 5 (id=4470): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$snapshot(r0, &(0x7f00000003c0)="1e8f194d159d122deda87e732f5230186340f285c3bc819ae828b3a3e683e1271659246bb75cec9618213a820802b2c6666d9ff2b6e361e2d167bb814e76ba24ccfb7c93be2adaab2b210259d38c86825b67fb4a3167519ad8326318d37d154f88462b3b5be83232f6d5b2770430894f388b969241e2d21c296fe3846061e2bdb1c4", 0x82) 4m51.716058493s ago: executing program 5 (id=4478): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xc, 0x4, 0x2b8, 0xffffffff, 0x220, 0x130, 0x0, 0x98, 0xffffffff, 0x220, 0x220, 0x220, 0x98, 0x4, 0x0, {[{{@ip={@local, @loopback, 0xff, 0xffffff00, 'dummy0\x00', 'veth1_macvtap\x00', {}, {}, 0x8, 0x2, 0x46}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x11}}, @common=@addrtype={{0x20}, {0x150, 0x22, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) socket(0x10, 0x3, 0x0) semget$private(0x0, 0x6, 0x0) semctl$GETNCNT(0x0, 0x1, 0xe, &(0x7f0000000080)=""/131) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071114d00000000008510000002000000850000008a00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 4m51.250362413s ago: executing program 40 (id=4478): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xc, 0x4, 0x2b8, 0xffffffff, 0x220, 0x130, 0x0, 0x98, 0xffffffff, 0x220, 0x220, 0x220, 0x98, 0x4, 0x0, {[{{@ip={@local, @loopback, 0xff, 0xffffff00, 'dummy0\x00', 'veth1_macvtap\x00', {}, {}, 0x8, 0x2, 0x46}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x11}}, @common=@addrtype={{0x20}, {0x150, 0x22, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) socket(0x10, 0x3, 0x0) semget$private(0x0, 0x6, 0x0) semctl$GETNCNT(0x0, 0x1, 0xe, &(0x7f0000000080)=""/131) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071114d00000000008510000002000000850000008a00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 1m45.316512107s ago: executing program 2 (id=5319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0xffffffff}, 0x8) 1m44.869844612s ago: executing program 2 (id=5322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xc, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(0x0, r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1m44.637632082s ago: executing program 2 (id=5324): mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100"/42) 1m44.220159906s ago: executing program 2 (id=5327): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@grpquota}, {@bsdgroups}, {@noquota}]}, 0x1, 0x506, &(0x7f0000001d00)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHFZDkj8iEAbJA5TzXiS9WbtTbRJ7Cj+fKTRzJvnne97a817mW9ivwBG1s2I2I+IiYj4MCJm8/OFfIv3Olv6ukcHD1YODx6sFCJJPvhXIatPz0XXv0ndyK9ZjogffS/ip4Wn47Z29zaW6/Xadl6ebze25lu7e3fWG8trtbXaZrW6tLi08M7dt6sX1tfXGhP50Vcf/nH/Wz9PmzWTn+nux0XqdL10HCc1HhE/uIxgQzCW92di2A3huRQj4uWIeD27/2djLHs3AYDrLElmI5ntLgMA110xy4EVipU8FzATxWKl0snhvRLTxXqz1b59v7mzudrJlc1FqXh/vV5byHOFc1EqpOXF7PhxuXqifDciXoqIX05OZeXKSrO+OswffABghN04Mf//d7Iz/wMA11x52A0AAAbO/A8Ao8f8DwCjx/wPAKOnM/9PDbsZAMAAef4HgNFj/geAkfLD999Pt+Qw//7r1Y92dzaaH91ZrbU2Ko2dlcpKc3urstZsrmXf2dM47Xr1ZnNr8a3Y+Xju21ut9nxrd+9eo7mz2b6Xfa/3vVope9X+AHoGAPTz0muf/aWQzsjvTmVbdK3lUBpqy4DLVhx2A4ChGRt2A4ChsdoXjK5zPONLD8A10WOJ3ieUe31AKEmS5PKaBFyyW1+S/4dR1ZX/91fAMGLk/2F0yf/D6EqSwlnX/I+zvhAAuNrk+IE+v/9/Od//Lv/lwE9WT77i09Ov7TMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFdH6/9W8nU6ZqJYrFQiXoiIuSgV7q/XawsR8WJE/HmyNJmWF4fcZgDgvIp/L+Trf92afXPmiapXbxwfTkTEz379wa8+Xm63t/8UMVH49+TR+fan+fnq4FsPAJzuaJ7O9l0P8o8OHqwcbYNszz++GxHlTvzDg4k4PI4/HuPZvhyliJj+TyEvdxS6chfnsf9JRHyxV/8LMZPlQDorn56Mn8Z+YaDxi0/EL2Z1nX36f/GFC2gLjJrP0vHnvV73XzFuZvve9385G6HOLx//0kutHGZj4OP4R+PfWJ/x7+ZZY7z1h+93jqaervsk4svjEUexD7vGn6P4hT7x3zxj/L9+5dXX+9Ulv4m4Fb3jd8eabze25lu7e3fWG8trtbXaZrW6tLi08M7dt6vzWY56vjMbJD0mhX++e/vFfvHT/k/3iV8+pf9fP2P/f/v/D3/8tWfE/+YbveIX45VnxE+fzL9xxvjL078v96tL46/26f9p7//tM8RO56eHf9t7atlwAGB4Wrt7G8v1em37Gh+kP6tcgWY4OP9BXOG38juDijURvat+8Ubnnj5RlSTPFavfiHERWTfgKji+6SPif8NuDAAAAAAAAAAAAAAA0NMgPrE07D4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfX0eAAD//yjlzow=") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000023a000/0x1000)=nil) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m43.367585672s ago: executing program 2 (id=5332): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="140000000109010100"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047452, 0xf0ff1f00000000) 1m42.444286312s ago: executing program 2 (id=5337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xdea}, {&(0x7f0000000240)="b0c089c1c3e1216756615dde8fd8e358908803df4459f506479ab9cf61eb02", 0x1f}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1m41.509900525s ago: executing program 41 (id=5337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdea}, {&(0x7f0000000240)="b0c089c1c3e1216756615dde8fd8e358908803df4459f506479ab9cf61eb02", 0x1f}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1m20.877849874s ago: executing program 0 (id=5403): socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffb, 0x0, 0xffd, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 1m20.57022452s ago: executing program 0 (id=5405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) file_setattr(r3, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f00000094080000ffffff8518000000000b4938696c9516eb00000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 1m18.298806106s ago: executing program 0 (id=5411): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r2, 0x0) close(0x3) 1m16.768729788s ago: executing program 0 (id=5417): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67100000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d91187"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 1m16.028031465s ago: executing program 0 (id=5422): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_io_uring_setup(0x7c29, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000001, 0x2) ppoll(&(0x7f0000000040)=[{r5, 0x2049}], 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x13f81, 0x0, 0x28c, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) syz_io_uring_setup(0x5015, &(0x7f0000000540)={0x0, 0xf2d9, 0xc00, 0x5, 0x14e}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r6, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f00000000c0)="a95cee00400000fbffffffffffffff00", 0x10) r12 = openat(0xffffffffffffff9c, 0x0, 0x42, 0xe) pwrite64(r10, &(0x7f0000000180)="95", 0xffaf, 0x10001) ioctl$PAGEMAP_SCAN(r12, 0xc0606610, &(0x7f0000000300)={0x60, 0x1, &(0x7f0000001000/0x1000)=nil, &(0x7f0000001000/0x2000)=nil, 0x10001, &(0x7f00000001c0)=[{0x3, 0x6, 0x6}, {0x5, 0x0, 0xe}, {0x12, 0x7, 0x3}, {0x200, 0x2, 0x1}], 0x4, 0xfffffffffffffc01, 0x7, 0x77, 0xc, 0x40}) 1m14.691989677s ago: executing program 0 (id=5424): socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xddd4, 0x4000, 0x3}, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x400, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3, r2, r2], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 59.441928558s ago: executing program 42 (id=5424): socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xddd4, 0x4000, 0x3}, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x400, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3, r2, r2], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 11.472207731s ago: executing program 9 (id=5615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x36, &(0x7f0000000900)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r10, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r8, 0x0, 0x0) 7.460215301s ago: executing program 9 (id=5627): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000238000480340001800c0001007061796c6f616400240002800800044000000000080002400000000008000340000000b8080005400000000b050007"], 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 7.27416796s ago: executing program 9 (id=5629): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180058de21d30000e7ffff9400"/28], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x8810) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000640)="e8f153b7"}) sendmsg$AUDIT_USER_TTY(r0, 0x0, 0x8040) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2, 0x0, r6}) socket$inet6_sctp(0xa, 0x1, 0x84) 5.09282728s ago: executing program 1 (id=5637): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r3 = inotify_init() pipe2(&(0x7f0000000000), 0x80) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r5}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r2}, 0xc) 4.955211159s ago: executing program 9 (id=5638): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x991c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x8}}]}}]}, 0x4c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001340)={{r1}, r2, 0x4, @inherit={0x80, &(0x7f0000000380)={0x0, 0x7, 0xee7, 0x8001, {0x16, 0x1000, 0x4, 0x2, 0x3081}, [0x7fff, 0xb, 0x0, 0x448c, 0xa, 0x2, 0x6]}}, @name="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"}) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) 4.470394341s ago: executing program 1 (id=5642): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.396606849s ago: executing program 6 (id=5643): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x210, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1e4, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1d4, 0x1, [@m_tunnel_key={0x1d0, 0xf, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x14d, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x5c, 0x0, 0x305, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x9, 0x80000001, 0xfffffff2, 0x800]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.341195348s ago: executing program 8 (id=5645): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000600)="b9ff03316844268cf89914f088a84b4586dd90fad402633ad1c46b7b8b2fb9bce24020b497fceced", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.091890924s ago: executing program 7 (id=5646): mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000000140)=""/214, 0xd6) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000001c0)='my_midi_interface\x00', 0x12) 3.97997893s ago: executing program 1 (id=5647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000001100"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a818800000000000001000a0000010900020073797a31000000000900010073797a3100000000040003"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3.883249189s ago: executing program 8 (id=5648): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 3.600358115s ago: executing program 7 (id=5649): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180058de21d30000e7ffff9400"/28], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x8810) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000640)="e8f153b7"}) sendmsg$AUDIT_USER_TTY(r0, 0x0, 0x8040) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2, 0x0, r6}) socket$inet6_sctp(0xa, 0x1, 0x84) 3.515989855s ago: executing program 8 (id=5650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) 3.513349196s ago: executing program 1 (id=5651): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x20, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x648}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 3.473184398s ago: executing program 6 (id=5652): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c757466383d312c6e6e6f6e756d7461696c3d312c73686f72746e616d653d6c6f7765722c757466383d302c636f6465706167653d313235312c636865636b3d7374726963742c696f636861727365743d69736f383835392d332c757466383d302c757466383d312c636f6484706167653d3836392c73686f72746e616d653d7704696e6e742c00"], 0x3, 0x28c, &(0x7f0000000280)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) mount$nfs(&(0x7f0000000040)='nl80211\x00', 0x0, &(0x7f00000001c0), 0x2000, &(0x7f0000000200)={[{'-]^-\\#\''}, {'@\'}\'%w)'}, {'#-\''}, {'nl80211\x00'}, {'/'}, {'^,]'}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 2.45684949s ago: executing program 8 (id=5653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000505000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) 2.454208232s ago: executing program 1 (id=5654): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0x4b}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.30423179s ago: executing program 6 (id=5655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x81, 0xf}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) 2.109252388s ago: executing program 1 (id=5656): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./tracing/events/enable\x00', 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 1.979898488s ago: executing program 8 (id=5657): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000100)="040000000000000004000000000072000000000000f20ae1bbac6ac0b9a1") 1.892105382s ago: executing program 6 (id=5658): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7ff, 0x2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7, 0x18, 0x100, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}) 1.574124745s ago: executing program 7 (id=5659): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000600)="b9ff03316844268cf89914f088a84b4586dd90fad402633ad1c46b7b8b2fb9bce24020b497fceced", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.545086159s ago: executing program 8 (id=5660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) openat$tun(0xffffffffffffff9c, 0x0, 0x80a40, 0x0) 1.176962435s ago: executing program 7 (id=5661): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r2 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000003c0)={0x1}) 1.175112629s ago: executing program 6 (id=5662): setreuid(0xee01, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r0, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 1.005810552s ago: executing program 9 (id=5663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000) 639.717147ms ago: executing program 7 (id=5664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) 434.234908ms ago: executing program 9 (id=5665): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') readv(r0, 0x0, 0x0) 91.84072ms ago: executing program 7 (id=5666): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x6, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x20, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x648}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 0s ago: executing program 6 (id=5667): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) kernel console output (not intermixed with test programs): ticast mode [ 748.070512][ T185] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 748.271871][ T185] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 748.291825][ T185] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.311523][ T185] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.325027][ T185] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 748.343753][ T185] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 748.358971][ T185] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 748.377441][ T185] usb 6-1: Manufacturer: syz [ 748.749393][ T5642] Bluetooth: hci6: command 0x0406 tx timeout [ 749.518634][ T185] usb 6-1: config 0 descriptor?? [ 749.944102][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 749.968808][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 749.976421][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 749.984111][ T185] usbhid 6-1:0.0: can't add hid device: -32 [ 749.990436][ T185] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 750.054422][ T185] usb 6-1: USB disconnect, device number 42 [ 751.938628][T20452] fuse: fd is not a fuse device [ 752.145606][T20459] ip6gre1: entered allmulticast mode [ 752.188481][ T3323] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 752.690775][T20480] process 'syz.2.4410' launched './file2' with NULL argv: empty string added [ 752.912849][T20482] xt_SECMARK: invalid mode: 2 [ 753.580085][T20484] syzkaller0: entered promiscuous mode [ 753.628355][T20484] syzkaller0: entered allmulticast mode [ 753.639057][ T5648] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 753.793857][T20495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4415'. [ 754.480959][T20501] loop5: detected capacity change from 0 to 1024 [ 754.488432][T20501] EXT4-fs: Ignoring removed bh option [ 754.545910][T20501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 755.494890][T18698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.389068][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 756.423733][T20547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4436'. [ 756.962762][T20534] binfmt_misc: register: failed to install interpreter file ./file2 [ 757.271689][T20558] loop2: detected capacity change from 0 to 1024 [ 757.280199][T20558] EXT4-fs: Ignoring removed bh option [ 757.363569][T20558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.411903][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.990100][T20590] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4451'. [ 760.917347][T20623] loop5: detected capacity change from 0 to 4096 [ 760.950956][T20623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 761.060458][T20631] loop2: detected capacity change from 0 to 1024 [ 761.070937][T20631] EXT4-fs: Ignoring removed bh option [ 761.139806][T20631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.228717][T20632] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 762.286205][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.722955][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4464'. [ 763.525820][T20655] loop2: detected capacity change from 0 to 256 [ 763.542320][T18698] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 763.662827][T18698] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 765.016844][T20678] team0: No ports can be present during mode change [ 765.109053][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 765.219612][ T3323] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.394267][ T3323] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.561211][ T3323] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.766027][T20696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4480'. [ 766.622060][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 766.653456][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 766.667464][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 766.680236][ T3323] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.692724][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 766.704481][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 767.496542][ T5642] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 767.664500][T20730] loop1: detected capacity change from 0 to 512 [ 767.794932][T20730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.867890][ T3323] bridge_slave_1: left allmulticast mode [ 767.906041][ T3323] bridge_slave_1: left promiscuous mode [ 767.941474][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.010426][ T3323] bridge_slave_0: left allmulticast mode [ 768.024060][ T3323] bridge_slave_0: left promiscuous mode [ 768.035809][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.085144][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.812985][ T5642] Bluetooth: hci0: command tx timeout [ 769.038330][T16236] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 769.179857][T16236] usb 9-1: device descriptor read/64, error -71 [ 769.385597][ T3323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.451923][ T3323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.469992][T16236] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 769.490277][ T3323] bond0 (unregistering): Released all slaves [ 769.517822][T20738] team0: Unable to change to the same mode the team is in [ 769.638951][T16236] usb 9-1: device descriptor read/64, error -71 [ 769.665405][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 769.763085][T16236] usb usb9-port1: attempt power cycle [ 770.498960][T16236] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 770.541690][T16236] usb 9-1: device descriptor read/8, error -71 [ 770.734789][T20792] IPv6: NLM_F_CREATE should be specified when creating new route [ 770.870300][ T5642] Bluetooth: hci0: command tx timeout [ 770.899779][T16236] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 770.950264][T16236] usb 9-1: device descriptor read/8, error -71 [ 771.071203][T16236] usb usb9-port1: unable to enumerate USB device [ 771.178983][ T29] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 771.370421][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 771.400696][ T29] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 771.453527][ T29] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 771.491357][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.525040][ T29] usb 3-1: Product: syz [ 771.537758][T20815] team0: No ports can be present during mode change [ 771.546757][T16236] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 771.549097][ T29] usb 3-1: Manufacturer: syz [ 771.589520][ T29] usb 3-1: SerialNumber: syz [ 771.634351][ T29] usb 3-1: config 0 descriptor?? [ 771.741619][T16236] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.776688][T16236] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.806654][T16236] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 771.853367][T16236] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.888698][T16236] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.986378][T16236] usb 9-1: config 0 descriptor?? [ 772.024845][ T3323] hsr_slave_0: left promiscuous mode [ 772.058541][ T3323] hsr_slave_1: left promiscuous mode [ 772.086575][ T3323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.129278][ T3323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.172355][ T3323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.187756][ T3323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.267713][ T3323] veth1_macvtap: left promiscuous mode [ 772.289667][ T3323] veth0_macvtap: left promiscuous mode [ 772.313530][ T3323] veth1_vlan: left promiscuous mode [ 772.339121][ T3323] veth0_vlan: left promiscuous mode [ 772.654460][T20805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.669731][T20805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.900993][T20805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.930742][T20805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.950683][ T5642] Bluetooth: hci0: command tx timeout [ 772.972858][ T3323] team0 (unregistering): Port device team_slave_1 removed [ 772.996102][ T3323] team0 (unregistering): Port device team_slave_0 removed [ 773.166867][T16236] usbhid 9-1:0.0: can't add hid device: -71 [ 773.180974][T16236] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 773.212511][T16236] usb 9-1: USB disconnect, device number 34 [ 773.311963][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 774.018424][ T802] usb 3-1: USB disconnect, device number 30 [ 775.029129][ T5642] Bluetooth: hci0: command tx timeout [ 775.503963][ T3323] Bluetooth: hci3: Frame reassembly failed (-84) [ 775.654202][T20702] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.669357][T20702] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.702383][T20702] bridge_slave_0: entered allmulticast mode [ 775.737243][T20702] bridge_slave_0: entered promiscuous mode [ 775.769710][T20702] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.792680][T20702] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.817933][T20702] bridge_slave_1: entered allmulticast mode [ 775.833520][T20702] bridge_slave_1: entered promiscuous mode [ 775.912677][T20702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.966534][T20702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.038724][T20702] team0: Port device team_slave_0 added [ 776.049411][T20702] team0: Port device team_slave_1 added [ 776.481481][T20702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.521535][T20702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.696977][T20702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.733931][T20702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.760870][T20702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.839457][T20702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.976648][T20702] hsr_slave_0: entered promiscuous mode [ 776.990274][T20702] hsr_slave_1: entered promiscuous mode [ 777.007160][T20702] debugfs: 'hsr0' already exists in 'hsr' [ 777.017923][T20702] Cannot create hsr debugfs directory [ 777.283940][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 777.509142][ T5648] Bluetooth: hci3: command 0x1003 tx timeout [ 777.518254][ T5642] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 778.089196][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 778.261534][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 778.284611][ T24] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 778.308895][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.334928][ T24] usb 2-1: config 0 has no interface number 0 [ 778.347903][ T24] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 778.385167][ T24] usb 2-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.432188][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 778.491448][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.574384][ T24] usb 2-1: Product: syz [ 778.606564][ T24] usb 2-1: Manufacturer: syz [ 778.629761][ T24] usb 2-1: SerialNumber: syz [ 778.911425][ T24] usb 2-1: config 0 descriptor?? [ 779.212881][ T24] usb 2-1: can't set config #0, error -71 [ 779.266976][ T24] usb 2-1: USB disconnect, device number 23 [ 780.184629][ T24] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 780.550416][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 780.624283][ T24] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 780.656044][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.695928][ T24] usb 9-1: Product: syz [ 780.710032][ T24] usb 9-1: Manufacturer: syz [ 780.726441][ T24] usb 9-1: SerialNumber: syz [ 780.755590][ T24] usb 9-1: config 0 descriptor?? [ 780.914209][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 780.982394][ T24] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 781.023259][ T24] peak_usb 9-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 781.109080][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 781.161944][ T24] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -32 [ 781.208779][T20702] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 781.263461][T20702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 781.293487][T20702] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 781.344429][T20702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 781.369841][T20702] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 781.394717][T20702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 781.462765][T20702] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 781.505738][T20702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 781.541914][T20979] syzkaller0: mtu less than device minimum [ 781.579903][T16236] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 781.747562][T16236] usb 2-1: Using ep0 maxpacket: 16 [ 781.766988][T16236] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 781.793408][T16236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.822542][T16236] usb 2-1: config 0 has no interface number 0 [ 781.843309][T16236] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 781.881866][T16236] usb 2-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 781.924587][T16236] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 781.949512][T16236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.977445][T16236] usb 2-1: Product: syz [ 781.996563][T16236] usb 2-1: Manufacturer: syz [ 782.001503][T20702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.042690][T16236] usb 2-1: SerialNumber: syz [ 782.042704][T20702] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.084789][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.092013][ T3323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.165349][T16236] usb 2-1: config 0 descriptor?? [ 782.177356][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.184535][ T8455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.214839][T20983] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 782.252666][T16236] asix 2-1:0.251: probe with driver asix failed with error -22 [ 782.856717][ T5901] usb 9-1: USB disconnect, device number 35 [ 784.320692][T16236] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 784.728189][T16236] usb 3-1: config 1 interface 0 has no altsetting 0 [ 784.757309][T16236] usb 3-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 784.801728][T16236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.861258][ T5775] usb 2-1: USB disconnect, device number 24 [ 784.877244][T16236] usb 3-1: Product: syz [ 784.912153][T16236] usb 3-1: Manufacturer: syz [ 784.933386][T16236] usb 3-1: SerialNumber: syz [ 785.234562][T21052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.271150][T21052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.308714][T20702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.537087][T16236] usbhid 3-1:1.0: can't add hid device: -71 [ 785.560463][T16236] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 785.584090][T16236] usb 3-1: USB disconnect, device number 31 [ 786.979487][T16236] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 786.994252][T21125] fuse: Bad value for 'fd' [ 787.078631][T20702] veth0_vlan: entered promiscuous mode [ 787.130690][T20702] veth1_vlan: entered promiscuous mode [ 787.169291][T16236] usb 3-1: Using ep0 maxpacket: 16 [ 787.194960][T16236] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 787.217107][T16236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.236997][T16236] usb 3-1: config 0 has no interface number 0 [ 787.245362][T16236] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 787.263381][T20702] veth0_macvtap: entered promiscuous mode [ 787.267299][T16236] usb 3-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.309013][T16236] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 787.328299][T16236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.340445][T16236] usb 3-1: Product: syz [ 787.348804][T16236] usb 3-1: Manufacturer: syz [ 787.376401][T20702] veth1_macvtap: entered promiscuous mode [ 787.378980][T16236] usb 3-1: SerialNumber: syz [ 787.411073][T16236] usb 3-1: config 0 descriptor?? [ 787.431354][T21114] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 787.446010][T20702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.454299][T16236] asix 3-1:0.251: probe with driver asix failed with error -22 [ 787.494285][T20702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.516346][T21141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4593'. [ 787.560488][T19698] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.593703][T19698] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.751947][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.856377][ T8455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.875533][ T8455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.912735][T19698] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.964945][T19698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.983465][T19698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.202264][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4597'. [ 788.222763][T21158] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4597'. [ 788.245726][T21158] netlink: 'syz.8.4597': attribute type 19 has an invalid length. [ 788.260939][T21158] netlink: 'syz.8.4597': attribute type 20 has an invalid length. [ 788.561103][T21176] loop8: detected capacity change from 0 to 256 [ 789.862357][T16236] usb 3-1: USB disconnect, device number 32 [ 790.174467][T21210] syzkaller0: entered promiscuous mode [ 790.249067][T21210] syzkaller0: entered allmulticast mode [ 790.528559][T21223] mmap: syz.9.4613 (21223) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 792.397919][T21228] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 792.620566][T21257] loop7: detected capacity change from 0 to 1024 [ 792.666701][T21257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.728251][T21266] loop2: detected capacity change from 0 to 512 [ 792.806118][T21266] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 792.858989][T16236] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 792.889586][T21266] EXT4-fs (loop2): 1 truncate cleaned up [ 792.906553][T21266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.044765][T16236] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 793.112125][T16236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.173527][T16236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.362861][T16236] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 793.678640][T16236] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 794.392862][T16236] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 794.401453][T16236] usb 2-1: Manufacturer: syz [ 794.422064][T20702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.435593][T16236] usb 2-1: config 0 descriptor?? [ 794.456706][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.672078][T21292] fuse: Bad value for 'group_id' [ 794.737259][T21292] fuse: Bad value for 'group_id' [ 795.063185][T16236] usbhid 2-1:0.0: can't add hid device: -71 [ 795.086786][T16236] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 795.132366][T16236] usb 2-1: USB disconnect, device number 25 [ 795.406345][T21319] loop8: detected capacity change from 0 to 2048 [ 795.432032][T21326] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 795.488357][T21319] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.526712][T21319] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.076452][ T5648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 796.090653][ T5648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 796.102885][ T5648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 796.114532][ T5648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 796.123634][ T5648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 796.327286][T11507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.947185][T21350] team0: Unable to change to the same mode the team is in [ 796.968391][T21352] syzkaller0: mtu less than device minimum [ 797.875094][T21388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4661'. [ 798.119835][ T29] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 798.147148][T21392] loop1: detected capacity change from 0 to 4096 [ 798.151354][ T5648] Bluetooth: hci3: command tx timeout [ 798.177151][T21392] EXT4-fs: inline encryption not supported [ 798.195218][T21392] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 798.218123][T21392] EXT4-fs (loop1): Test dummy encryption mode enabled [ 798.257509][T21392] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 798.276571][T21392] System zones: 0-5 [ 798.291299][ T29] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 798.305811][T21392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.318450][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.330671][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.358953][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 798.377448][ T29] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 798.392376][ T29] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 798.401734][ T29] usb 3-1: Manufacturer: syz [ 798.423236][ T29] usb 3-1: config 0 descriptor?? [ 798.632562][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.812097][T21412] syzkaller0: mtu less than device minimum [ 798.887437][ T29] hid_parser_main: 4007 callbacks suppressed [ 798.887461][ T29] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 799.100981][ T29] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 799.221010][ T29] usb 3-1: USB disconnect, device number 33 [ 799.575758][T21442] netlink: 'syz.8.4674': attribute type 13 has an invalid length. [ 799.602917][T21439] fido_id[21439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 799.751522][T21442] gretap0: refused to change device tx_queue_len [ 799.769801][T21442] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 800.229615][ T5648] Bluetooth: hci3: command tx timeout [ 800.761852][ T5648] Bluetooth: hci6: unexpected event for opcode 0x2005 [ 800.798129][T12655] bond0 (unregistering): Released all slaves [ 800.824149][T21488] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4684'. [ 801.033057][T21484] syzkaller0: mtu less than device minimum [ 801.097665][T12655] tipc: Disabling bearer [ 801.159120][T12655] tipc: Left network mode [ 802.309873][ T5648] Bluetooth: hci3: command tx timeout [ 803.332515][T21525] No control pipe specified [ 803.573921][T21531] netlink: 'syz.2.4698': attribute type 13 has an invalid length. [ 803.651436][T21531] gretap0: refused to change device tx_queue_len [ 803.661539][T21531] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 803.902189][T21543] syzkaller0: mtu less than device minimum [ 804.390799][ T5648] Bluetooth: hci3: command tx timeout [ 805.701052][T21584] netlink: 'syz.8.4712': attribute type 13 has an invalid length. [ 806.608375][T21584] gretap0: refused to change device tx_queue_len [ 806.640313][T21584] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 806.942879][T21606] loop1: detected capacity change from 0 to 1024 [ 806.951074][T21606] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 807.014334][T21606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.834511][T12660] smc: removing ib device syz2 [ 807.994749][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.001142][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.786910][T12660] smbdirect: ib_dev[syz2] removed [ 808.857432][T21342] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.895813][T21342] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.921508][T21342] bridge_slave_0: entered allmulticast mode [ 808.958502][T21342] bridge_slave_0: entered promiscuous mode [ 809.002170][T21342] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.010567][ T24] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 809.044342][T21342] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.067217][T21342] bridge_slave_1: entered allmulticast mode [ 809.120410][T21342] bridge_slave_1: entered promiscuous mode [ 809.192781][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 809.225327][ T24] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 809.273088][ T24] usb 9-1: config 0 has no interface number 0 [ 809.307941][ T24] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 809.354446][ T24] usb 9-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 809.404698][ T24] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 809.457258][ T24] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 809.488500][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.500797][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.516796][ T24] usb 9-1: Product: syz [ 809.534779][T21342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.536987][ T24] usb 9-1: Manufacturer: syz [ 809.583969][ T24] usb 9-1: SerialNumber: syz [ 809.616070][ T24] usb 9-1: config 0 descriptor?? [ 809.623154][T21342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.654664][T21655] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 809.679847][ T24] asix 9-1:0.251: probe with driver asix failed with error -22 [ 809.854499][T21674] fuse: Unknown parameter 'grou00000000000000000000' [ 810.017668][T21680] netlink: 'syz.1.4735': attribute type 13 has an invalid length. [ 810.054373][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4735'. [ 810.071396][T21342] team0: Port device team_slave_0 added [ 810.097084][T21342] team0: Port device team_slave_1 added [ 810.201508][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 810.397856][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.414347][ T24] usb 3-1: config 0 has no interfaces? [ 810.476308][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 810.494966][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.878237][ T24] usb 3-1: config 0 descriptor?? [ 811.090875][T21342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.125172][T21342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.141884][ T24] usb 3-1: USB disconnect, device number 34 [ 811.243330][T21342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.273161][T21342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.307351][T21342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.353202][T21342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.709216][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 811.813553][T21342] hsr_slave_0: entered promiscuous mode [ 811.839343][T21342] hsr_slave_1: entered promiscuous mode [ 811.852051][ T802] usb 9-1: USB disconnect, device number 36 [ 811.877547][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.908461][ T24] usb 3-1: config 0 has no interfaces? [ 811.930779][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 811.960181][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.141141][ T24] usb 3-1: config 0 descriptor?? [ 812.335420][T21719] syzkaller0: entered promiscuous mode [ 812.349638][T21719] syzkaller0: entered allmulticast mode [ 812.432400][T21733] fuse: Unknown parameter 'grou00000000000000000000' [ 812.993852][T21747] netlink: 'syz.1.4750': attribute type 13 has an invalid length. [ 813.025759][T21747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4750'. [ 813.157630][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 813.432211][T21758] netlink: 196 bytes leftover after parsing attributes in process `syz.7.4753'. [ 813.499468][ T10] usb 3-1: USB disconnect, device number 35 [ 813.939910][T21772] fuse: Unknown parameter 'grou00000000000000000000' [ 813.987967][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 814.389705][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 814.404672][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 814.502935][ T24] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 814.552014][ T24] usb 2-1: config 0 has no interface number 0 [ 814.597221][ T24] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 814.686389][ T24] usb 2-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 814.732968][ T24] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 814.805107][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 814.837763][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.880962][ T24] usb 2-1: Product: syz [ 814.918655][ T24] usb 2-1: Manufacturer: syz [ 814.940094][ T24] usb 2-1: SerialNumber: syz [ 815.103042][ T24] usb 2-1: config 0 descriptor?? [ 815.111828][T21767] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 815.161549][ T24] asix 2-1:0.251: probe with driver asix failed with error -22 [ 815.336617][T12655] IPVS: stop unused estimator thread 0... [ 815.467814][T21797] netlink: 'syz.2.4765': attribute type 13 has an invalid length. [ 815.493362][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4765'. [ 815.985013][T21809] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4767'. [ 816.062083][T21809] netlink: 'syz.8.4767': attribute type 1 has an invalid length. [ 816.070687][T21809] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4767'. [ 816.099288][T21342] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 816.116554][T21342] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 816.128012][T21342] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 816.157752][T21342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 816.183994][T21342] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 816.209598][T21342] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 816.234815][T21342] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 816.272600][T21342] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 816.299815][ T185] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 816.462211][ T185] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.492979][ T185] usb 3-1: config 0 has no interfaces? [ 816.506477][ T185] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 816.516010][T21342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.532701][ T185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.556466][ T185] usb 3-1: config 0 descriptor?? [ 816.574701][T21342] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.610838][T19698] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.618066][T19698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.684993][T21833] fuse: Unknown parameter 'group_i00000000000000000000' [ 816.717854][T19698] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.725058][T19698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.730992][T16236] usb 2-1: USB disconnect, device number 26 [ 816.818611][ T185] usb 3-1: USB disconnect, device number 36 [ 817.210458][T16236] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 817.270655][T21851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'. [ 817.508687][ T185] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 817.534296][T16236] usb 9-1: config 1 interface 0 has no altsetting 0 [ 817.563989][T16236] usb 9-1: string descriptor 0 read error: -22 [ 817.583465][T16236] usb 9-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 818.271988][T16236] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.341337][ T185] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.361648][ T185] usb 3-1: config 0 has no interfaces? [ 818.597095][ T185] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 818.606426][ T185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.630580][ T185] usb 3-1: config 0 descriptor?? [ 818.713596][T16236] usbhid 9-1:1.0: can't add hid device: -32 [ 818.716216][T21841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.730491][T16236] usbhid 9-1:1.0: probe with driver usbhid failed with error -32 [ 818.743114][T21841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.812040][ T185] usb 9-1: USB disconnect, device number 37 [ 818.940646][T21872] fuse: Bad value for 'user_id' [ 818.956905][T21872] fuse: Bad value for 'user_id' [ 818.964649][T21342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.352184][T21883] loop7: detected capacity change from 0 to 512 [ 819.398055][T21883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.155680][ T10] usb 3-1: USB disconnect, device number 37 [ 821.246964][T20702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.381612][T21342] veth0_vlan: entered promiscuous mode [ 821.421018][T21342] veth1_vlan: entered promiscuous mode [ 821.641136][T21916] fuse: Bad value for 'user_id' [ 821.691119][T21916] fuse: Bad value for 'user_id' [ 821.724328][T21342] veth0_macvtap: entered promiscuous mode [ 821.868123][T21926] loop7: detected capacity change from 0 to 128 [ 821.880083][T21926] EXT4-fs: Invalid want_extra_isize 2147483647 [ 822.280610][T21342] veth1_macvtap: entered promiscuous mode [ 822.662366][T21342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.742556][T21342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.852546][ T1150] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.877075][ T1150] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.043041][ T3323] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.115514][ T3323] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.232471][T21953] bridge0: entered promiscuous mode [ 823.368525][T12655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.406594][T12655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.530440][T16236] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 823.544877][T12655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.585636][T12655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.616565][T21962] loop1: detected capacity change from 0 to 512 [ 823.641952][T21962] EXT4-fs: Ignoring removed oldalloc option [ 823.668218][T21962] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 823.726513][T16236] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.737717][T21962] EXT4-fs (loop1): 1 truncate cleaned up [ 823.804717][T16236] usb 9-1: config 0 has no interfaces? [ 823.830764][T21962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.863927][T16236] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 823.874255][T21969] loop2: detected capacity change from 0 to 256 [ 823.925466][T16236] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.980379][T16236] usb 9-1: config 0 descriptor?? [ 824.618713][T21980] loop7: detected capacity change from 0 to 512 [ 824.849714][T21980] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 824.877682][T21980] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.895126][T21980] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 824.957065][T21977] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.4806: invalid fast symlink length 10 [ 824.959721][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.993593][T21978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4808'. [ 825.017656][ T24] usb 9-1: USB disconnect, device number 38 [ 825.310703][T20702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.327320][T21985] loop2: detected capacity change from 0 to 2048 [ 825.341207][T21987] fuse: Bad value for 'user_id' [ 825.350533][T21987] fuse: Bad value for 'user_id' [ 825.444339][T21985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.471363][T21985] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.732550][ T24] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 826.132291][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.216152][ T24] usb 9-1: config 0 has no interfaces? [ 826.253872][ T24] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 826.487784][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.549724][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.574470][ T24] usb 9-1: config 0 descriptor?? [ 826.605050][ T24] usb 9-1: can't set config #0, error -71 [ 826.635494][ T24] usb 9-1: USB disconnect, device number 39 [ 827.000693][T22025] loop8: detected capacity change from 0 to 512 [ 827.010051][T22025] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 827.023776][T22025] EXT4-fs (loop8): 1 truncate cleaned up [ 827.036701][T22025] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.990592][T11507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.374229][T22052] fuse: Bad value for 'fd' [ 828.379201][T22055] loop9: detected capacity change from 0 to 256 [ 828.603212][T22059] loop7: detected capacity change from 0 to 1024 [ 828.737103][T22059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.763442][T22064] Bluetooth: MGMT ver 1.23 [ 828.794124][T22069] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 828.801897][T22069] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 829.071750][T22071] EXT4-fs error (device loop7): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.7.4830: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 829.109552][T22071] EXT4-fs error (device loop7) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 829.114898][T22078] ip_tables: iptables: counters copy to user failed while replacing table [ 829.525178][T20702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.451297][T22102] fuse: Bad value for 'fd' [ 830.942911][T22123] loop2: detected capacity change from 0 to 1024 [ 830.992669][T22123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.097865][T22128] ip_tables: iptables: counters copy to user failed while replacing table [ 831.300135][T22133] EXT4-fs error (device loop2): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.2.4855: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 831.330492][T22133] EXT4-fs error (device loop2) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 832.183430][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.293029][T22141] syzkaller0: entered promiscuous mode [ 832.337241][T22141] syzkaller0: entered allmulticast mode [ 832.874281][T22164] md: could not open device unknown-block(1,0). [ 832.945421][T22164] md: md_import_device returned -16 [ 832.992507][T22168] loop8: detected capacity change from 0 to 2048 [ 833.019958][T22168] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 833.032177][T22168] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 833.809068][T22188] only policy match revision 0 supported [ 833.809094][T22188] unable to load match [ 835.165272][T11507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.291431][T22208] fuse: Bad value for 'group_id' [ 835.338549][T22208] fuse: Bad value for 'group_id' [ 835.843587][T22232] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4889'. [ 836.990456][T22253] fuse: Bad value for 'group_id' [ 837.010143][T22253] fuse: Bad value for 'group_id' [ 837.377320][T22263] block device autoloading is deprecated and will be removed. [ 839.278778][T22267] loop2: detected capacity change from 0 to 128 [ 839.288774][T22272] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4906'. [ 839.336514][T22267] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 839.387742][T22267] ext4 filesystem being mounted at /480/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 839.437936][ T1150] Bluetooth: hci4: Frame reassembly failed (-84) [ 839.545961][T22263] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 839.646001][T11637] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 839.655207][T22263] device-mapper: ioctl: error adding target to table [ 840.671918][T22289] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4913'. [ 841.543781][ T5642] Bluetooth: hci4: command 0x1003 tx timeout [ 841.819925][ T5648] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 842.941549][T22316] fuse: Invalid rootmode [ 843.056944][T22318] loop8: detected capacity change from 0 to 256 [ 843.332116][T22318] vfat: Deprecated parameter 'posix' [ 843.356656][T22318] FAT-fs: "posix" option is obsolete, not supported now [ 846.970377][T22345] infiniband syz2: set active [ 846.982054][T22345] infiniband syz2: added bond_slave_0 [ 846.989349][T22345] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 846.991450][T22345] infiniband syz2: Couldn't open port 1 [ 847.007268][T22345] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 847.022354][T22345] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 847.041307][T22345] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 847.103969][T22345] RDS/IB: syz2: added [ 847.108027][T22345] smc: adding ib device syz2 with port count 1 [ 847.114311][T22345] smc: ib device syz2 port 1 has no pnetid [ 847.704502][T22349] loop1: detected capacity change from 0 to 2048 [ 848.696637][T22349] EXT4-fs warning (device loop1): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop1. [ 849.418021][T22368] fuse: Invalid rootmode [ 850.260651][T22384] md: could not open device unknown-block(1,0). [ 851.787854][T22409] netlink: 'syz.7.4952': attribute type 13 has an invalid length. [ 851.822688][T22409] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4952'. [ 851.871819][T22398] syzkaller0: entered promiscuous mode [ 851.923266][T22398] syzkaller0: entered allmulticast mode [ 854.642456][T22454] loop9: detected capacity change from 0 to 8 [ 854.654486][T22453] netlink: 'syz.2.4969': attribute type 13 has an invalid length. [ 855.663050][T22425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 856.540671][T22471] loop8: detected capacity change from 0 to 256 [ 856.586472][T22471] vfat: Unknown parameter 'nnonumtail' [ 856.628471][T22473] fuse: Bad value for 'fd' [ 858.582870][T22487] fuse: Bad value for 'rootmode' [ 858.844983][T22493] loop7: detected capacity change from 0 to 512 [ 858.865320][ T5794] IPVS: starting estimator thread 0... [ 858.922189][T22495] tipc: Enabling of bearer rejected, already enabled [ 859.470353][T22493] ext4: Unknown parameter 'smackfsfloor' [ 859.499733][T22494] IPVS: using max 24 ests per chain, 57600 per kthread [ 859.808711][T22507] netlink: 'syz.1.4986': attribute type 13 has an invalid length. [ 862.507879][T22539] fuse: Bad value for 'fd' [ 862.735021][T22543] geneve2: entered promiscuous mode [ 863.043519][T22549] macsec1: entered allmulticast mode [ 863.063169][T22554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4994'. [ 863.090101][T22549] veth1_macvtap: entered allmulticast mode [ 863.494808][T22554] veth1_macvtap (unregistering): left allmulticast mode [ 864.214006][ T5794] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 864.389978][ T5794] usb 9-1: Using ep0 maxpacket: 16 [ 864.429847][ T5794] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 864.491492][ T5794] usb 9-1: config 0 has no interface number 0 [ 864.532103][ T5794] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 864.587089][ T5794] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 864.875570][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5002'. [ 865.010473][ T5794] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 865.105480][ T5794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.114174][ T5794] usb 9-1: Product: syz [ 865.118527][ T5794] usb 9-1: Manufacturer: syz [ 865.141742][ T5794] usb 9-1: SerialNumber: syz [ 865.173366][ T5794] usb 9-1: config 0 descriptor?? [ 865.188281][T22581] geneve2: entered promiscuous mode [ 865.206957][T22568] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 865.240947][T22568] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 865.535607][T22568] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 865.586930][T22568] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 865.847124][ T5794] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 865.915320][ T5794] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 865.968439][ T5794] asix 9-1:0.251: probe with driver asix failed with error -5 [ 868.424749][ T24] usb 9-1: USB disconnect, device number 40 [ 868.640414][T22621] fuse: Unknown parameter 'grou00000000000000000000' [ 869.202160][T22637] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 869.468593][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.475151][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.509593][T22637] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 870.305628][T22648] syzkaller0: entered promiscuous mode [ 870.347793][T22648] syzkaller0: entered allmulticast mode [ 870.506065][T22653] tipc: Enabling of bearer rejected, already enabled [ 870.928217][T22664] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5034'. [ 871.103691][T22668] fuse: Unknown parameter 'grou00000000000000000000' [ 872.208153][T22689] tipc: Started in network mode [ 872.220687][T22689] tipc: Node identity 7e9dafb87db6, cluster identity 4711 [ 872.242269][T22689] tipc: Enabled bearer , priority 0 [ 872.282061][T22688] tipc: Disabling bearer [ 874.406177][T22721] loop2: detected capacity change from 0 to 256 [ 874.485906][T22721] vfat: Unknown parameter 'obj_user' [ 875.592531][ T5648] Bluetooth: hci3: command 0x0406 tx timeout [ 875.831303][T22741] device-mapper: table: 248:0: zero-length target [ 875.927690][T22741] device-mapper: ioctl: error adding target to table [ 876.137693][T22732] loop7: detected capacity change from 0 to 8192 [ 876.416772][T22732] loop7: p1 p2 p3 p4[EZD] [ 876.485125][T22732] loop7: partition table partially beyond EOD, truncated [ 876.596426][T22732] loop7: p1 start 16384 is beyond EOD, truncated [ 876.603878][T22732] loop7: p2 size 150994944 extends beyond EOD, truncated [ 876.709945][T22732] loop7: p3 start 67108864 is beyond EOD, truncated [ 876.733687][T22756] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5070'. [ 876.734619][T22732] loop7: p4 size 33555584 extends beyond EOD, truncated [ 876.897895][T22760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5070'. [ 877.136501][T22763] syzkaller0: Caught tx_queue_len zero misconfig [ 877.179288][ T5768] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 877.472633][ T5768] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.641960][ T5768] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 877.728305][ T5768] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.831297][ T5768] usb 9-1: config 0 descriptor?? [ 877.885261][ T5768] pwc: Askey VC010 type 2 USB webcam detected. [ 877.966840][ T6465] udevd[6465]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 877.992481][ T6535] udevd[6535]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 878.078311][ T5768] pwc: send_video_command error -71 [ 878.098557][ T5768] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 878.128636][ T5768] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 878.191821][ T5768] usb 9-1: USB disconnect, device number 41 [ 878.440069][T22784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5081'. [ 878.457957][T22785] loop9: detected capacity change from 0 to 512 [ 878.590141][T22785] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 878.686976][T22785] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 879.150953][T22795] overlayfs: missing 'lowerdir' [ 879.806156][T22793] infiniband syz0: set active [ 879.810929][T22793] infiniband syz0: added team0 [ 879.844985][T22793] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 879.847090][T22793] infiniband syz0: Couldn't open port 1 [ 879.861439][T22793] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 879.862641][T22805] netlink: 'syz.2.5085': attribute type 36 has an invalid length. [ 879.878132][T22793] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 879.878216][T22793] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 879.936082][T22793] RDS/IB: syz0: added [ 879.940195][T22793] smc: adding ib device syz0 with port count 1 [ 879.946352][T22793] smc: ib device syz0 port 1 has no pnetid [ 880.180736][T21342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.257142][T22797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 882.417090][T22823] syzkaller0: left promiscuous mode [ 882.503230][T22823] syzkaller0: left allmulticast mode [ 882.979925][T22834] loop7: detected capacity change from 0 to 1024 [ 883.224249][T22834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 883.788464][T22854] EXT4-fs error (device loop7): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.7.5095: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 883.814425][T22854] EXT4-fs error (device loop7) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 884.404508][T22873] gadgetfs: bound to dummy_udc driver [ 884.650148][ T5901] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 884.687679][ C1] gadgetfs: connected [ 884.692160][ T5901] gadgetfs: disconnected [ 884.789134][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 886.845853][T22915] loop9: detected capacity change from 0 to 256 [ 886.898907][T22915] FAT-fs (loop9): data area starts beyond volume (274 > 64) [ 886.954497][T22915] FAT-fs (loop9): Can't find a valid FAT filesystem [ 887.731901][T20702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.160290][T22933] gadgetfs: bound to dummy_udc driver [ 888.883450][T22948] loop9: detected capacity change from 0 to 512 [ 888.917207][T22894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 889.706435][T22948] EXT4-fs (loop9): Test dummy encryption mode enabled [ 889.751835][T22948] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.5120: inode has both inline data and extents flags [ 889.765623][T22948] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 889.785638][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 889.801272][ C1] EXT4-fs (loop9): initial error at time 1785987858: ext4_orphan_get:1399: inode 15 [ 889.810698][ C1] EXT4-fs (loop9): last error at time 1785987858: ext4_orphan_get:1399: inode 15 [ 889.869266][T22948] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.5120: couldn't read orphan inode 15 (err -117) [ 889.881295][T22948] loop9: lost filesystem error report for type 5 error -117 [ 889.890027][T22948] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 889.966605][T22943] EXT4-fs warning (device loop9): ext4_empty_dir:3094: inode #2: comm syz.9.5120: directory missing '.' [ 890.177511][T22946] xt_CT: No such helper "netbios-ns" [ 890.868445][T21342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.241450][T22972] loop8: detected capacity change from 0 to 1024 [ 891.344365][T22972] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.423703][T22982] loop9: detected capacity change from 0 to 256 [ 891.431516][T22982] vfat: Unknown parameter 'nnonumtail' [ 891.935355][T22984] EXT4-fs error (device loop8): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.8.5130: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 891.976681][T22984] EXT4-fs error (device loop8) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 892.069296][ T5642] Bluetooth: hci0: command 0x0406 tx timeout [ 893.579723][T23007] xt_CT: No such helper "netbios-ns" [ 894.574365][T11507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.782701][T23027] loop8: detected capacity change from 0 to 256 [ 894.787607][T23018] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 894.809610][T23027] vfat: Unknown parameter 'nnonumtail' [ 894.843548][T23018] device-mapper: ioctl: error adding target to table [ 895.341602][T23041] loop1: detected capacity change from 0 to 256 [ 895.436064][T22993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 895.454120][T23038] syzkaller0: entered promiscuous mode [ 895.470147][T23038] syzkaller0: entered allmulticast mode [ 895.520484][ T24] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 895.711563][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 895.735825][ T24] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 895.774857][ T24] usb 9-1: config 0 has no interface number 0 [ 895.812099][ T24] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 895.865013][ T24] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 896.113217][ T24] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 896.127885][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.149765][ T24] usb 9-1: Product: syz [ 896.155303][ T24] usb 9-1: Manufacturer: syz [ 896.160317][ T24] usb 9-1: SerialNumber: syz [ 896.671602][ T24] usb 9-1: config 0 descriptor?? [ 896.677498][T23039] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 896.750129][T23039] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 897.087123][T23039] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 897.141516][T23039] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 897.228594][T23061] loop9: detected capacity change from 0 to 1024 [ 897.341527][T23061] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.418583][ T24] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 897.440653][ T24] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 897.476952][ T24] asix 9-1:0.251: probe with driver asix failed with error -5 [ 898.091478][T23082] EXT4-fs error (device loop9): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.9.5161: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 898.115819][T23082] EXT4-fs error (device loop9) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 898.585384][T23089] ip_tables: iptables: counters copy to user failed while replacing table [ 898.736010][ T5794] usb 9-1: USB disconnect, device number 42 [ 900.174016][T21342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.506248][T23113] loop9: detected capacity change from 0 to 2048 [ 900.585614][T23113] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.627587][T23113] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 901.337602][T23123] loop1: detected capacity change from 0 to 512 [ 901.369845][T23123] EXT4-fs (loop1): Test dummy encryption mode enabled [ 901.759826][T23123] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.5171: inode has both inline data and extents flags [ 901.776444][T23123] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 901.777198][T23123] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.5171: couldn't read orphan inode 15 (err -117) [ 901.787882][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 901.787905][ C0] EXT4-fs (loop1): initial error at time 1785987870: ext4_orphan_get:1399: inode 15 [ 901.787944][ C0] EXT4-fs (loop1): last error at time 1785987870: ext4_orphan_get:1399: inode 15 [ 901.857158][T23123] loop1: lost filesystem error report for type 5 error -117 [ 901.871668][T23123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.913508][T23123] EXT4-fs warning (device loop1): ext4_empty_dir:3094: inode #2: comm syz.1.5171: directory missing '.' [ 902.135604][T23122] xt_CT: No such helper "netbios-ns" [ 902.159658][T21342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.887125][T23133] loop9: detected capacity change from 0 to 256 [ 903.903839][T23133] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 903.922252][T23133] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 903.965967][T23133] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 903.980027][T23133] exFAT-fs (loop9): failed to load alloc-bitmap [ 903.987218][T23133] exFAT-fs (loop9): failed to recognize exfat type [ 904.339842][T23089] tipc: New replicast peer: 255.255.255.255 [ 904.360415][T23089] tipc: Enabled bearer , priority 10 [ 905.076191][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.453190][T23153] netlink: 'syz.0.5183': attribute type 16 has an invalid length. [ 905.481952][T23152] loop7: detected capacity change from 0 to 1024 [ 905.512856][T23153] netlink: 'syz.0.5183': attribute type 17 has an invalid length. [ 905.556836][T23153] netlink: 'syz.0.5183': attribute type 27 has an invalid length. [ 905.568078][T23152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 906.146768][T23165] EXT4-fs error (device loop7): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.7.5182: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 906.168660][T23165] EXT4-fs error (device loop7) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 906.461662][T23160] loop8: detected capacity change from 0 to 2048 [ 906.567211][T23160] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 906.609273][T23160] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.766453][T23188] loop9: detected capacity change from 0 to 512 [ 907.779524][T23188] EXT4-fs (loop9): Test dummy encryption mode enabled [ 908.012498][T23188] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.5191: inode has both inline data and extents flags [ 908.026171][T23188] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 908.028511][T23188] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.5191: couldn't read orphan inode 15 (err -117) [ 908.037759][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 908.037783][ C1] EXT4-fs (loop9): initial error at time 1785987877: ext4_orphan_get:1399: inode 15 [ 908.037823][ C1] EXT4-fs (loop9): last error at time 1785987877: ext4_orphan_get:1399: inode 15 [ 908.076549][T23188] loop9: lost filesystem error report for type 5 error -117 [ 908.091417][T23188] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 908.148440][T23188] EXT4-fs warning (device loop9): ext4_empty_dir:3094: inode #2: comm syz.9.5191: directory missing '.' [ 908.316199][T23186] xt_CT: No such helper "netbios-ns" [ 908.332649][T11507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.186804][T21342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.286705][T23197] loop8: detected capacity change from 0 to 4096 [ 909.401581][T23197] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 909.548379][T23197] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 909.740360][T23214] syzkaller0: entered promiscuous mode [ 909.793597][T23214] syzkaller0: entered allmulticast mode [ 910.583019][T11507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.612521][T23234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5210'. [ 911.957148][T23243] loop9: detected capacity change from 0 to 512 [ 911.973930][T23243] EXT4-fs (loop9): Test dummy encryption mode enabled [ 912.055385][T23243] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.5211: inode has both inline data and extents flags [ 912.068740][T23243] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 912.072767][T23243] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.5211: couldn't read orphan inode 15 (err -117) [ 912.082020][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 912.082046][ C1] EXT4-fs (loop9): initial error at time 1785987881: ext4_orphan_get:1399: inode 15 [ 912.082086][ C1] EXT4-fs (loop9): last error at time 1785987881: ext4_orphan_get:1399: inode 15 [ 912.119501][T23243] loop9: lost filesystem error report for type 5 error -117 [ 912.143283][T23243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 912.272614][T23245] EXT4-fs warning (device loop9): ext4_empty_dir:3094: inode #2: comm syz.9.5211: directory missing '.' [ 912.656042][T23241] xt_CT: No such helper "netbios-ns" [ 912.865984][T20702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.666951][T21342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.161505][T23268] loop9: detected capacity change from 0 to 16 [ 914.281963][T23269] loop2: detected capacity change from 0 to 128 [ 914.471504][T23269] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 914.504441][T23269] ext4 filesystem being mounted at /537/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 914.872082][T23268] erofs (device loop9): compressed inode (nid 36) is invalid in a plain filesystem [ 915.027200][T23275] loop7: detected capacity change from 0 to 2048 [ 915.112278][T23273] loop1: detected capacity change from 0 to 4096 [ 915.154344][T23275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.205011][T23275] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 916.214498][T23273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 916.323698][T20702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.664462][T23273] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.671710][T23273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.679301][T23273] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.686444][T23273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.148451][T23291] loop9: detected capacity change from 0 to 512 [ 917.207863][T23292] loop7: detected capacity change from 0 to 1024 [ 917.222626][T23291] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 917.293525][T23292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 917.338444][T23291] EXT4-fs (loop9): 1 truncate cleaned up [ 917.391497][T23291] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.746393][T23273] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 917.845580][T21342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.187206][T23273] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 919.054919][T23310] EXT4-fs error (device loop7): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.7.5227: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 919.095672][T23311] loop8: detected capacity change from 0 to 512 [ 919.123658][T23311] EXT4-fs (loop8): Test dummy encryption mode enabled [ 919.138987][T23310] EXT4-fs error (device loop7) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 919.199054][T23311] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.5232: inode has both inline data and extents flags [ 919.212490][T23311] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 919.218836][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 919.234413][ C1] EXT4-fs (loop8): initial error at time 1785987888: ext4_orphan_get:1399: inode 15 [ 919.243839][ C1] EXT4-fs (loop8): last error at time 1785987888: ext4_orphan_get:1399: inode 15 [ 919.257323][T23311] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.5232: couldn't read orphan inode 15 (err -117) [ 919.269540][T23311] loop8: lost filesystem error report for type 5 error -117 [ 919.292553][T23311] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.338622][T23311] EXT4-fs warning (device loop8): ext4_empty_dir:3094: inode #2: comm syz.8.5232: directory missing '.' [ 919.763649][T11637] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 919.785834][T23309] xt_CT: No such helper "netbios-ns" [ 920.163297][T23318] loop2: detected capacity change from 0 to 512 [ 920.668430][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.679515][T11507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.711300][T23318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.747725][T23318] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.816861][T20702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.965819][ T30] audit: type=1800 audit(1785987890.037:397): pid=23318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5234" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 921.030808][T23318] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 921.243348][T23329] loop1: detected capacity change from 0 to 512 [ 921.311834][T23329] EXT4-fs: Ignoring removed mblk_io_submit option [ 921.389241][T23329] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 921.465170][T23329] EXT4-fs (loop1): 1 truncate cleaned up [ 921.497672][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.566519][T23329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.047082][T23329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.646701][T23348] loop9: detected capacity change from 0 to 128 [ 922.738690][T23348] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 922.788934][T23348] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 923.955541][T23325] loop8: detected capacity change from 0 to 40427 [ 924.015048][T23325] F2FS-fs (loop8): invalid crc value [ 924.052656][T23325] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-4) [ 924.632545][T23356] tipc: Failed to remove unknown binding: 66,0,0/0:4047758065/4047758066 [ 924.666121][T23359] tipc: Failed to remove unknown binding: 66,0,0/0:1536332235/1536332237 [ 924.702007][T23356] tipc: Failed to remove unknown binding: 66,0,0/0:4047758065/4047758066 [ 925.416961][T23366] loop8: detected capacity change from 0 to 1024 [ 925.528090][T23366] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 925.857956][T23372] loop7: detected capacity change from 0 to 1024 [ 925.938762][T11507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.963879][T23372] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.689975][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 926.897518][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.972974][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 927.037792][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.111617][ T24] usb 2-1: config 0 descriptor?? [ 927.173205][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 927.393824][ T24] pwc: send_video_command error -71 [ 927.432683][ T24] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 927.475006][ T24] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 927.578370][T23382] EXT4-fs error (device loop7): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.7.5249: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 927.604265][T23382] EXT4-fs error (device loop7) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 927.640893][ T24] usb 2-1: USB disconnect, device number 28 [ 927.673777][T21342] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 928.019899][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 928.226932][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.276598][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 928.525458][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.545105][ T24] usb 2-1: config 0 descriptor?? [ 928.568013][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 929.205593][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 929.245356][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 929.284153][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 929.331584][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 929.352108][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 929.373559][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 929.393120][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 929.410946][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 929.442195][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 929.465400][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 929.502210][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 929.539972][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 929.873441][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 930.839191][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 930.859309][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 930.878285][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.886085][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.870331][ T24] pwc: Registered as video103. [ 932.848369][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 932.879484][ T24] usb 2-1: USB disconnect, device number 29 [ 934.313061][T23409] fuse: Unknown parameter 'fd0x0000000000000003' [ 935.760927][T20702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.850552][T23457] fuse: Unknown parameter 'fd0x0000000000000003' [ 942.217959][T23459] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5281'. [ 942.264456][T23459] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5281'. [ 942.775326][T23461] loop8: detected capacity change from 0 to 512 [ 942.812663][T23461] EXT4-fs: inline encryption not supported [ 942.851055][T23461] EXT4-fs (loop8): Test dummy encryption mode enabled [ 942.894488][T23461] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 942.990463][T23461] EXT4-fs (loop8): 1 truncate cleaned up [ 943.107474][T23466] loop9: detected capacity change from 0 to 1024 [ 943.116920][T23461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.240290][T23466] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.294826][T23461] EXT4-fs (loop8): Online defrag not supported for encrypted files [ 943.478471][T11507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.280305][T23499] binder: 23498:23499 ioctl 40046210 0 returned -14 [ 945.314309][T23500] EXT4-fs error (device loop9): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.9.5284: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 945.341940][T23500] EXT4-fs error (device loop9) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 948.597386][T21342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.031973][T23530] syzkaller0: entered promiscuous mode [ 949.055684][T23530] syzkaller0: entered allmulticast mode [ 950.514053][T23550] loop2: detected capacity change from 0 to 512 [ 950.595474][T23550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.881390][T23550] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5314: bg 0: block 67: padding at end of block bitmap is not set [ 951.004967][T23550] EXT4-fs (loop2): Remounting filesystem read-only [ 951.025087][T23560] loop7: detected capacity change from 0 to 1024 [ 951.250803][T23560] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.423629][T11637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.780546][T23569] xt_hashlimit: size too large, truncated to 1048576 [ 952.652264][T23583] EXT4-fs error (device loop7): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.7.5317: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 952.702934][T23590] loop2: detected capacity change from 0 to 512 [ 952.805590][T23590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.888197][T23590] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.918752][T23583] EXT4-fs error (device loop7) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 953.440258][T11637] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 953.499763][T11637] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 953.541221][ T5900] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 953.605327][T23610] futex_wake_op: syz.1.5331 tries to shift op by 144; fix this program [ 953.747912][ T5900] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 953.818736][ T5900] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 953.896189][ T5900] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 953.930281][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 953.968027][ T5900] usb 10-1: SerialNumber: syz [ 954.068435][T23605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.228389][T23605] syz.2.5327 (23605) used greatest stack depth: 18432 bytes left [ 954.255353][ T5900] usb 10-1: 0:2 : does not exist [ 954.361147][T23617] syzkaller0: entered promiscuous mode [ 954.388590][T23617] syzkaller0: entered allmulticast mode [ 954.457536][ T5900] usb 10-1: USB disconnect, device number 2 [ 954.653867][ T6465] udevd[6465]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 955.240998][T20702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.520900][T23629] xt_hashlimit: size too large, truncated to 1048576 [ 955.521418][T23625] loop9: detected capacity change from 0 to 512 [ 955.676450][T23625] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 955.723663][T23625] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.752394][T23625] overlayfs: missing 'lowerdir' [ 955.962298][T21342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.135961][ T5648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 956.148681][ T5648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 956.160616][ T5648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 956.185435][ T5648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 956.197641][ T5648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 956.315509][T23645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5349'. [ 956.462133][T23645] hsr_slave_1 (unregistering): left promiscuous mode [ 956.745616][T23655] loop8: detected capacity change from 0 to 1024 [ 956.775094][T23655] EXT4-fs: inline encryption not supported [ 956.797979][T23655] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 956.833803][T23657] loop1: detected capacity change from 0 to 1024 [ 956.944576][T23657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.990640][T23655] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 2: comm syz.8.5351: lblock 2 mapped to illegal pblock 2 (length 1) [ 957.081608][T23655] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 957.088822][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 957.098897][T23655] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 957.100386][ C0] EXT4-fs (loop8): initial error at time 1785987926: ext4_map_blocks:791: inode 3: block 2 [ 957.121260][T23655] EXT4-fs error (device loop8): __ext4_get_inode_loc:4886: comm syz.8.5351: Invalid inode table block 1 in block_group 0 [ 957.126521][ C0] EXT4-fs (loop8): last error at time 1785987926: ext4_map_blocks:791: inode 3: block 2 [ 957.190796][T23655] loop8: lost filesystem error report for type 5 error -117 [ 957.210919][T23655] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 957.263972][T23655] loop8: lost filesystem error report for type 5 error -117 [ 957.277272][T23655] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #3: comm syz.8.5351: mark_inode_dirty error [ 957.366865][T23655] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 957.367650][T23655] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 957.476914][T23655] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.5351: Failed to acquire dquot type 0 [ 957.561448][T23655] loop8: lost filesystem error report for type 5 error -117 [ 957.567408][T23655] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 957.589315][T23655] loop8: lost filesystem error report for type 5 error -117 [ 957.589632][T23655] EXT4-fs error (device loop8): ext4_evict_inode:267: inode #11: comm syz.8.5351: mark_inode_dirty error [ 957.672837][T23655] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 957.714484][T23655] EXT4-fs warning (device loop8): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 957.764282][T23676] loop7: detected capacity change from 0 to 16 [ 957.820653][T23655] EXT4-fs (loop8): 1 orphan inode deleted [ 957.846871][T23676] erofs (device loop7): mounted with root inode @ nid 36. [ 957.851394][T23655] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.869145][T19698] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 957.897754][T19698] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 957.906075][T19698] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 957.927450][T19698] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 957.997601][T23655] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm syz.8.5351: lblock 1 mapped to illegal pblock 1 (length 1) [ 958.128550][T23655] Quota error (device loop8): find_tree_dqentry: Can't read quota tree block 1 [ 958.174726][T23655] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 60928 [ 958.224339][T23655] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.5351: Failed to acquire dquot type 0 [ 958.246523][T23680] 9p: Bad value for 'wfdno' [ 958.262230][T23683] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5359'. [ 958.311217][ T5642] Bluetooth: hci4: command tx timeout [ 958.436629][T23684] EXT4-fs error (device loop1): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.1.5352: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 958.458020][T11507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.487273][T19698] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 958.495273][T23684] EXT4-fs error (device loop1) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 958.537000][T23686] loop7: detected capacity change from 0 to 512 [ 958.573114][T23686] EXT4-fs: Ignoring removed bh option [ 958.603443][T19698] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 958.603831][T19698] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 958.614133][T23686] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.5362: corrupted in-inode xattr: e_value size too large [ 958.614179][T23686] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 958.614565][T23686] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.5362: couldn't read orphan inode 15 (err -117) [ 958.622814][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 958.622835][ C1] EXT4-fs (loop7): initial error at time 1785987927: ext4_iget_extra_inode:5180: inode 15 [ 958.622875][ C1] EXT4-fs (loop7): last error at time 1785987927: ext4_iget_extra_inode:5180: inode 15 [ 958.679895][T19698] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 958.715489][T23686] loop7: lost filesystem error report for type 5 error -117 [ 958.762694][T23686] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.817810][T19698] loop8: lost filesystem error report for type 5 error -117 [ 958.824982][T11507] EXT4-fs error (device loop8): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 958.950735][T11507] loop8: lost filesystem error report for type 5 error -117 [ 958.988147][T11507] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 959.056542][T11507] loop8: lost filesystem error report for type 5 error -117 [ 959.056837][T11507] EXT4-fs error (device loop8): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 959.112637][T11507] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 959.136385][T20702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.391722][ T5642] Bluetooth: hci4: command tx timeout [ 960.790101][T23709] xt_hashlimit: size too large, truncated to 1048576 [ 961.077306][T23642] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.101128][T23642] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.125925][T23642] bridge_slave_0: entered allmulticast mode [ 961.160253][T23642] bridge_slave_0: entered promiscuous mode [ 961.206912][T23642] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.237692][T23642] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.265632][T23642] bridge_slave_1: entered allmulticast mode [ 961.293073][T23642] bridge_slave_1: entered promiscuous mode [ 961.499627][T23642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.583289][T23642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.874926][T23642] team0: Port device team_slave_0 added [ 961.918010][T23642] team0: Port device team_slave_1 added [ 962.133863][T12759] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.188441][T23727] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5371'. [ 962.217245][T23642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.247271][T23642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.336456][T23730] 9p: Bad value for 'wfdno' [ 962.342281][T23642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.375891][T23642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.398545][T23642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.478422][ T5642] Bluetooth: hci4: command tx timeout [ 962.582438][T23642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.865359][T23642] hsr_slave_0: entered promiscuous mode [ 962.918101][T23642] hsr_slave_1: entered promiscuous mode [ 962.957412][T23642] debugfs: 'hsr0' already exists in 'hsr' [ 962.996153][T23642] Cannot create hsr debugfs directory [ 963.804959][T23750] loop1: detected capacity change from 0 to 512 [ 963.856276][T23752] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5381'. [ 963.883685][T23750] EXT4-fs error (device loop1): ext4_get_journal_inode:5900: comm syz.1.5372: inode #2147418112: comm syz.1.5372: iget: illegal inode # [ 963.975143][T23750] loop1: lost filesystem error report for type 5 error -117 [ 963.975499][T23750] EXT4-fs (loop1): no journal found [ 963.982927][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 963.982950][ C1] EXT4-fs (loop1): initial error at time 1785987933: ext4_get_journal_inode:5900 [ 963.982981][ C1] EXT4-fs (loop1): last error at time 1785987933: ext4_get_journal_inode:5900 [ 964.099256][T23750] EXT4-fs (loop1): can't get journal size [ 964.164109][T23750] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 964.216204][T23750] EXT4-fs (loop1): failed to initialize system zone (-117) [ 964.266860][T23750] EXT4-fs (loop1): mount failed [ 964.549925][ T5642] Bluetooth: hci4: command tx timeout [ 964.675714][T23764] loop8: detected capacity change from 0 to 128 [ 964.787487][T23764] /dev/loop8: Can't open blockdev [ 964.926179][T23769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5386'. [ 967.253869][T23804] loop8: detected capacity change from 0 to 16 [ 967.344272][T23804] erofs (device loop8): mounted with root inode @ nid 36. [ 968.503207][T23804] syz.8.5394: attempt to access beyond end of device [ 968.503207][T23804] loop8: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 970.256946][T23812] loop1: detected capacity change from 0 to 128 [ 970.350356][T23812] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 970.364110][T23812] ext4 filesystem being mounted at /490/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 970.605828][T23804] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 970.720991][T23804] erofs (device loop8): read error -117 @ 0 of nid 89 [ 970.820677][ T30] audit: type=1800 audit(1785987939.907:398): pid=23804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5394" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 974.832943][T23824] loop7: detected capacity change from 0 to 128 [ 974.892017][T12759] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 974.917770][T23824] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 974.933461][T23824] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 975.704131][T23838] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5402'. [ 975.760333][T23642] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 975.837761][T23642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 975.905638][T23642] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 976.055842][T23642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 976.099703][T23642] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 976.192656][T23642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 976.274767][T23642] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 976.367786][T23642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 976.821803][T23855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.996006][T23855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.120618][T23855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.524274][T23866] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 977.701140][T23855] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.079141][T20702] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 978.412736][T12674] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.488540][T12674] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.632701][T22348] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.694929][T22348] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.835995][T23642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.036791][T23642] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.148818][T12674] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.156061][T12674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.336198][T12674] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.343449][T12674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.703964][T23894] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5415'. [ 980.092990][T23897] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 982.462869][T23926] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.706123][T23926] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.910663][T23926] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.027889][T23926] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.137580][T23642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.251750][ T1150] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.357621][ T3323] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.413748][ T3323] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.476569][T22348] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.620135][T23962] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5429'. [ 985.892243][T23642] veth0_vlan: entered promiscuous mode [ 986.009246][T23642] veth1_vlan: entered promiscuous mode [ 986.243454][T23642] veth0_macvtap: entered promiscuous mode [ 986.312121][T23642] veth1_macvtap: entered promiscuous mode [ 987.554994][T23642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.637666][T23642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 988.989824][ T8455] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.671160][ T3323] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.831117][ T3323] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.295396][T24010] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.306090][T24010] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.354681][ T1150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.608371][T24012] loop9: detected capacity change from 0 to 512 [ 990.626285][T24010] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.637704][T24010] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.722245][T24012] EXT4-fs: Ignoring removed nobh option [ 990.810817][T24012] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 990.914733][T24012] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 991.036701][T24010] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.047288][T24010] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.077317][T24012] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec119, mo2=0002] [ 991.101434][T22325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.155561][T24012] System zones: 1-12 [ 991.172258][T22325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.198272][T24012] EXT4-fs (loop9): orphan cleanup on readonly fs [ 991.256855][T24012] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.5439: Block bitmap for bg 0 marked uninitialized [ 991.356883][T24012] loop9: lost filesystem error report for type 5 error -117 [ 991.359484][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 991.373306][ C1] EXT4-fs (loop9): initial error at time 1785987960: ext4_read_block_bitmap_nowait:517 [ 991.382975][ C1] EXT4-fs (loop9): last error at time 1785987960: ext4_read_block_bitmap_nowait:517 [ 991.459801][T24012] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.5439: Block bitmap for bg 0 marked uninitialized [ 991.483578][T24010] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.496356][T24010] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.612969][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.623075][T24012] loop9: lost filesystem error report for type 5 error -117 [ 991.656776][T24012] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.5439: Block bitmap for bg 0 marked uninitialized [ 991.884819][T12658] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.935221][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.942627][T12658] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.994367][T24012] loop9: lost filesystem error report for type 5 error -117 [ 991.995134][T24012] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.5439: Block bitmap for bg 0 marked uninitialized [ 992.061847][T12658] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.131923][T12658] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.176895][T24012] loop9: lost filesystem error report for type 5 error -117 [ 992.181133][T24012] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.5439: Block bitmap for bg 0 marked uninitialized [ 992.210674][T12658] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.254215][T12658] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.308008][T24012] loop9: lost filesystem error report for type 5 error -117 [ 992.310764][T12674] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.330330][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.336702][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.355357][T24012] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.5439: Block bitmap for bg 0 marked uninitialized [ 992.403879][T12674] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.430507][T24012] loop9: lost filesystem error report for type 5 error -117 [ 992.434123][T24012] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 992.540638][T24012] EXT4-fs (loop9): 1 truncate cleaned up [ 992.576204][T24012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 993.055697][T24032] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5442'. [ 993.099688][T21342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.560651][T24042] loop8: detected capacity change from 0 to 256 [ 993.597181][T24042] vfat: Unknown parameter 'nnonumtail' [ 994.445896][T24059] loop8: detected capacity change from 0 to 256 [ 995.919151][T24079] loop8: detected capacity change from 0 to 1024 [ 996.052061][T24079] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 996.139962][T24079] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 996.294818][T24079] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 996.603638][T24079] EXT4-fs (loop8): filesystem has both journal inode and journal device! [ 997.582649][T24096] loop8: detected capacity change from 0 to 1024 [ 997.699290][T24096] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 998.559369][ T5648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 998.573376][ T5648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 998.584444][ T5648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 998.596269][ T5648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 998.608523][ T5648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 998.866161][T24111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5462'. [ 999.926785][T24122] loop6: detected capacity change from 0 to 1024 [ 1000.083148][T24122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.283883][T11507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.996244][T24130] EXT4-fs error (device loop6): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.6.5463: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 1001.020903][ T5648] Bluetooth: hci5: command tx timeout [ 1001.048024][T24130] EXT4-fs error (device loop6) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 1001.371033][T23642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.565235][T24137] loop7: detected capacity change from 0 to 512 [ 1001.622809][T24137] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1001.686527][T24137] EXT4-fs (loop7): invalid inodes per group: 4294967295 [ 1001.686527][T24137] [ 1002.781934][ T3323] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.035322][T24169] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1003.109098][ T5648] Bluetooth: hci5: command tx timeout [ 1003.242888][T24171] loop8: detected capacity change from 0 to 1024 [ 1003.405480][T24171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.477991][T24181] loop9: detected capacity change from 0 to 1024 [ 1003.767253][ T3323] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.846561][T24181] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.979535][T21342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.991988][ T3323] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.189133][ T5648] Bluetooth: hci5: command tx timeout [ 1005.363439][ T3323] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.464009][T24203] netlink: 'syz.9.5481': attribute type 10 has an invalid length. [ 1005.978556][T11507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.291650][T24214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5485'. [ 1007.000128][ T3323] bridge_slave_1: left allmulticast mode [ 1007.011396][T24225] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1007.054055][ T3323] bridge_slave_1: left promiscuous mode [ 1007.094202][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.211947][ T3323] bridge_slave_0: left allmulticast mode [ 1007.257477][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.269406][ T5648] Bluetooth: hci5: command tx timeout [ 1007.372698][ T5768] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1007.552014][ T5768] usb 7-1: Using ep0 maxpacket: 16 [ 1007.599690][ T5768] usb 7-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 1007.654901][ T5768] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.720340][ T5768] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 1007.777723][ T5768] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1007.836182][ T5768] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1007.925644][ T5768] usb 7-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 1007.971582][ T5768] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.032570][ T5768] usb 7-1: Product: syz [ 1008.071102][ T5768] usb 7-1: Manufacturer: syz [ 1008.092043][ T5768] usb 7-1: SerialNumber: syz [ 1008.183160][T24227] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1008.199620][T24241] loop9: detected capacity change from 0 to 1024 [ 1008.419549][T24241] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.507096][ T5768] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1008.555505][ T5768] usb 7-1: MIDIStreaming interface descriptor not found [ 1008.610080][ T3323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.863655][ T3323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.021568][ T3323] bond0 (unregistering): Released all slaves [ 1009.336286][ T5768] usb 7-1: USB disconnect, device number 2 [ 1009.448092][ T3323] tipc: Disabling bearer [ 1009.520516][ T3323] tipc: Disabling bearer [ 1009.554561][ T30] audit: type=1800 audit(1785987978.637:399): pid=24247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5494" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 1009.613157][ T3323] tipc: Left network mode [ 1009.680398][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.686941][T24247] evm: overlay not supported [ 1011.047644][T21342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.054892][T24278] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5501'. [ 1011.234884][T24283] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5501'. [ 1011.245707][T24284] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1011.549428][T24289] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5499'. [ 1011.592937][T24285] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5501'. [ 1011.795065][T24290] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 1012.262257][T24301] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5506'. [ 1012.313965][T24301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1013.205321][T24320] netlink: 'syz.6.5514': attribute type 21 has an invalid length. [ 1013.391672][T24326] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5512'. [ 1013.506894][T24318] netlink: 'syz.8.5512': attribute type 10 has an invalid length. [ 1014.054816][T24332] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1014.173932][ T3323] hsr_slave_0: left promiscuous mode [ 1014.235541][ T3323] hsr_slave_1: left promiscuous mode [ 1014.269358][ T3323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.338375][ T3323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.260557][ T3323] team0 (unregistering): Port device team_slave_1 removed [ 1015.343618][ T3323] team0 (unregistering): Port device team_slave_0 removed [ 1016.542739][T24103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.590161][T24103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.622431][T24103] bridge_slave_0: entered allmulticast mode [ 1016.681700][T24103] bridge_slave_0: entered promiscuous mode [ 1016.717913][T24103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.783336][T24103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.822186][T24103] bridge_slave_1: entered allmulticast mode [ 1016.859743][T24103] bridge_slave_1: entered promiscuous mode [ 1017.071637][ T3323] IPVS: stop unused estimator thread 0... [ 1017.464368][T24374] loop1: detected capacity change from 0 to 128 [ 1017.500513][T24375] loop7: detected capacity change from 0 to 256 [ 1020.373004][T24103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.418792][T24374] EXT4-fs: error -4 creating inode table initialization thread [ 1020.426942][T24374] EXT4-fs (loop1): mount failed [ 1020.903292][T24103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.596616][T24103] team0: Port device team_slave_0 added [ 1021.688720][T24103] team0: Port device team_slave_1 added [ 1021.991673][T24103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.045971][T24103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.214966][T24103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.296391][T24103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.367449][T24103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.561559][T24103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.957415][T24103] hsr_slave_0: entered promiscuous mode [ 1023.005209][T24103] hsr_slave_1: entered promiscuous mode [ 1023.057649][T24103] debugfs: 'hsr0' already exists in 'hsr' [ 1023.106102][T24103] Cannot create hsr debugfs directory [ 1023.516175][T24410] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5538'. [ 1023.586979][T24410] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5538'. [ 1024.225224][T24424] loop8: detected capacity change from 0 to 256 [ 1026.021071][T24442] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5548'. [ 1026.355603][T24445] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5548'. [ 1026.938048][T24454] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 1027.385336][T24481] loop7: detected capacity change from 0 to 256 [ 1028.239647][T24485] netlink: 'syz.1.5561': attribute type 2 has an invalid length. [ 1028.327611][T24485] netlink: 'syz.1.5561': attribute type 1 has an invalid length. [ 1028.388672][T24485] netlink: 'syz.1.5561': attribute type 1 has an invalid length. [ 1028.468688][T24485] netlink: 'syz.1.5561': attribute type 1 has an invalid length. [ 1030.454425][T24514] syz2: rxe_newlink: already configured on bond_slave_0 [ 1031.914625][T24518] syzkaller0: entered promiscuous mode [ 1032.301871][T24518] syzkaller0: entered allmulticast mode [ 1035.995523][T24563] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5585'. [ 1036.097098][T24567] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5585'. [ 1036.110022][T24566] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1038.721512][T24586] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1039.344124][ T30] audit: type=1326 audit(1785988008.427:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.6.5597" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcb19e0d9 code=0x7ffc0000 [ 1039.438952][ T30] audit: type=1326 audit(1785988008.427:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.6.5597" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcb19e0d9 code=0x7ffc0000 [ 1039.535244][ T30] audit: type=1326 audit(1785988008.457:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.6.5597" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fedcb19e0d9 code=0x7ffc0000 [ 1039.604781][ T30] audit: type=1326 audit(1785988008.457:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.6.5597" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcb19e0d9 code=0x7ffc0000 [ 1039.690713][ T30] audit: type=1326 audit(1785988008.457:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.6.5597" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcb19e0d9 code=0x7ffc0000 [ 1039.783252][ T30] audit: type=1326 audit(1785988008.457:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.6.5597" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fedcb19e0d9 code=0x7ffc0000 [ 1039.862626][ T30] audit: type=1326 audit(1785988008.457:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.6.5597" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcb19e0d9 code=0x7ffc0000 [ 1039.941873][ T30] audit: type=1326 audit(1785988008.457:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.6.5597" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcb19e0d9 code=0x7ffc0000 [ 1040.032479][ T30] audit: type=1326 audit(1785988008.457:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.6.5597" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fedcb19e0d9 code=0x7ffc0000 [ 1040.136475][ T30] audit: type=1326 audit(1785988008.457:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.6.5597" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcb19e0d9 code=0x7ffc0000 [ 1040.649107][ T802] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1040.809558][ T802] usb 7-1: Using ep0 maxpacket: 16 [ 1040.820605][ T802] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 1040.834692][ T802] usb 7-1: config 0 has no interface number 0 [ 1040.862943][ T802] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1040.873362][ T802] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1040.910496][ T802] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1040.919801][ T802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.958982][ T802] usb 7-1: Product: syz [ 1040.971007][ T802] usb 7-1: Manufacturer: syz [ 1041.000945][ T802] usb 7-1: SerialNumber: syz [ 1041.016806][ T802] usb 7-1: config 0 descriptor?? [ 1041.035201][T24597] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1041.081385][T24597] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1041.328884][T24597] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1041.337750][T24597] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1042.001080][ T802] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1042.012081][ T802] asix 7-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1042.025585][ T802] asix 7-1:0.251: probe with driver asix failed with error -61 [ 1042.857039][T24612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5605'. [ 1042.868197][T24612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5605'. [ 1042.888402][T24612] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 1043.461344][ T802] usb 7-1: USB disconnect, device number 3 [ 1044.225598][T24567] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5585'. [ 1044.328654][ T24] IPVS: starting estimator thread 0... [ 1044.559367][T24628] IPVS: using max 24 ests per chain, 57600 per kthread [ 1045.190628][T24640] syzkaller0: entered promiscuous mode [ 1045.265404][T24640] syzkaller0: entered allmulticast mode [ 1045.831159][T24651] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1046.015145][T24652] syzkaller0: entered promiscuous mode [ 1046.113541][T24652] syzkaller0: entered allmulticast mode [ 1046.624571][T24663] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1046.889486][T24655] loop6: detected capacity change from 0 to 128 [ 1049.223737][T24683] syzkaller0: entered promiscuous mode [ 1049.247710][T24683] syzkaller0: entered allmulticast mode [ 1049.356747][T24103] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1049.426865][T24103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1049.586138][T24691] 9p: Bad value for 'rfdno' [ 1051.165881][T24707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5634'. [ 1051.500967][T24711] loop7: detected capacity change from 0 to 256 [ 1051.521283][T24103] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1051.534886][T24711] vfat: Unknown parameter 'nnonumtail' [ 1051.567734][T24103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1051.760580][T24103] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1051.797401][T24103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1051.821673][T24103] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1051.871173][T24103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1052.474140][T24103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.557422][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1052.677228][T24103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.753145][T12674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.764297][T12674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.876087][T12674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.883317][T12674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.953832][T24744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5647'. [ 1053.729490][ T5900] IPVS: starting estimator thread 0... [ 1053.759650][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.766185][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.909574][T24762] IPVS: using max 24 ests per chain, 57600 per kthread [ 1053.936223][T24760] loop6: detected capacity change from 0 to 256 [ 1054.178031][T24760] vfat: Unknown parameter 'nnonumtail' [ 1055.993362][T24796] loop6: detected capacity change from 0 to 256 [ 1056.070144][T24796] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1056.262651][T24796] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1056.748885][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1082.690107][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 1109.690825][ C0] sched: DL replenish lagged too much [ 1136.641733][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1136.745228][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1147.307687][T24812] Bluetooth: hci5: command tx timeout [ 1183.498749][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1183.505823][ C1] rcu: 0-....: (34 ticks this GP) idle=c274/1/0x4000000000000000 softirq=139777/139777 fqs=100 [ 1183.518947][ C1] rcu: hardirqs softirqs csw/system [ 1183.525404][ C1] rcu: number: 3 0 0 [ 1183.531847][ C1] rcu: cputime: 19736 99 20 ==> 48010(ms) [ 1183.539688][ C1] rcu: (detected by 1, t=10502 jiffies, g=150721, q=1083 ncpus=2) [ 1183.547624][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1183.547662][ C0] NMI backtrace for cpu 0 [ 1183.547683][ C0] CPU: 0 UID: 0 PID: 16236 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1183.547714][ C0] Tainted: [L]=SOFTLOCKUP [ 1183.547725][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1183.547742][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 1183.547792][ C0] RIP: 0010:rb_read_data_buffer+0xe5/0x5b0 [ 1183.547834][ C0] Code: 83 c5 10 4c 89 6c 24 30 48 c7 44 24 08 00 00 00 00 31 ed 4c 63 ed 48 8b 44 24 30 4e 8d 3c 28 4c 89 ff e8 ee be fd ff 41 89 c6 01 00 00 00 89 c6 e8 cf d2 fb ff 8b 5c 24 04 44 29 eb 44 89 f7 [ 1183.547855][ C0] RSP: 0018:ffffc900000062d8 EFLAGS: 00000016 [ 1183.547877][ C0] RAX: 0000000000000030 RBX: 0000011391bf29ca RCX: ffff888020723e00 [ 1183.547896][ C0] RDX: 0000000000010100 RSI: ffffffff8ebbb740 RDI: 000000000000000b [ 1183.547913][ C0] RBP: 0000000000000318 R08: ffff888020723e00 R09: 0000000000000020 [ 1183.547931][ C0] R10: 000000000000001f R11: 0000000000010100 R12: 0000011391bf29ca [ 1183.547948][ C0] R13: 0000000000000318 R14: 0000000000000030 R15: ffff88802b260328 [ 1183.547969][ C0] FS: 0000000000000000(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 1183.547989][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1183.548007][ C0] CR2: 00007fedcbf556c8 CR3: 000000005bf20000 CR4: 0000000000350ef0 [ 1183.548028][ C0] Call Trace: [ 1183.548045][ C0] [ 1183.548164][ C0] check_buffer+0x288/0x7f0 [ 1183.548230][ C0] ? __pfx_trace_clock_local+0x10/0x10 [ 1183.548360][ C0] __rb_reserve_next+0x537/0xdc0 [ 1183.548624][ C0] ring_buffer_lock_reserve+0xbd5/0x1040 [ 1183.548810][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.548961][ C0] trace_event_buffer_lock_reserve+0x1d2/0x700 [ 1183.549084][ C0] trace_event_buffer_reserve+0x1ef/0x2d0 [ 1183.549180][ C0] trace_event_raw_event_lock_acquire+0x12b/0x2e0 [ 1183.549230][ C0] ? ring_buffer_event_data+0x94/0x100 [ 1183.549312][ C0] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 1183.549358][ C0] ? trace_event_buffer_commit+0x258/0x7a0 [ 1183.549459][ C0] ? trace_event_buffer_reserve+0x249/0x2d0 [ 1183.549548][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.549586][ C0] ? trace_event_raw_event_hrtimer_start+0x296/0x370 [ 1183.549664][ C0] ? debug_object_deactivate+0x9a/0x250 [ 1183.549708][ C0] lock_acquire+0x2ff/0x350 [ 1183.549761][ C0] ? debug_object_deactivate+0x9a/0x250 [ 1183.549876][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.549978][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 1183.550018][ C0] ? debug_object_deactivate+0x9a/0x250 [ 1183.550077][ C0] debug_object_deactivate+0x9a/0x250 [ 1183.550230][ C0] __hrtimer_run_queues+0x239/0xa10 [ 1183.550463][ C0] hrtimer_interrupt+0x448/0x910 [ 1183.550804][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1183.550876][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1183.550935][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1183.550974][ C0] RIP: 0010:srso_alias_return_thunk+0x0/0xfbef5 [ 1183.551012][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8d 64 24 08 c3 cc f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc [ 1183.551033][ C0] RSP: 0018:ffffc90000006b50 EFLAGS: 00000246 [ 1183.551056][ C0] RAX: ffffffff81c9931b RBX: 0000000000000000 RCX: 0000000000000100 [ 1183.551073][ C0] RDX: ffff888020723e00 RSI: 0000000000000000 RDI: 0000000000000002 [ 1183.551090][ C0] RBP: 0000000000000008 R08: ffff88801b06510f R09: 1ffff1100360ca21 [ 1183.551108][ C0] R10: dffffc0000000000 R11: ffffed100360ca22 R12: 0000000000000007 [ 1183.551126][ C0] R13: ffff88801b0653b5 R14: ffff88801b065080 R15: 1ffff1100360ca10 [ 1183.551228][ C0] ? ring_buffer_unlock_commit+0x50b/0x6b0 [ 1183.551349][ C0] ring_buffer_unlock_commit+0x50b/0x6b0 [ 1183.551407][ C0] ? ring_buffer_event_data+0x94/0x100 [ 1183.551527][ C0] trace_buffer_unlock_commit_regs+0x5f/0x520 [ 1183.551584][ C0] ? ring_buffer_event_data+0x94/0x100 [ 1183.551673][ C0] trace_event_buffer_commit+0x223/0x7a0 [ 1183.551842][ C0] trace_event_raw_event_lock+0x1c6/0x280 [ 1183.551939][ C0] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 1183.551983][ C0] ? lock_acquire+0x106/0x350 [ 1183.552098][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.552134][ C0] ? lock_acquire+0x106/0x350 [ 1183.552199][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.552259][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1183.552302][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1183.552344][ C0] lock_release+0x38e/0x3c0 [ 1183.552389][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.552426][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 1183.552464][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.552506][ C0] ? deref_stack_reg+0x18e/0x220 [ 1183.552572][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1183.552630][ C0] unwind_next_frame+0x1baa/0x2550 [ 1183.552732][ C0] ? stack_trace_save+0xa9/0x100 [ 1183.552781][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1183.552854][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 1183.552895][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1183.552950][ C0] arch_stack_walk+0x11b/0x150 [ 1183.553061][ C0] ? kasan_save_track+0x3e/0x80 [ 1183.553167][ C0] stack_trace_save+0xa9/0x100 [ 1183.553225][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1183.553345][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.553382][ C0] ? ring_buffer_unlock_commit+0x514/0x6b0 [ 1183.553474][ C0] kasan_save_track+0x3e/0x80 [ 1183.554048][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.554116][ C0] __kasan_kmalloc+0x93/0xb0 [ 1183.554194][ C0] __kmalloc_noprof+0x375/0x720 [ 1183.554254][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 1183.554302][ C0] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 1183.554349][ C0] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 1183.554484][ C0] cfg80211_inform_single_bss_data+0x990/0x1be0 [ 1183.554652][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1183.554932][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.554968][ C0] ? rb_event_length+0xf9/0x400 [ 1183.555032][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.555068][ C0] ? rb_read_data_buffer+0x52f/0x5b0 [ 1183.555123][ C0] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 1183.555241][ C0] cfg80211_inform_bss_data+0x25b/0x3d50 [ 1183.555380][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.555449][ C0] ? __pfx_trace_clock_local+0x10/0x10 [ 1183.555573][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.555609][ C0] ? __rb_reserve_next+0x795/0xdc0 [ 1183.555720][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1183.555854][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.555890][ C0] ? rb_commit+0x784/0x7e0 [ 1183.556071][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.556107][ C0] ? ring_buffer_unlock_commit+0x514/0x6b0 [ 1183.556160][ C0] ? ring_buffer_event_data+0x94/0x100 [ 1183.556266][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.556303][ C0] ? trace_buffer_unlock_commit_regs+0x155/0x520 [ 1183.556357][ C0] ? ring_buffer_event_data+0x94/0x100 [ 1183.556438][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.556474][ C0] ? trace_event_buffer_commit+0x258/0x7a0 [ 1183.556700][ C0] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 1183.556827][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.556912][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 1183.557036][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 1183.557143][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 1183.557269][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1183.557441][ C0] ? kcov_remote_start+0x7c/0x790 [ 1183.557523][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.557561][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1183.557652][ C0] ieee80211_scan_rx+0x552/0xa40 [ 1183.557801][ C0] ieee80211_rx_list+0x2d0a/0x3b00 [ 1183.557851][ C0] ? ring_buffer_event_data+0x94/0x100 [ 1183.558125][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1183.558168][ C0] ? trace_event_buffer_commit+0x258/0x7a0 [ 1183.558343][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.558428][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.558464][ C0] ? lock_acquire+0x106/0x350 [ 1183.558536][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.558630][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.558666][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1183.558775][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1183.558826][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 1183.558921][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1183.558966][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1183.559018][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1183.559073][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1183.559117][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.559153][ C0] ? skb_dequeue+0x124/0x160 [ 1183.559254][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 1183.559371][ C0] tasklet_action_common+0x2d7/0x490 [ 1183.559501][ C0] handle_softirqs+0x225/0x840 [ 1183.559590][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1183.559723][ C0] __irq_exit_rcu+0xca/0x220 [ 1183.559788][ C0] irq_exit_rcu+0x9/0x30 [ 1183.559829][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1183.559880][ C0] [ 1183.559890][ C0] [ 1183.559917][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1183.559956][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x90 [ 1183.559996][ C0] Code: 11 10 48 89 74 11 18 48 89 44 11 20 e9 b4 29 49 ff cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d 88 38 a6 11 65 8b 15 a9 38 a6 [ 1183.560017][ C0] RSP: 0018:ffffc9000771f740 EFLAGS: 00000246 [ 1183.560040][ C0] RAX: ffffffff81c99eb9 RBX: 0000000000000001 RCX: ffff888020723e00 [ 1183.560058][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1183.560074][ C0] RBP: 0000000000000000 R08: ffff88801b065007 R09: 1ffff1100360ca00 [ 1183.560091][ C0] R10: dffffc0000000000 R11: ffffed100360ca01 R12: 0000000000000031 [ 1183.560109][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1183.560206][ C0] ? ring_buffer_lock_reserve+0x1f9/0x1040 [ 1183.560329][ C0] ring_buffer_lock_reserve+0x211/0x1040 [ 1183.560387][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.560574][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.560611][ C0] ? ring_buffer_unlock_commit+0x514/0x6b0 [ 1183.560736][ C0] trace_event_buffer_lock_reserve+0x1d2/0x700 [ 1183.560858][ C0] trace_event_buffer_reserve+0x1ef/0x2d0 [ 1183.560954][ C0] trace_event_raw_event_lock_acquire+0x12b/0x2e0 [ 1183.561055][ C0] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 1183.561100][ C0] ? trace_event_raw_event_lock+0x1c6/0x280 [ 1183.561193][ C0] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 1183.561368][ C0] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 1183.561409][ C0] lock_acquire+0x2ff/0x350 [ 1183.561462][ C0] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 1183.561621][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.561723][ C0] _raw_spin_lock+0x2e/0x40 [ 1183.561761][ C0] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 1183.561810][ C0] wg_ratelimiter_gc_entries+0x5d/0x450 [ 1183.561910][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1183.561965][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1183.562311][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1183.562429][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.562469][ C0] ? assign_work+0x3cf/0x5d0 [ 1183.562596][ C0] worker_thread+0xa47/0xfb0 [ 1183.562679][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.562820][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.562856][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1183.563025][ C0] kthread+0x388/0x470 [ 1183.563096][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1183.563132][ C0] ? __pfx_kthread+0x10/0x10 [ 1183.563216][ C0] ret_from_fork+0x514/0xb70 [ 1183.563311][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1183.563370][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1183.563406][ C0] ? __switch_to+0xc89/0x1420 [ 1183.563504][ C0] ? __pfx_kthread+0x10/0x10 [ 1183.563587][ C0] ret_from_fork_asm+0x1a/0x30 [ 1183.563808][ C0] [ 1183.564665][ C1] rcu: rcu_preempt kthread starved for 251 jiffies! g150721 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1184.738947][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1184.748966][ C1] rcu: RCU grace-period kthread stack dump: [ 1184.754899][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1184.768518][ C1] Call Trace: [ 1184.771843][ C1] [ 1184.774866][ C1] __schedule+0x17d9/0x56c0 [ 1184.779461][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.785157][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 1184.791164][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.796857][ C1] ? trace_event_raw_event_lock+0x1c6/0x280 [ 1184.802877][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 1184.809284][ C1] ? __pfx___schedule+0x10/0x10 [ 1184.814246][ C1] ? schedule+0x90/0x2b0 [ 1184.818583][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.824305][ C1] ? schedule+0x90/0x2b0 [ 1184.828675][ C1] schedule+0x164/0x2b0 [ 1184.832947][ C1] schedule_timeout+0x152/0x2c0 [ 1184.837883][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1184.843352][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1184.848766][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.854457][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1184.860337][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.866040][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1184.871766][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1184.876862][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1184.883117][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1184.888470][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1184.893814][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1184.899747][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1184.904455][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1184.909752][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1184.914782][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.920470][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1184.925645][ C1] kthread+0x388/0x470 [ 1184.929808][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1184.935062][ C1] ? __pfx_kthread+0x10/0x10 [ 1184.939757][ C1] ret_from_fork+0x514/0xb70 [ 1184.944467][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1184.949656][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.955342][ C1] ? __switch_to+0xc89/0x1420 [ 1184.960135][ C1] ? __pfx_kthread+0x10/0x10 [ 1184.964830][ C1] ret_from_fork_asm+0x1a/0x30 [ 1184.969853][ C1] [ 1184.972906][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1184.979266][ C1] CPU: 1 UID: 0 PID: 24805 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 1184.990677][ C1] Tainted: [L]=SOFTLOCKUP [ 1184.995036][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1185.005126][ C1] RIP: 0010:rb_commit+0x634/0x7e0 [ 1185.010214][ C1] Code: 4c 89 ff e8 de 10 6b 00 89 d8 49 8b 0f 81 e1 ff ff 0f 00 39 c1 74 0a e8 9a 77 fd ff e9 04 fe ff ff e8 90 77 fd ff 48 8b 04 24 <42> 80 3c 30 00 74 08 4c 89 ef e8 ad 10 6b 00 49 8b 5d 00 48 8b 44 [ 1185.029947][ C1] RSP: 0018:ffffc9000444f1e0 EFLAGS: 00000293 [ 1185.036083][ C1] RAX: 1ffff11003855c15 RBX: 00000000000007a8 RCX: ffff8880316cdd00 [ 1185.044099][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88807a33ab10 [ 1185.052106][ C1] RBP: ffff88801c2ae010 R08: ffff88807a33ab17 R09: 1ffff1100f467562 [ 1185.060115][ C1] R10: dffffc0000000000 R11: ffffed100f467563 R12: 1ffff11003855c20 [ 1185.068128][ C1] R13: ffff88801c2ae0a8 R14: dffffc0000000000 R15: ffff88807a33ab10 [ 1185.076143][ C1] FS: 0000000000000000(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000 [ 1185.085109][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1185.091726][ C1] CR2: 000055558d5d64e8 CR3: 00000000288f4000 CR4: 0000000000350ef0 [ 1185.099739][ C1] Call Trace: [ 1185.103059][ C1] [ 1185.106188][ C1] ring_buffer_unlock_commit+0x7d/0x6b0 [ 1185.111813][ C1] ? ring_buffer_event_data+0x94/0x100 [ 1185.117409][ C1] trace_buffer_unlock_commit_regs+0x5f/0x520 [ 1185.123554][ C1] ? ring_buffer_event_data+0x94/0x100 [ 1185.129124][ C1] trace_event_buffer_commit+0x223/0x7a0 [ 1185.134962][ C1] trace_event_raw_event_lock+0x1c6/0x280 [ 1185.140807][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 1185.147199][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.152921][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.158641][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1185.163809][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1185.168979][ C1] lock_release+0x38e/0x3c0 [ 1185.173577][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.179278][ C1] ? deref_stack_reg+0x18e/0x220 [ 1185.184305][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1185.189491][ C1] unwind_next_frame+0x1baa/0x2550 [ 1185.194732][ C1] ? do_syscall_64+0x174/0x580 [ 1185.199563][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1185.204814][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1185.211043][ C1] arch_stack_walk+0x11b/0x150 [ 1185.215944][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.222137][ C1] stack_trace_save+0xa9/0x100 [ 1185.226980][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1185.232466][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.238156][ C1] ? trace_buffer_unlock_commit_regs+0x155/0x520 [ 1185.244580][ C1] ? ring_buffer_event_data+0x94/0x100 [ 1185.250255][ C1] kasan_save_stack+0x3e/0x60 [ 1185.255004][ C1] ? kasan_save_stack+0x3e/0x60 [ 1185.259915][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 1185.265349][ C1] ? call_rcu+0xee/0x8b0 [ 1185.269645][ C1] ? kmem_cache_free+0x462/0x650 [ 1185.274642][ C1] ? tear_down_vmas+0x312/0x520 [ 1185.279546][ C1] ? exit_mmap+0x4ca/0x9f0 [ 1185.284027][ C1] ? __mmput+0x118/0x420 [ 1185.288322][ C1] ? exit_mm+0x221/0x2d0 [ 1185.292626][ C1] ? do_exit+0x6cd/0x2360 [ 1185.297021][ C1] ? do_group_exit+0x22d/0x2f0 [ 1185.301832][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 1185.307078][ C1] ? x64_sys_call+0x221a/0x2240 [ 1185.311978][ C1] ? do_syscall_64+0x174/0x580 [ 1185.317313][ C1] ? tear_down_vmas+0x312/0x520 [ 1185.322229][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 1185.327495][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1185.333695][ C1] call_rcu+0xee/0x8b0 [ 1185.337941][ C1] ? tear_down_vmas+0x312/0x520 [ 1185.342858][ C1] kmem_cache_free+0x462/0x650 [ 1185.347785][ C1] tear_down_vmas+0x312/0x520 [ 1185.352621][ C1] exit_mmap+0x4ca/0x9f0 [ 1185.356978][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1185.362119][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1185.366948][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.372644][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 1185.378417][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.384107][ C1] ? uprobe_clear_state+0x2ac/0x3e0 [ 1185.389375][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.395127][ C1] __mmput+0x118/0x420 [ 1185.399310][ C1] exit_mm+0x221/0x2d0 [ 1185.403499][ C1] do_exit+0x6cd/0x2360 [ 1185.407846][ C1] ? __pfx_do_exit+0x10/0x10 [ 1185.412495][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1185.417609][ C1] ? do_group_exit+0x21d/0x2f0 [ 1185.422422][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.428165][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.433887][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1185.439200][ C1] do_group_exit+0x22d/0x2f0 [ 1185.443879][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.450026][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1185.455111][ C1] x64_sys_call+0x221a/0x2240 [ 1185.459841][ C1] do_syscall_64+0x174/0x580 [ 1185.464493][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.470694][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.476647][ C1] RIP: 0033:0x7f42e90896c5 [ 1185.481125][ C1] Code: Unable to access opcode bytes at 0x7f42e908969b. [ 1185.488173][ C1] RSP: 002b:00007ffefb40c628 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 1185.496652][ C1] RAX: ffffffffffffffda RBX: 00007ffefb40c904 RCX: 00007f42e90896c5 [ 1185.504663][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 1185.512671][ C1] RBP: 0000000000000003 R08: 00007ffefb40c720 R09: 0000000000000002 [ 1185.520680][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1185.528686][ C1] R13: 00007ffefb40c960 R14: 00007f42e9299000 R15: 00005568c444dd98 [ 1185.536904][ C1]