last executing test programs: 6m53.593299724s ago: executing program 4 (id=98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 6m52.71667937s ago: executing program 4 (id=100): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) recvmsg(0xffffffffffffffff, 0x0, 0x2000) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 6m51.218210321s ago: executing program 4 (id=104): socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x53, 0xf, 0x2, 0x4}, {0x6, 0x9, 0x9, 0x2}]}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m47.43323084s ago: executing program 4 (id=109): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) 6m45.004607058s ago: executing program 4 (id=111): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 6m39.654194678s ago: executing program 4 (id=122): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x224) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000e80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16, @ANYBLOB="71b85e3abae999290324a144012c8e6319442fb967"], 0x1, 0x11dc, &(0x7f0000001280)="$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") rename(&(0x7f0000000800)='./file0\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m23.736772006s ago: executing program 32 (id=122): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x224) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="71b85e3abae999290324a144012c8e6319442fb967"], 0x1, 0x11dc, &(0x7f0000001280)="$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") rename(&(0x7f0000000800)='./file0\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m45.778474859s ago: executing program 3 (id=227): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) open(0x0, 0x60142, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) chroot(0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x80) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 5m44.444972749s ago: executing program 3 (id=231): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000004c0)={@private0}, &(0x7f0000000540)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r6, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "2508c313604598823d332948066405437a02bf2fd41a00"/33}, 0x2c) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r7, 0xffffffffffffffff) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000400, r7, &(0x7f0000000000)) close(0xffffffffffffffff) setitimer(0x2, 0x0, &(0x7f0000000400)) 5m40.803938117s ago: executing program 3 (id=234): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r0, &(0x7f0000000740), 0xff67) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x3, 0x0, 0xfff, 0x0, 0x6, 0xa}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=0x3915, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5m38.919306021s ago: executing program 3 (id=237): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x4) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)={0x160, r3, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6ced7fb7ef455de78583f3559978625460eee7ec1c35f8ac"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="eac9148c44c8035283ccff17a356faae7a3db2461bd4f660da76caf7c276f594"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x34}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2abdb3d8ba572ce3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="05da81a08d8c0631598fc8a7e9bc5ae7517b3e778aad8ac0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2047cd90177afe7375d0aed312df342063b60556e4586b9f0d0485dd628cd731"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x225}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4aa091ba1fc81a86"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7a68083741eeabe8af20e0de9e319744"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0d054c4e751c81068803d3b4d5f5b5b6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c30be35236444e2c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3bd38266db7545f8"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6bbf9fedb40a2e4b840f0d68e320d9bc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="91aef461eb457ca25f0c3b41802f4cfaf4905aa2f61c4e97d4eba7abde6561de"}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000000}, 0x4006001) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40044160, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000", @ANYRES32=r5, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 5m37.898320398s ago: executing program 3 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x2b, 0x1, 0x0) r5 = inotify_init() r6 = inotify_add_watch(r5, &(0x7f0000000280)='.\x00', 0x25000001) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00'}, 0x10) inotify_rm_watch(r5, r6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0xc1) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x1000007c, 0xfe4d) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 5m36.568765838s ago: executing program 3 (id=243): socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x2a2c41, 0x0) flock(r0, 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000280), 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000001840)='net/unix\x00') read$FUSE(r0, &(0x7f00000038c0)={0x2020}, 0x2020) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="e6e90afd3074743868691cb5931728c68b39a72037c27aba4840585784c04cb052640dfcfcaf8e033f4544e006bfec7436dec500d9bafca8e54ff738867eb12e783415f1a800f53817e40967424a431f0ed47be24c06d9edb2e41daefd6b6664c3cf82f1a9dbdc89ab2e0591d236bcc94da06a268fe32e103382b5c497", @ANYRESHEX=0x0], 0x3, 0x2b6, &(0x7f00000000c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 5m21.197025653s ago: executing program 33 (id=243): socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x2a2c41, 0x0) flock(r0, 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000280), 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000001840)='net/unix\x00') read$FUSE(r0, &(0x7f00000038c0)={0x2020}, 0x2020) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="e6e90afd3074743868691cb5931728c68b39a72037c27aba4840585784c04cb052640dfcfcaf8e033f4544e006bfec7436dec500d9bafca8e54ff738867eb12e783415f1a800f53817e40967424a431f0ed47be24c06d9edb2e41daefd6b6664c3cf82f1a9dbdc89ab2e0591d236bcc94da06a268fe32e103382b5c497", @ANYRESHEX=0x0], 0x3, 0x2b6, &(0x7f00000000c0)="$eJzs3UFrY1UUAODz0jSNukgRN4qLB7pwVaZu3bTKCGJXSgR1ocXpgCRhIIWAI5iZ1fwCl/4Pf4IbN/4Dwa3gri6qV17ee01iX9PS1hT1+1an995z73nvQrrKyeevjgYPHmXx9OTn6HazaO3FXvyZxXa0ovYk2nFe0xgA8G/we0rxW7pOZrt1+9UAAOtQ/v8v3XUtAMB6fPjxJ+/vHxzc/yDPu/Fy79mkn0XE6NmkX87vP4wvYxhHcS96cRqRzpTxu+8d3I92XtiO10fTSb/IHH32Y7X//q8Rs/zd6MV2c/5uXlrIn076m/F85LH/cLMutRcvNee/2ZAf/U688dpC/TvRi5++iEcxjAdR5M7zv9nN83fStydff1ocU+RnrehvzdbNpY113gsAAAAAAAAAAAAAAAAAAAAAAP9tO3mele17Zv17iqGq/87G6Wx+J69tL/fnKfOzeqOyP1CKqkXPNMV3dX+de3mep2rhPL8dr7T9iAAAAAAAAAAAAAAAAAAAAAAUjr96PDgcDo/GtxLU3QDqr/Vfd5+9+cjWUrkNi7euftZit4Gi1pWLo92O1RuepNLlz9WqD21e89zFUzcItuaX+1GUQX0xN9o5/e2Fv/h2+ffjwWFeralf8uAwu+ysbr3P94tTnbjpS0izCk/T8p12z0pdzurc0pvvvNA49UdK6Wr7vPVLeUfVSDZrsXG10zeroPEBi6B7/i5+uHjDCz8yNq75UQMAAAAAAAAAAAAAAAAAAFyi/K7vk6PxccPk05WprX+sKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYs/L3/4dH47OgGxHLI+eCaZW8ak0VdGJ8fMePCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/AXwEAAP//wZJM4A==") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 2m20.123073585s ago: executing program 1 (id=660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lseek(r1, 0xc6c3, 0x0) 2m16.060393595s ago: executing program 1 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 2m13.858080892s ago: executing program 1 (id=668): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='kfree\x00', 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0307000000000000000008000000680004800400078013"], 0x7c}}, 0x0) 2m12.345183683s ago: executing program 1 (id=671): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r3, 0x2008002) socket$vsock_stream(0x28, 0x1, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0xfffffffffffffee3, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) 2m10.168777219s ago: executing program 1 (id=674): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x60, 0xbb, 0x41, 0x8, 0xc2e, 0x700, 0xe13b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x1, 0x0, 0x23, 0x53, 0x83, 0x3}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/74, 0x4a) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="13010000000000402505a8a440000102030109021b00010100000009040000020701"], 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x541b, 0x0) syz_usb_disconnect(r0) 2m6.501358256s ago: executing program 1 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, 0xffffffffffffffff, 0x4b000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000b00)={0x7, 'vlan0\x00', {0x3}, 0xba}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="953ea7996702", 0x0, 0x3, 0x0, 0x6, 0x0}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)) 1m50.647409265s ago: executing program 34 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, 0xffffffffffffffff, 0x4b000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000b00)={0x7, 'vlan0\x00', {0x3}, 0xba}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="953ea7996702", 0x0, 0x3, 0x0, 0x6, 0x0}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)) 16.15495583s ago: executing program 6 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000180), 0xffffffff00000000, 0x2140) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x5) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000040)={0x57}) 12.610649786s ago: executing program 7 (id=910): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20102, 0x0) ioctl$RNDADDENTROPY(r8, 0x40085203, &(0x7f0000001000)=ANY=[]) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f00070000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 11.746950563s ago: executing program 7 (id=912): bind(0xffffffffffffffff, &(0x7f0000000300)=@xdp={0x2c, 0x2, 0x0, 0x8}, 0x80) creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6(0xa, 0x3, 0x20) socket$kcm(0x10, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) 11.389343346s ago: executing program 6 (id=915): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000004c0)={@private0}, &(0x7f0000000540)=0x14) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "2508c313604598823d332948066405437a02bf2fd41a00"/33}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r6, 0xffffffffffffffff) close(0xffffffffffffffff) setitimer(0x2, 0x0, &(0x7f0000000400)) 10.603110131s ago: executing program 0 (id=917): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) syz_open_procfs(0x0, 0x0) 9.723753628s ago: executing program 6 (id=920): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r3 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r3, 0x2008002) socket$vsock_stream(0x28, 0x1, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80000001) mq_timedreceive(0xffffffffffffffff, 0x0, 0xfffffffffffffee3, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) 9.45304152s ago: executing program 0 (id=921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 9.222465912s ago: executing program 7 (id=922): r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) mount$9p_fd(0x0, 0x0, 0x0, 0x800040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0) keyctl$unlink(0x9, r0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 9.176048832s ago: executing program 0 (id=923): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES32=0x0, @ANYBLOB="00db00000040000020"], 0x40}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.026892741s ago: executing program 7 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000180), 0xffffffff00000000, 0x2140) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x5) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000040)={0x57}) 7.795245812s ago: executing program 6 (id=926): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x8100, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 7.403967965s ago: executing program 6 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f00000003c0)={'veth1_macvtap\x00', {0x2, 0x4e22, @local}}) socket$kcm(0x2, 0x200000000000001, 0x106) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0, 0x12002, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 7.277283006s ago: executing program 0 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 5.457823099s ago: executing program 0 (id=930): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000004c0)={@private0}, &(0x7f0000000540)=0x14) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "2508c313604598823d332948066405437a02bf2fd41a00"/33}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r6, 0xffffffffffffffff) close(0xffffffffffffffff) setitimer(0x2, 0x0, &(0x7f0000000400)) 5.117552552s ago: executing program 2 (id=931): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) syz_open_procfs(0x0, 0x0) 5.116055852s ago: executing program 6 (id=932): bind(0xffffffffffffffff, &(0x7f0000000300)=@xdp={0x2c, 0x2, 0x0, 0x8}, 0x80) creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6(0xa, 0x3, 0x20) socket$kcm(0x10, 0x0, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) 4.921877864s ago: executing program 5 (id=933): syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 4.597675156s ago: executing program 5 (id=934): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000100)=@bpq0, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x668, &(0x7f0000000e80)="$eJzs3Utv29gZxvGHsnwtMC3aYhAEmfGZpAM4aKpI8sQDI12UpSibU0kUSLqwV4N0Yg+CyJk2SYHGm6k3vQDtF+huNrPohyjQddf9Al0WGLS7At2oICnqSlm+J23/PyPREfmS56XI6A0t8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECWUyuXK5YaXmtn10zn1AK/ecL8dG3zups27s7sV7LiP1pa0o100o1vD2a/Hf91W7fSZ7e0FD8s6ehrb3/j4beKhWz5ExI6D511hS9eHT191OnsPz9fb13rPMtdiYlMVDjFUltuywt9r2lvucYLfbO5sVG+v10PTd1ruOFeGLlN4wRuIfIDs+bcNZXNzXXjlvb8ndZWzT50s4kffq9aLm+YjxZ7u//+R6XQ2fYaDa+1lcTEs+OYxf4R4tpNYw6edPbXZyUZB1VOE1SdFVQtV6uVSrVa2Xiw+eDDcrk4MaE8RhMRg4P2zdn5uE6X9M4NXFwhrv9/s6SGltTSjnZlcn8c1RTIV3PK/J6s/r9/3z2x3+H6n1X5G4PZN5XU/3fTZ+9Oq/9TcjEyyQJ5c6wp08/380KvdKSneqSOOtrX82mRXz/TelcvL8Or/dmSipKnUL48NWVrS65Mb4rRpja0obI+1rbqCmVUl6eGXIXaU6hIrprJPgnkylYkX4GM1uTorowq2tSm1mXkqqQ9+dpRS1uqyda/ut3ugZ4kr/v6CTkqC6qcJqjYPwYng6bV/598ni5xtvqP/z39Y+cUMcBr1+2d/083lzdx9eoyAgAAAAAAl81KfvtuJZ/dvyOpq7rXcMuvOy0AAAAAAHCJkk/+b8UP83HrHVlTzv+7158bAAAAAAC4HFZyjZ0laSX5Ur81uBLqNF8CyL04AAAAAAAAvFmSz/+LC1I3GVptVdaZzv8BAAAAAMB/gd8MjbFfzMbY7WYf6xckhe1F60//WFQwbx23d79jHdrxHPuwFzPxDYCoftMqKh2oNxmvd0FS8sxxb1m98YF7g2Ba6cC+0lcHs8b6t4KxBBbmsl9f5CTw1tFQAhvF3jP9Tu+lMe/1+n18VFAyJ+1lpe413JLjNx5WZNtvFSJ3N/r5sye/kIL+dh486eyXPvms8zjJ5TiedHwY5/H5SDqFWbm8TMZbSK65yNviZdWzLn/baq5YSb/lbPvnZB8Whjs63fb/SrfTmNsr6ePKUbYHZP2y16iUkl022PpkdAhrkEVlfMvzdsSULJaSLO6kMXfW7qQPWX7pXlj67pxULU3ug2A4i+pwFrNfC+ufE6/FjCziY2E9zuLP8YqmZLF+tiwm9ggAvC4HgyqUDGI+Ocb+eN09z7vc7Or+g9FeXv6hm15wOCcVe59NpBchTqsrit/R19KwhXQU9+LNnHf0cq+uLGnKO3r5AtUt7uuPg3sg9dLuzSn2s/h3t9t9WEn6/f1YVf0iXuCLqf2Gjepc/BLef3n402QA/Nin+5/uP6tW1zfKH5TLD6qaTzaj90DtAQDkmH2PndGIpUE969fuD/pn1Y///n7aGqm73+x/paCkT/SZOnqse9ktBFbz+10Z+hrCvcmz1jh2WRqPreje1LO6pJYOxVb7sfPKFhn9/8Igdv2qdwMAANfq9ow6PF7/887d72Xn3Ws3c8+7R2v5+B2Ch2PnR2o5AAC4Gm7wlbUS/doKAq/9cWVzs2JH264JfOdHJvBqW67xWpEbONt2a8s17cCPfMdvmHagRa/mhibcabf9IDJ1PzBtP/R2kzu/m96t30O3abcizwnbDdcOXeP4rch2IlPzQse0d37Y8MJtN0gWDtuu49U9x448v2VCf1mOWzImdN2hQK/mtiKv7sXNlmkHXtMO9syP/cZO0zU1N3QCrx356QqzvrxW3Q+ayWpL6p50o0MAAP5vvHh19PRRp7P//ITGsdJG9n20E4IX8lb4mjcRAACMoUoDAAAAAAAAAAAAAAAAAAAAAPDmO831fyc2sosCsynzygmW+lN+9tap1mxpMOXLv14ow3M0CuNTeiPtdmcv/pe0UcyLWY4bC5I62cs/HHN8qVuxeqpgpY3i5b+Gy1LekXBlje8fjB6HEzHxzNxZi/19Ubz4P4e8xrMvp8yafUQtjr6GCydt4GijKOn5wgV2wfW/FwG4Xv8JAAD//6TAPYc=") r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) write$cgroup_int(r1, &(0x7f0000000000)=0x700, 0x12) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000200)='./bus\x00', 0x0) 4.212155829s ago: executing program 0 (id=935): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000040)=0x4, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0xfffffffe, [0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x3, 0x0, 0xfffffffa, 0x711, 0x0, 0x80000001, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x80000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6e3a, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x50, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xee, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0xfffffe1b, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000]}, 0x45c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) connect$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 4.177622969s ago: executing program 5 (id=936): r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) mount$9p_fd(0x0, 0x0, 0x0, 0x800040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0) keyctl$unlink(0x9, r0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x14, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.10116897s ago: executing program 7 (id=937): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r4, 0x2008002) socket$vsock_stream(0x28, 0x1, 0x0) sendfile(r3, r4, 0x0, 0x80000001) mq_timedreceive(0xffffffffffffffff, 0x0, 0xfffffffffffffee3, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) 4.08967023s ago: executing program 2 (id=938): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x8100, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 3.945670901s ago: executing program 2 (id=939): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES32=0x0, @ANYBLOB="00db00000040000020"], 0x40}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.836921009s ago: executing program 5 (id=940): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x64, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2.568200831s ago: executing program 5 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900fffffffffddbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_async', 0x40802, 0x0) write$tcp_mem(r4, &(0x7f0000000200)={0xfffffffffffffffe, 0x20, 0xfffffffffffffffb, 0x20, 0x20000000000005}, 0x48) listen(r2, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000f616af20b6608ac457468360130e607a82749e5c20f0958a2dd2409afcb66616f46c9bf254081dbd19dff45b05f3ae154cb8ff53e2bc", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdb2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000b40)={0x2020}, 0x2020) 2.437285332s ago: executing program 7 (id=942): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x41c, &(0x7f00000001c0)=ANY=[], 0x1, 0xa75, &(0x7f0000000ac0)="$eJzs3V2IXNUBAOBzZ3c2f2szsUldNWpaW7Q/7roxabWpJmKglEII9KGgfQkxpiFrWhqRKkJTH0pfREHMUx9i6UtflLYU9aUEH4oUlFJahD5Z6WsKQh+koFN25pzZ2ZMZ7kyyu3dm5/vgzJl7z517zp25c+fOvecnABOr1no8cGBrCOGVt14+etur77y4POdwZ4lG63G6a6oeQiji9HS2vg+m2vEnHz13sldchP2txzQdjl3pvHZHCOFC2Bcuh0Z44bGL0++/cey918LZp48ffffN9dn6FcV6ZwAAACPg+OVDB/b866+37vrf67cfCVs689P5eSNOz8bz/iPxRDmdL9fC6umiK3SbyZabjqGWLTfVY7nufOrZctN98p/J1lvvs9yWkvynuub12m4YZ2k/boSiNr9qulabn2//Jw+t//Uzxfy5M0tPnK+ooMCa++8dIYR9giBMYmjurPoIBNCW3y+8yoW1vVPXWdv0YPlfebjW+/Vd6mtaQibC1na00ft/Tv6jnf9vfq6mAmtnE+5Nf7+ha7vS92g2Tuf3EfL6S8N+/9P68vsRg54D9LuPMC73F/qVc2qDy3Gt+pU/3y82qwdjnN6Hh7L0+D1o3U7LP9Nx+YyB3j52/V8Q1iTcXFRfhmFDs+oDEDCy8npzzSil5/X68vQtJelbS9K3laRvL0nfUZIOk+wPT70YXipWrnfl/+mHvR42m63iM0OWJ78eOWz+eb3fYV1v/nl9YhhpO/588f7HH/1bu/5/0dn/P437+7443YjfrctxgXS9ML+u3qn731idTa3Pcjdmxbmhx/Kt57tXL1fsXllP6DrOXFWOufSK9hXdnf2W27t6/Y1suW0xbM3Km5+fbM9el84/0kFxdlVpVra3nm3HTFaOdFzZFeO8HHAt0v64uv7/8t7Xqv/fuY01F+rFE2eWTt0bp9N++s5Ufcvy/MWNLjhw3QZt/zMXVrf/me3Mr9e6jws7V+YX3ceFRjZ/f5/598Xp9Dv3w6ltrfnzJ3+09PhabzxMuPPPPHv2xNLSqZ94MmpPwoUQRqAYnkzSk3RcOLFU7XEJWH8LTz3544Xzzzx7z5knT5w+dfrUucWDi/c/cHBx8esPLLTO6xe6z+43Y3VhmFwrv/5VlwQAAAAAAAAAAAAY1OkPFy794+1v/LPd/n+l/V9q/59q/qb2/7/M2v9nzfw7FYRTO8DUju+q9vZZB6sz2XL1GD6brX93ls+e7HWfi3FnHL/Y/j9ll/frmspzUzY/7783LTeXzc/7S5nJ+iApwi+2d5fvCzF+Psa/DlChYlvv2TEu69867eupfwr9Uoyn9LmlvSH1Y5Laf6f23qm/ktT/Qzr+79qAMrL2NqJdYdXbCPT2n83c/3c6iam6HIIwoqHZNIoHMBqqHv8zXfdM8bk/fWfrckiLXXl49fEy778Urseojz8p/8rH/1zT4YU7498NfPzLRszLbwAN6NDz3/13V7bhlkHzz8c/Tf1A7x4u/2/F/NPW3BUGy7/5apZ/fkNoQA9m+W8fMP+rtn/vteX/UMw/vW133zlo/u0SF7XV5civG6f7f+m68fez/A9n25/69hx6+69xoMYjMX+YZOMyzuywxmX8337yehgH43Q6EKZ6Dvl4J8OWP9WvSL8De7L1FyW/b5tw/N/mz5rNX03KOC7fjHHZ92E2fqZpf2z0mK51Tdd7vLeb9VgD4+qDzXz/Txj/sG0EynD9of2z2j0v/RhWXLZms1lpn746FK5W1e9/1f8Tqs6/6ve/TD7+b34On4//m6fn4/9+L0vPx//NX5+Pr5en5+P/5u9nPv5vnn5Ttt58fOC5kvSbS9JvKUm/tSR9b0n6bSXpny9Jv70k/Y6S9BtL0u8sSf9iSfqX+qd/3L1ov9ffXbL+L5ekb3apPcqkbj9Msrx9nu8/TI50/6ff9393STowvi6+vvjIo7//QaPd/n+mcz0k3cc7Eqfr8b/zT+N0ft87dE0vp70dpz/M0kf9egdMkrz/jPz3/a6SdGB8pXpevt8wgYrePfbk99v69VvV7zyf8fKVGH81xl+L8T0xno/xQowXY7x/g8rH+njkd3889FKx8n9/Z5Y+aH3yvD1Q3k/UfQOWJ78+MGx99rwfv2Fdb/7X2BwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgMrXW44EDc0UIr7z18tFLf/n2b5fnHO4s0Wg9TndN1TuvC+HeGE/F+FJ88slHz53sjj+NcRH2hyIUnfnh2JVOTjtCCBfCvnA5NMILj12cfv+NY++9Fs4+ffzou2+u3zvQVqx3BgAAAFCh/wcAAP//z2EOoA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6224c348, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x4b142, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000040)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7c, 0x5, 0xff, 0x4, r1, 0x10001, '\x00', 0x0, r2, 0x0, 0x3, 0x0, 0xb, @void, @value, @void, @value}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a58c97c, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8005c10) socket$xdp(0x2c, 0x3, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000340), 0x0) truncate(&(0x7f0000000040)='./file2\x00', 0x1f8) 1.657815878s ago: executing program 2 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f00000003c0)={'veth1_macvtap\x00', {0x2, 0x4e22, @local}}) socket$kcm(0x2, 0x200000000000001, 0x106) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0, 0x12002, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 432.372807ms ago: executing program 2 (id=944): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 336.154978ms ago: executing program 5 (id=945): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000004c0)={@private0}, &(0x7f0000000540)=0x14) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "2508c313604598823d332948066405437a02bf2fd41a00"/33}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r6, 0xffffffffffffffff) close(0xffffffffffffffff) setitimer(0x2, 0x0, &(0x7f0000000400)) 0s ago: executing program 2 (id=946): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "d4e9e1c90d89691c"}, 0x38) r6 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r6, 0x0, 0x0, 0x40, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200028, &(0x7f0000000000), 0x1, 0x4703, &(0x7f0000004800)="$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") kernel console output (not intermixed with test programs): er_driver returned -16 [ 185.670508][ T5112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.692821][ T5112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.082135][ T4968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.132511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.166659][ T4298] usb 2-1: USB disconnect, device number 7 [ 187.192355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.310259][ T4968] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.567051][ T5163] loop0: detected capacity change from 0 to 2048 [ 187.630728][ T5163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 187.737744][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 187.771980][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.790944][ T4298] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 187.835416][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.031689][ T4477] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.040001][ T4477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.181740][ T4298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 188.193235][ T4298] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 188.259441][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.409625][ T4298] usb 2-1: config 0 descriptor?? [ 188.425839][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.527776][ T5165] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.593143][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.666506][ T5173] loop0: detected capacity change from 0 to 1024 [ 188.698560][ T4477] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.705970][ T4477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.812534][ T5173] EXT4-fs: Ignoring removed orlov option [ 188.854359][ T5173] EXT4-fs (loop0): Test dummy encryption mode enabled [ 188.998043][ T4298] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 188.998196][ T4362] device hsr_slave_0 left promiscuous mode [ 189.035380][ T5173] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 189.054558][ T4362] device hsr_slave_1 left promiscuous mode [ 189.088194][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.121459][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.537619][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.590854][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.606865][ T4362] device bridge_slave_1 left promiscuous mode [ 189.645702][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.739822][ T4362] device bridge_slave_0 left promiscuous mode [ 189.762517][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.786331][ T4296] usb 2-1: USB disconnect, device number 8 [ 189.861327][ T4362] device veth1_macvtap left promiscuous mode [ 189.867980][ T4362] device veth0_macvtap left promiscuous mode [ 189.930274][ T4362] device veth1_vlan left promiscuous mode [ 189.964695][ T4362] device veth0_vlan left promiscuous mode [ 190.419191][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 190.843377][ T5193] trusted_key: encrypted_key: key user:syz not found [ 192.580737][ T4301] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 192.611428][ T4362] team0 (unregistering): Port device team_slave_1 removed [ 192.655327][ T4362] team0 (unregistering): Port device team_slave_0 removed [ 192.698915][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.746604][ T4362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.800945][ T4301] usb 2-1: Using ep0 maxpacket: 32 [ 192.811222][ T4301] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 192.823977][ T4301] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 192.834531][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 192.843994][ T4301] usb 2-1: Product: syz [ 192.848415][ T4301] usb 2-1: Manufacturer: syz [ 192.853579][ T4301] usb 2-1: SerialNumber: syz [ 192.868347][ T4301] usb 2-1: config 0 descriptor?? [ 192.874706][ T5201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.113642][ T5201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.131029][ T5201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.142667][ T5201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.155882][ T5201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.180350][ T5201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.204859][ T5201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.505110][ T4362] bond0 (unregistering): Released all slaves [ 194.081216][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.133590][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.325389][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.343654][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.353874][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.366111][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.383964][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.431040][ T5184] netlink: 'syz.3.210': attribute type 1 has an invalid length. [ 194.438728][ T5184] netlink: 'syz.3.210': attribute type 4 has an invalid length. [ 194.446578][ T5184] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.210'. [ 194.598723][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.785810][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.819211][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.831770][ T5217] loop3: detected capacity change from 0 to 512 [ 194.842402][ T5217] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.869829][ T5217] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.219: iget: bad extended attribute block 512 [ 194.884182][ T5217] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.219: couldn't read orphan inode 15 (err -117) [ 194.885003][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.905541][ T5217] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 194.928648][ T5216] loop0: detected capacity change from 0 to 2048 [ 194.966236][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.978967][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.990237][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.152431][ T5216] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 197.187546][ T5225] syz.0.218 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 197.253240][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 197.335158][ T4298] usb 2-1: USB disconnect, device number 9 [ 197.434603][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 198.729784][ T5245] loop2: detected capacity change from 0 to 1024 [ 198.790654][ T4301] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 198.827909][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.845903][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.905843][ T4968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.993080][ T4301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.081187][ T4301] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 200.314322][ T4301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.393457][ T4301] usb 1-1: config 0 descriptor?? [ 200.427180][ T4301] pwc: Askey VC010 type 2 USB webcam detected. [ 200.824004][ T4301] pwc: recv_control_msg error -71 req 02 val 2b00 [ 200.837775][ T4301] pwc: recv_control_msg error -71 req 02 val 2700 [ 200.863624][ T4301] pwc: recv_control_msg error -71 req 02 val 2c00 [ 200.893513][ T4301] pwc: recv_control_msg error -71 req 04 val 1000 [ 200.913261][ T4301] pwc: recv_control_msg error -71 req 04 val 1300 [ 200.928003][ T5273] netlink: 'syz.2.228': attribute type 1 has an invalid length. [ 200.931133][ T4301] pwc: recv_control_msg error -71 req 04 val 1400 [ 200.962903][ T5273] netlink: 'syz.2.228': attribute type 4 has an invalid length. [ 200.968076][ T4301] pwc: recv_control_msg error -71 req 02 val 2000 [ 200.989338][ T5273] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.228'. [ 200.997453][ T4301] pwc: recv_control_msg error -71 req 02 val 2100 [ 201.021323][ T4301] pwc: recv_control_msg error -71 req 04 val 1500 [ 201.040950][ T4301] pwc: recv_control_msg error -71 req 02 val 2500 [ 201.060975][ T4301] pwc: recv_control_msg error -71 req 02 val 2400 [ 201.083176][ T4301] pwc: recv_control_msg error -71 req 02 val 2600 [ 201.118429][ T4301] pwc: recv_control_msg error -71 req 02 val 2900 [ 201.140821][ T4301] pwc: recv_control_msg error -71 req 02 val 2800 [ 201.163527][ T4301] pwc: recv_control_msg error -71 req 04 val 1100 [ 201.190468][ T4301] pwc: recv_control_msg error -71 req 04 val 1200 [ 201.220493][ T5279] loop2: detected capacity change from 0 to 1024 [ 201.222355][ T4301] pwc: Registered as video103. [ 201.242858][ T4301] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 201.270154][ T4301] usb 1-1: USB disconnect, device number 4 [ 201.383226][ T5279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 201.421947][ T27] audit: type=1800 audit(1742234933.769:3): pid=5279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.229" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 201.591978][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.632602][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.676702][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 201.682852][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 201.688925][ T4267] Bluetooth: hci4: command 0x0406 tx timeout [ 201.695115][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 203.045723][ T4968] device veth0_vlan entered promiscuous mode [ 203.145576][ T5292] input: syz0 as /devices/virtual/input/input8 [ 203.153078][ T5292] input: failed to attach handler leds to device input8, error: -6 [ 203.630323][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.681653][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.766168][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.774935][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.788777][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 203.799326][ T4968] device veth1_vlan entered promiscuous mode [ 203.830277][ T5297] loop3: detected capacity change from 0 to 2048 [ 203.935326][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.952355][ T5297] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.963053][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.329514][ T4968] device veth0_macvtap entered promiscuous mode [ 205.297252][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.325031][ T4968] device veth1_macvtap entered promiscuous mode [ 205.394987][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 205.454921][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.521152][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.576539][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.642855][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.695168][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.760680][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.219736][ T4968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.324280][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.426314][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.490722][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.575296][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.606036][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.643404][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.714683][ T4968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.768638][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.804663][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.902240][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.989111][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.072671][ T5325] netlink: 'syz.1.238': attribute type 1 has an invalid length. [ 208.105054][ T5325] netlink: 'syz.1.238': attribute type 4 has an invalid length. [ 208.121634][ T5325] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.238'. [ 208.150936][ T4968] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.159700][ T4968] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.247570][ T4968] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.293948][ T4968] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.011028][ T5341] loop1: detected capacity change from 0 to 256 [ 210.248296][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.265290][ T5341] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 211.025982][ T5352] loop2: detected capacity change from 0 to 256 [ 211.033828][ T5352] FAT-fs (loop2): Unrecognized mount option "utf8W0" or missing value [ 211.214632][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.342864][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.400352][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.450860][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.481296][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.520568][ T5341] exFAT-fs (loop1): hint_cluster is invalid (17) [ 211.767125][ T5361] loop0: detected capacity change from 0 to 2048 [ 211.897846][ T5361] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 212.057084][ T5369] loop1: detected capacity change from 0 to 512 [ 212.126991][ T5369] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 212.233502][ T5369] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.247: iget: bad extended attribute block 512 [ 212.255207][ T5369] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.247: couldn't read orphan inode 15 (err -117) [ 212.282281][ T5369] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 212.436468][ T5381] random: crng reseeded on system resumption [ 213.296892][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 213.553005][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 213.652861][ T5388] loop3: detected capacity change from 0 to 256 [ 213.790384][ T5393] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 213.820686][ T5393] netlink: 'syz.2.251': attribute type 4 has an invalid length. [ 213.901365][ T5393] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.251'. [ 215.428637][ T5408] loop2: detected capacity change from 0 to 1024 [ 216.067743][ T5420] loop0: detected capacity change from 0 to 512 [ 216.252111][ T5420] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 216.900848][ T5420] EXT4-fs error (device loop0): __ext4_iget:5055: inode #2: block 3072: comm syz.0.257: invalid block [ 216.932334][ T5420] EXT4-fs (loop0): get root inode failed [ 216.938266][ T5420] EXT4-fs (loop0): mount failed [ 217.221875][ T5430] loop1: detected capacity change from 0 to 2048 [ 217.445051][ T5430] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 217.572339][ T5436] loop0: detected capacity change from 0 to 512 [ 217.606524][ T5436] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 217.762364][ T5436] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.260: iget: bad extended attribute block 512 [ 217.786560][ T5436] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.260: couldn't read orphan inode 15 (err -117) [ 217.829916][ T5436] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 218.734795][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 219.042127][ T3993] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 219.060875][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 219.246901][ T3993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.285156][ T3993] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 219.791485][ T3993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.814273][ T3993] usb 3-1: config 0 descriptor?? [ 219.828039][ T3993] pwc: Askey VC010 type 2 USB webcam detected. [ 221.085036][ T5466] loop0: detected capacity change from 0 to 2048 [ 221.202192][ T3993] pwc: recv_control_msg error -71 req 02 val 2b00 [ 221.221944][ T3993] pwc: recv_control_msg error -71 req 02 val 2700 [ 221.259578][ T3993] pwc: recv_control_msg error -71 req 02 val 2c00 [ 221.352002][ T3993] pwc: recv_control_msg error -71 req 04 val 1000 [ 222.023362][ T5466] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 222.165367][ T3993] pwc: recv_control_msg error -71 req 04 val 1300 [ 222.180623][ T3993] pwc: recv_control_msg error -71 req 04 val 1400 [ 222.260635][ T3993] pwc: recv_control_msg error -71 req 02 val 2000 [ 222.333362][ T3993] pwc: recv_control_msg error -71 req 02 val 2100 [ 222.378214][ T3993] pwc: recv_control_msg error -71 req 04 val 1500 [ 222.414003][ T3993] pwc: recv_control_msg error -71 req 02 val 2500 [ 222.446955][ T5481] loop1: detected capacity change from 0 to 512 [ 222.455958][ T3993] pwc: recv_control_msg error -71 req 02 val 2400 [ 222.491965][ T3993] pwc: recv_control_msg error -71 req 02 val 2600 [ 222.598335][ T5481] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 222.646193][ T3993] pwc: recv_control_msg error -71 req 02 val 2900 [ 222.656714][ T5483] loop2: detected capacity change from 0 to 1024 [ 222.671493][ T3993] pwc: recv_control_msg error -71 req 02 val 2800 [ 222.688511][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 222.730296][ T3993] pwc: recv_control_msg error -71 req 04 val 1100 [ 222.946048][ T5481] EXT4-fs error (device loop1): __ext4_iget:5055: inode #2: block 3072: comm syz.1.270: invalid block [ 223.617788][ T3993] pwc: recv_control_msg error -71 req 04 val 1200 [ 223.626794][ T3993] pwc: Registered as video103. [ 223.635049][ T3993] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 223.647896][ T3993] usb 3-1: USB disconnect, device number 7 [ 223.687965][ T5481] EXT4-fs (loop1): get root inode failed [ 223.700967][ T5481] EXT4-fs (loop1): mount failed [ 224.420966][ T5502] loop1: detected capacity change from 0 to 2048 [ 224.495444][ T5502] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 224.550048][ T5508] loop2: detected capacity change from 0 to 512 [ 224.756755][ T5508] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 224.823453][ T5508] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.274: iget: bad extended attribute block 512 [ 224.836569][ T5508] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.274: couldn't read orphan inode 15 (err -117) [ 224.856819][ T5508] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 227.778368][ T5519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.276'. [ 227.841917][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 227.849402][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 228.815040][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.828969][ T4267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.838617][ T4267] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.857923][ T4267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.077684][ T4267] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 229.086671][ T4267] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.155029][ T5546] netlink: 76 bytes leftover after parsing attributes in process `syz.5.283'. [ 229.685140][ T5542] lo speed is unknown, defaulting to 1000 [ 229.924396][ T5554] loop0: detected capacity change from 0 to 512 [ 230.205620][ T5554] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 230.651155][ T5554] EXT4-fs error (device loop0): __ext4_iget:5055: inode #2: block 3072: comm syz.0.284: invalid block [ 230.771854][ T5554] EXT4-fs (loop0): get root inode failed [ 230.813736][ T5554] EXT4-fs (loop0): mount failed [ 231.046349][ T5562] loop1: detected capacity change from 0 to 2048 [ 231.487053][ T5542] chnl_net:caif_netlink_parms(): no params data found [ 231.495234][ T4267] Bluetooth: hci1: command 0x0409 tx timeout [ 231.587579][ T5562] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 232.007383][ T5580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.290'. [ 232.050252][ T5573] netlink: 'syz.5.289': attribute type 1 has an invalid length. [ 232.171531][ T5573] netlink: 'syz.5.289': attribute type 4 has an invalid length. [ 232.228032][ T5573] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.289'. [ 232.418275][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 232.702296][ T5542] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.767940][ T5542] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.796655][ T5542] device bridge_slave_0 entered promiscuous mode [ 232.827293][ T5542] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.853634][ T5542] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.895813][ T5597] loop0: detected capacity change from 0 to 1024 [ 232.896333][ T5542] device bridge_slave_1 entered promiscuous mode [ 232.939258][ T5597] EXT4-fs: Ignoring removed orlov option [ 232.982329][ T5597] EXT4-fs (loop0): Test dummy encryption mode enabled [ 233.023594][ T5542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.059484][ T5597] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 233.101443][ T5542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.111345][ T5603] loop1: detected capacity change from 0 to 1024 [ 233.164550][ T5542] team0: Port device team_slave_0 added [ 233.173754][ T5542] team0: Port device team_slave_1 added [ 233.200601][ T5542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.207718][ T5542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.262006][ T5542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.322880][ T5542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.376244][ T5542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.059100][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 234.404633][ T5542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.415187][ T4296] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 234.436163][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 234.590757][ T4296] usb 6-1: Using ep0 maxpacket: 32 [ 234.597790][ T4296] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 234.668198][ T4296] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 234.726607][ T4296] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 234.775210][ T4296] usb 6-1: Product: syz [ 234.807440][ T4296] usb 6-1: Manufacturer: syz [ 234.853821][ T5626] loop0: detected capacity change from 0 to 1024 [ 234.861324][ T4296] usb 6-1: SerialNumber: syz [ 234.891535][ T4296] usb 6-1: config 0 descriptor?? [ 234.910798][ T5606] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 235.077865][ T5628] netlink: 'syz.1.302': attribute type 1 has an invalid length. [ 235.106552][ T5628] netlink: 'syz.1.302': attribute type 4 has an invalid length. [ 235.155418][ T5606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.157471][ T5628] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.302'. [ 235.167660][ T5606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.202606][ T5542] device hsr_slave_0 entered promiscuous mode [ 235.210855][ T5606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.219439][ T5606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.240109][ T5542] device hsr_slave_1 entered promiscuous mode [ 235.257984][ T5606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.274981][ T5542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.298359][ T5606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.301884][ T5542] Cannot create hsr debugfs directory [ 235.429360][ T5638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.508304][ T5638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.573032][ T5638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.622682][ T5638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.929713][ T5542] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.975784][ T5542] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 236.054821][ T5542] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 236.086346][ T5644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.304'. [ 236.141055][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 236.367633][ T5542] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 236.811858][ T4297] usb 6-1: USB disconnect, device number 2 [ 236.886694][ T5542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.958256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.047859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.463162][ T5669] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 237.472795][ T5669] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 237.485271][ T5669] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 238.820863][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 239.098558][ T5668] slcan: can't register candev [ 239.104569][ T5668] Falling back ldisc for ttyS3. [ 239.396638][ T5673] loop0: detected capacity change from 0 to 1024 [ 239.405539][ T5542] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.425471][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.478056][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.502471][ T5673] EXT4-fs: Ignoring removed orlov option [ 239.551347][ T4490] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.558500][ T4490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.574576][ T5673] EXT4-fs (loop0): Test dummy encryption mode enabled [ 239.637382][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.661242][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.669452][ T5673] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 239.712321][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.719529][ T4490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.881553][ T5679] netlink: 'syz.2.312': attribute type 1 has an invalid length. [ 239.901267][ T5679] netlink: 'syz.2.312': attribute type 4 has an invalid length. [ 239.928203][ T5679] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.312'. [ 240.555078][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.564144][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 240.569778][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.579184][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.591209][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.602106][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.617751][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.627306][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.636752][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.645811][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.681946][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.809196][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.844647][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.620699][ T5707] lo speed is unknown, defaulting to 1000 [ 243.067019][ T5716] loop5: detected capacity change from 0 to 1024 [ 243.086609][ T5692] loop2: detected capacity change from 0 to 32768 [ 243.119987][ T5692] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.314 (5692) [ 243.136485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.161891][ T5692] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.178842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.229550][ T5542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.240999][ T5692] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 243.260483][ T5692] BTRFS info (device loop2): using free space tree [ 243.278270][ T5718] loop1: detected capacity change from 0 to 2048 [ 243.391879][ T5718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 243.583710][ T5692] BTRFS info (device loop2): enabling ssd optimizations [ 243.756413][ T4249] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.313685][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 244.404621][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.429337][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.539552][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.564082][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.682631][ T5542] device veth0_vlan entered promiscuous mode [ 244.723127][ T5542] device veth1_vlan entered promiscuous mode [ 244.789434][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.829987][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.088586][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.255859][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.462770][ T5778] slcan: can't register candev [ 245.467767][ T5778] Falling back ldisc for ttyS3. [ 245.668304][ T5786] netlink: 'syz.5.324': attribute type 1 has an invalid length. [ 245.717619][ T5786] netlink: 'syz.5.324': attribute type 4 has an invalid length. [ 245.765964][ T5789] loop1: detected capacity change from 0 to 1024 [ 245.773426][ T5789] EXT4-fs: Ignoring removed orlov option [ 245.800723][ T5786] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.324'. [ 245.819198][ T5789] EXT4-fs (loop1): Test dummy encryption mode enabled [ 245.874374][ T5789] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 245.884522][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.912390][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.999021][ T5542] device veth0_macvtap entered promiscuous mode [ 246.094736][ T5542] device veth1_macvtap entered promiscuous mode [ 246.225373][ T5794] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 246.234323][ T5794] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 246.246164][ T5794] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 247.707348][ T5800] loop5: detected capacity change from 0 to 512 [ 247.747875][ T5800] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 247.827396][ T5800] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.326: iget: bad extended attribute block 512 [ 247.876790][ T5800] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.326: couldn't read orphan inode 15 (err -117) [ 247.907279][ T5800] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 248.074152][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 248.452807][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.583911][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.723550][ T5542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.795258][ T5542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.862362][ T5542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.927068][ T5542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.937661][ T5542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.948861][ T5542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.958824][ T5542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.969344][ T5542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.981005][ T5542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.990175][ T4968] EXT4-fs (loop5): unmounting filesystem. [ 249.090031][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.125056][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.154553][ T5542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.185497][ T5542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.219756][ T5542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.260739][ T5542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.302838][ T5542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.324340][ T5542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.360736][ T5542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.385899][ T5542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.404215][ T5542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.439726][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.449329][ T5826] loop0: detected capacity change from 0 to 2048 [ 249.453783][ T5825] loop5: detected capacity change from 0 to 1024 [ 249.466135][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.482137][ T5542] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.498579][ T5542] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.510258][ T5542] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.526626][ T5542] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.762047][ T5826] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 249.865866][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.906729][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.038849][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.112330][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.154656][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.167197][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.372732][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 250.494053][ T5839] loop2: detected capacity change from 0 to 512 [ 250.534355][ T5839] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 250.883743][ T5839] EXT4-fs error (device loop2): __ext4_iget:5055: inode #2: block 3072: comm syz.2.334: invalid block [ 251.568743][ T5851] can0: slcan on ttyS3. [ 251.942814][ T5839] EXT4-fs (loop2): get root inode failed [ 251.955226][ T5839] EXT4-fs (loop2): mount failed [ 252.172512][ T5844] can0 (unregistered): slcan off ttyS3. [ 252.318066][ T3993] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 252.467597][ T5857] loop5: detected capacity change from 0 to 1024 [ 252.475195][ T5857] EXT4-fs: Ignoring removed orlov option [ 252.511915][ T5857] EXT4-fs (loop5): Test dummy encryption mode enabled [ 252.550933][ T3993] usb 1-1: Using ep0 maxpacket: 32 [ 252.558410][ T3993] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 252.589273][ T5857] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 252.637243][ T3993] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 252.656909][ T3993] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 252.666615][ T3993] usb 1-1: Product: syz [ 252.671147][ T3993] usb 1-1: Manufacturer: syz [ 252.676723][ T3993] usb 1-1: SerialNumber: syz [ 252.684742][ T3993] usb 1-1: config 0 descriptor?? [ 252.695887][ T5843] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 252.932857][ T5843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.983999][ T5843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.471452][ T5843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.530313][ T5843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.630135][ T5843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.711018][ T5843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.863456][ T4968] EXT4-fs (loop5): unmounting filesystem. [ 253.882302][ T5878] loop2: detected capacity change from 0 to 2048 [ 253.889520][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.901461][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.911712][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.925045][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.138996][ T5878] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 255.113451][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 255.987211][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.993667][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.081249][ T4301] usb 1-1: USB disconnect, device number 5 [ 256.219306][ T5902] loop2: detected capacity change from 0 to 1024 [ 256.588644][ T5914] loop6: detected capacity change from 0 to 512 [ 256.616492][ T5914] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 256.672054][ T5914] EXT4-fs error (device loop6): __ext4_iget:5055: inode #2: block 3072: comm syz.6.350: invalid block [ 256.698796][ T5914] EXT4-fs (loop6): get root inode failed [ 256.732905][ T5914] EXT4-fs (loop6): mount failed [ 257.278694][ T5932] loop1: detected capacity change from 0 to 1024 [ 257.286335][ T5932] EXT4-fs: Ignoring removed orlov option [ 257.293380][ T5932] EXT4-fs (loop1): Test dummy encryption mode enabled [ 257.388007][ T5932] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 259.455717][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 260.660770][ T4427] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 261.087933][ T5960] loop5: detected capacity change from 0 to 512 [ 261.139406][ T4427] usb 1-1: device descriptor read/all, error -71 [ 261.246767][ T5960] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 261.350661][ T5960] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.363: iget: bad extended attribute block 512 [ 261.441860][ T5960] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.363: couldn't read orphan inode 15 (err -117) [ 261.487751][ T5960] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 261.554990][ T5974] loop2: detected capacity change from 0 to 1024 [ 262.681425][ T4968] EXT4-fs (loop5): unmounting filesystem. [ 262.873458][ T5993] loop5: detected capacity change from 0 to 1024 [ 262.891332][ T5995] loop1: detected capacity change from 0 to 512 [ 262.908849][ T5993] EXT4-fs: Ignoring removed orlov option [ 262.938545][ T5995] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 262.954195][ T5993] EXT4-fs (loop5): Test dummy encryption mode enabled [ 263.001070][ T5995] EXT4-fs error (device loop1): __ext4_iget:5055: inode #2: block 3072: comm syz.1.371: invalid block [ 263.039702][ T5993] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 263.074792][ T5995] EXT4-fs (loop1): get root inode failed [ 263.080211][ T5964] loop6: detected capacity change from 0 to 32768 [ 263.133220][ T5964] (syz.6.365,5964,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 263.147592][ T5995] EXT4-fs (loop1): mount failed [ 263.235421][ T5964] (syz.6.365,5964,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 264.128434][ T5964] JBD2: Ignoring recovery information on journal [ 264.311528][ T5964] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 264.596959][ T6014] lo speed is unknown, defaulting to 1000 [ 265.675808][ T5542] ocfs2: Unmounting device (7,6) on (node local) [ 266.810281][ T6044] loop1: detected capacity change from 0 to 512 [ 266.853365][ T6044] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 266.948434][ T6044] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.381: iget: bad extended attribute block 512 [ 267.007569][ T6044] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.381: couldn't read orphan inode 15 (err -117) [ 267.040676][ T4296] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 267.061168][ T6044] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 267.242966][ T4296] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.285033][ T4296] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 267.336702][ T4296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.863860][ T4296] usb 7-1: config 0 descriptor?? [ 268.148533][ T4296] pwc: Askey VC010 type 2 USB webcam detected. [ 268.424940][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 268.432402][ T4968] EXT4-fs (loop5): unmounting filesystem. [ 268.726131][ T4296] pwc: recv_control_msg error -71 req 02 val 2700 [ 268.750208][ T4296] pwc: recv_control_msg error -71 req 02 val 2c00 [ 268.804590][ T4296] pwc: recv_control_msg error -71 req 04 val 1000 [ 268.887252][ T4296] pwc: recv_control_msg error -71 req 04 val 1300 [ 269.652657][ T4296] pwc: recv_control_msg error -71 req 04 val 1400 [ 269.665329][ T4296] pwc: recv_control_msg error -71 req 02 val 2000 [ 269.709657][ T4296] pwc: recv_control_msg error -71 req 02 val 2100 [ 269.725745][ T4296] pwc: recv_control_msg error -71 req 04 val 1500 [ 269.821464][ T4296] pwc: recv_control_msg error -71 req 02 val 2500 [ 269.830914][ T4296] pwc: recv_control_msg error -71 req 02 val 2400 [ 269.850630][ T4296] pwc: recv_control_msg error -71 req 02 val 2600 [ 269.870917][ T4296] pwc: recv_control_msg error -71 req 02 val 2900 [ 269.909266][ T4296] pwc: recv_control_msg error -71 req 02 val 2800 [ 269.937910][ T4296] pwc: recv_control_msg error -71 req 04 val 1100 [ 270.043265][ T4296] pwc: recv_control_msg error -71 req 04 val 1200 [ 270.130663][ T4296] pwc: Registered as video103. [ 271.509123][ T4296] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10 [ 271.877419][ T4296] usb 7-1: USB disconnect, device number 2 [ 272.842008][ T6108] loop0: detected capacity change from 0 to 1024 [ 272.869910][ T6108] EXT4-fs: Ignoring removed orlov option [ 272.901591][ T6108] EXT4-fs (loop0): Test dummy encryption mode enabled [ 273.063331][ T6108] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 275.439453][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 275.581128][ T4330] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 275.922393][ T4330] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.304678][ T6144] loop0: detected capacity change from 0 to 2048 [ 277.320631][ T4330] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 277.382232][ T4330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.418301][ T4330] usb 7-1: config 0 descriptor?? [ 277.449817][ T4330] pwc: Askey VC010 type 2 USB webcam detected. [ 277.476044][ T6144] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 277.985150][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 278.052319][ T4330] pwc: recv_control_msg error -71 req 02 val 2700 [ 278.069108][ T4330] pwc: recv_control_msg error -71 req 02 val 2c00 [ 278.117909][ T4330] pwc: recv_control_msg error -71 req 04 val 1000 [ 278.139786][ T4330] pwc: recv_control_msg error -71 req 04 val 1300 [ 278.190712][ T4330] pwc: recv_control_msg error -71 req 04 val 1400 [ 278.200774][ T4330] pwc: recv_control_msg error -71 req 02 val 2000 [ 278.227728][ T4330] pwc: recv_control_msg error -71 req 02 val 2100 [ 278.267848][ T4330] pwc: recv_control_msg error -71 req 04 val 1500 [ 278.293241][ T4330] pwc: recv_control_msg error -71 req 02 val 2500 [ 278.330371][ T4330] pwc: recv_control_msg error -71 req 02 val 2400 [ 278.344261][ T4330] pwc: recv_control_msg error -71 req 02 val 2600 [ 278.810798][ T4296] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 278.923580][ T4330] pwc: recv_control_msg error -71 req 02 val 2900 [ 278.933768][ T4330] pwc: recv_control_msg error -71 req 02 val 2800 [ 278.941425][ T4330] pwc: recv_control_msg error -71 req 04 val 1100 [ 278.959798][ T4330] pwc: recv_control_msg error -71 req 04 val 1200 [ 278.976342][ T4330] pwc: Registered as video103. [ 278.987944][ T4330] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input11 [ 279.000750][ T4296] usb 6-1: Using ep0 maxpacket: 32 [ 279.008274][ T4296] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 279.052034][ T6188] loop6: detected capacity change from 0 to 1024 [ 279.059364][ T4296] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 279.060806][ T4330] usb 7-1: USB disconnect, device number 3 [ 279.086872][ T6188] EXT4-fs: Ignoring removed orlov option [ 279.096104][ T6188] EXT4-fs (loop6): Test dummy encryption mode enabled [ 279.115182][ T6188] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 279.270669][ T4296] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 279.290580][ T4296] usb 6-1: Product: syz [ 279.294905][ T4296] usb 6-1: Manufacturer: syz [ 279.299534][ T4296] usb 6-1: SerialNumber: syz [ 279.306223][ T4296] usb 6-1: config 0 descriptor?? [ 279.330578][ T6178] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 281.129784][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.231471][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.292680][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.296992][ T5542] EXT4-fs (loop6): unmounting filesystem. [ 281.330946][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.343081][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.353848][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.383912][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.510211][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.557541][ T4330] usb 6-1: USB disconnect, device number 3 [ 281.613778][ T6204] loop0: detected capacity change from 0 to 2048 [ 281.616444][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.416'. [ 281.817343][ T6204] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 283.405870][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 284.815298][ T6241] loop1: detected capacity change from 0 to 1024 [ 285.144125][ T6241] EXT4-fs: Ignoring removed orlov option [ 285.152876][ T6248] loop5: detected capacity change from 0 to 512 [ 285.182515][ T6241] EXT4-fs (loop1): Test dummy encryption mode enabled [ 285.195226][ T6248] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 285.251506][ T6241] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 285.460300][ T6248] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.426: iget: bad extended attribute block 512 [ 286.771272][ T6248] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.426: couldn't read orphan inode 15 (err -117) [ 286.842563][ T6259] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 287.194880][ T6248] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 287.955608][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 288.063930][ T6263] loop2: detected capacity change from 0 to 2048 [ 288.596774][ T6267] loop6: detected capacity change from 0 to 512 [ 288.682972][ T6267] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 288.704538][ T6263] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 288.733732][ T4968] EXT4-fs (loop5): unmounting filesystem. [ 289.003263][ T6267] EXT4-fs error (device loop6): __ext4_iget:5055: inode #2: block 3072: comm syz.6.430: invalid block [ 289.031209][ T6267] EXT4-fs (loop6): get root inode failed [ 289.037083][ T6267] EXT4-fs (loop6): mount failed [ 289.870995][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 289.979663][ T4747] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.090765][ T4296] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 290.331185][ T4296] usb 6-1: Using ep0 maxpacket: 32 [ 290.340597][ T4330] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 290.362066][ T4296] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 290.388687][ T4296] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 290.417149][ T4296] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 290.464201][ T4296] usb 6-1: Product: syz [ 290.468466][ T4296] usb 6-1: Manufacturer: syz [ 290.490754][ T4296] usb 6-1: SerialNumber: syz [ 290.512122][ T4296] usb 6-1: config 0 descriptor?? [ 290.526741][ T6284] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 290.548571][ T4330] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.583975][ T4330] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 290.627201][ T4330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.660650][ T4330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 290.697249][ T4330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 290.762546][ T4330] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.763521][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.777742][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.834954][ T4330] usb 2-1: Product: syz [ 290.844010][ T4330] usb 2-1: Manufacturer: syz [ 290.852366][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.868958][ T4330] cdc_wdm 2-1:1.0: skipping garbage [ 290.891440][ T4330] cdc_wdm 2-1:1.0: skipping garbage [ 290.906417][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.935228][ T4330] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 290.947343][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.980779][ T4330] cdc_wdm 2-1:1.0: Unknown control protocol [ 290.989071][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.048985][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.071763][ T4435] usb 2-1: USB disconnect, device number 10 [ 291.198835][ T6307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.251712][ T6307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.272172][ T4296] usb 6-1: USB disconnect, device number 4 [ 291.390414][ T6310] loop0: detected capacity change from 0 to 2048 [ 291.405726][ T6310] UDF-fs: bad mount option "ÿÿÿÿ00000000000000000000" or missing value [ 291.469420][ T4748] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 291.566799][ T6310] loop0: detected capacity change from 0 to 128 [ 291.624065][ T4748] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 291.650607][ T4435] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 291.860648][ T4435] usb 7-1: Using ep0 maxpacket: 8 [ 291.871499][ T4435] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 291.904876][ T4435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.167657][ T4435] usb 7-1: Product: syz [ 292.292078][ T4435] usb 7-1: Manufacturer: syz [ 292.298761][ T4435] usb 7-1: SerialNumber: syz [ 292.306163][ T4435] usb 7-1: config 0 descriptor?? [ 292.519779][ T4435] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 292.598467][ T6325] loop5: detected capacity change from 0 to 1024 [ 292.608026][ T6325] EXT4-fs: Ignoring removed orlov option [ 292.628678][ T6325] EXT4-fs (loop5): Test dummy encryption mode enabled [ 292.662510][ T6325] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 292.673110][ T6326] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 294.288190][ T4435] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32 [ 294.744122][ T4968] EXT4-fs (loop5): unmounting filesystem. [ 294.780375][ T4330] usb 7-1: USB disconnect, device number 4 [ 294.819801][ T6334] loop2: detected capacity change from 0 to 512 [ 294.858238][ T6334] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 294.986906][ T6334] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.443: iget: bad extended attribute block 512 [ 295.111805][ T6334] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.443: couldn't read orphan inode 15 (err -117) [ 295.146588][ T6341] loop5: detected capacity change from 0 to 2048 [ 295.161904][ T6334] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 295.279830][ T6341] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 297.602429][ T6362] ipt_ECN: cannot use operation on non-tcp rule [ 297.628819][ T6362] netlink: 72 bytes leftover after parsing attributes in process `syz.0.449'. [ 297.883779][ T4968] EXT4-fs (loop5): unmounting filesystem. [ 297.948187][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 299.593316][ T6375] loop2: detected capacity change from 0 to 1024 [ 299.651879][ T6375] EXT4-fs: Ignoring removed orlov option [ 299.694927][ T6375] EXT4-fs (loop2): Test dummy encryption mode enabled [ 299.789890][ T6375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 299.811056][ T6376] loop5: detected capacity change from 0 to 2048 [ 299.900049][ T6376] NILFS (loop5): unrecognized mount option "cgroup.type" [ 300.180240][ T4490] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.780763][ T6384] cgroup: Unknown subsys name 'subj_role' [ 300.912720][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 300.994236][ T6388] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 302.168937][ T4490] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.339528][ T6392] loop2: detected capacity change from 0 to 1024 [ 302.362696][ T4490] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.721610][ T6399] loop5: detected capacity change from 0 to 2048 [ 302.732798][ T4490] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.804680][ T6399] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 303.176920][ T6411] loop6: detected capacity change from 0 to 512 [ 303.319874][ T6411] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 303.489865][ T6411] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.463: iget: bad extended attribute block 512 [ 303.551922][ T4968] EXT4-fs (loop5): unmounting filesystem. [ 303.558263][ T6411] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.463: couldn't read orphan inode 15 (err -117) [ 303.636880][ T6411] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 304.898306][ T5542] EXT4-fs (loop6): unmounting filesystem. [ 305.000759][ T6425] loop5: detected capacity change from 0 to 256 [ 305.007971][ T6425] exfat: Bad value for 'uid' [ 305.687463][ T6433] loop6: detected capacity change from 0 to 1024 [ 305.765569][ T6433] EXT4-fs: Ignoring removed orlov option [ 305.818621][ T6433] EXT4-fs (loop6): Test dummy encryption mode enabled [ 305.920149][ T6433] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 308.293481][ T5542] EXT4-fs (loop6): unmounting filesystem. [ 308.664293][ T6454] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 308.792693][ T6458] loop0: detected capacity change from 0 to 2048 [ 308.919792][ T6458] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 308.932122][ T4490] bond0: (slave wlan1): Releasing backup interface [ 310.468150][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 310.818660][ T4330] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 311.053659][ T4330] usb 7-1: Using ep0 maxpacket: 32 [ 311.510846][ T4330] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 311.850404][ T4330] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 312.027184][ T4330] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 312.057047][ T4330] usb 7-1: Product: syz [ 312.084913][ T4330] usb 7-1: Manufacturer: syz [ 312.093934][ T6488] loop1: detected capacity change from 0 to 1024 [ 312.099004][ T4330] usb 7-1: SerialNumber: syz [ 312.107268][ T6488] EXT4-fs: Ignoring removed orlov option [ 312.123352][ T6488] EXT4-fs (loop1): Test dummy encryption mode enabled [ 312.138255][ T4330] usb 7-1: config 0 descriptor?? [ 312.275646][ T6476] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 312.344734][ T6488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 312.676212][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.860201][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.061938][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.121392][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.148597][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.231287][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.307208][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.331181][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.363732][ T4330] usb 7-1: USB disconnect, device number 5 [ 313.411401][ T4490] device hsr_slave_0 left promiscuous mode [ 313.440461][ T4490] device hsr_slave_1 left promiscuous mode [ 313.471359][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.478949][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.547456][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.560634][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.588258][ T4490] device bridge_slave_1 left promiscuous mode [ 313.610756][ T4490] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.649503][ T4490] device bridge_slave_0 left promiscuous mode [ 313.668595][ T4490] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.892905][ T6505] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 313.926603][ T4490] device veth1_macvtap left promiscuous mode [ 315.180688][ T4490] device veth0_macvtap left promiscuous mode [ 315.241303][ T4490] device veth1_vlan left promiscuous mode [ 315.247200][ T4490] device veth0_vlan left promiscuous mode [ 315.644669][ T6514] loop6: detected capacity change from 0 to 2048 [ 315.762901][ T6514] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 315.963963][ T4301] infiniband syz2: ib_query_port failed (-19) [ 316.006896][ T6501] loop0: detected capacity change from 0 to 32768 [ 316.045376][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 316.086983][ T6501] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.485 (6501) [ 316.138301][ T6501] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 316.207110][ T6501] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 316.227089][ T6501] BTRFS info (device loop0): metadata ratio 4 [ 316.236661][ T6501] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 316.254216][ T6501] BTRFS info (device loop0): force lzo compression, level 0 [ 316.294892][ T6501] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 316.349295][ T6501] BTRFS info (device loop0): trying to use backup root at mount time [ 316.423330][ T6501] BTRFS info (device loop0): doing ref verification [ 316.432394][ T6501] BTRFS info (device loop0): disabling tree log [ 316.551400][ T6501] BTRFS info (device loop0): using free space tree [ 316.681513][ T5542] EXT4-fs (loop6): unmounting filesystem. [ 317.189842][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.196354][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.205118][ T6501] BTRFS error (device loop0): open_ctree failed: -12 [ 317.689768][ T6548] loop6: detected capacity change from 0 to 256 [ 317.703327][ T6548] exfat: Bad value for 'uid' [ 320.154021][ T6567] netlink: 76 bytes leftover after parsing attributes in process `syz.6.497'. [ 320.413994][ T4490] team0 (unregistering): Port device team_slave_1 removed [ 320.788773][ T4490] team0 (unregistering): Port device team_slave_0 removed [ 321.079944][ T4490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.173744][ T4490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.754695][ T6577] loop0: detected capacity change from 0 to 1024 [ 321.762132][ T6577] EXT4-fs: Ignoring removed orlov option [ 321.779545][ T6577] EXT4-fs (loop0): Test dummy encryption mode enabled [ 321.838153][ T6577] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 321.874757][ T6581] loop6: detected capacity change from 0 to 2048 [ 321.921648][ T6581] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 322.805009][ T5542] EXT4-fs (loop6): unmounting filesystem. [ 322.851482][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 322.932042][ T4490] bond0 (unregistering): Released all slaves [ 323.710869][ T6607] loop0: detected capacity change from 0 to 256 [ 323.722136][ T6607] exfat: Bad value for 'uid' [ 323.954827][ T6609] netlink: 76 bytes leftover after parsing attributes in process `syz.6.508'. [ 324.852179][ T4748] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 326.694823][ T6626] loop2: detected capacity change from 0 to 4096 [ 326.926995][ T6633] loop6: detected capacity change from 0 to 1024 [ 327.009417][ T6633] EXT4-fs: Ignoring removed orlov option [ 327.047184][ T6633] EXT4-fs (loop6): Test dummy encryption mode enabled [ 327.315462][ T6633] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 328.164800][ T6644] tty tty24: ldisc open failed (-12), clearing slot 23 [ 328.807792][ T5542] EXT4-fs (loop6): unmounting filesystem. [ 329.424732][ T6658] netlink: 76 bytes leftover after parsing attributes in process `syz.6.519'. [ 329.833994][ T6663] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 329.840573][ T6663] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 329.900866][ T5758] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 329.950685][ T6663] vhci_hcd vhci_hcd.0: Device attached [ 329.974990][ T6664] vhci_hcd: connection closed [ 329.977891][ T41] vhci_hcd: stop threads [ 330.020784][ T41] vhci_hcd: release socket [ 330.034247][ T41] vhci_hcd: disconnect device [ 330.090616][ T5758] usb 3-1: Using ep0 maxpacket: 32 [ 330.098847][ T5758] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 330.190004][ T5758] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 330.251497][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 330.359097][ T6673] loop1: detected capacity change from 0 to 256 [ 330.371230][ T6673] exfat: Bad value for 'uid' [ 330.730584][ T5758] usb 3-1: Product: syz [ 330.882514][ T5758] usb 3-1: Manufacturer: syz [ 330.903502][ T5758] usb 3-1: SerialNumber: syz [ 330.972472][ T5758] usb 3-1: config 0 descriptor?? [ 330.978159][ T6657] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 331.219537][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.231008][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.281998][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.474646][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.533371][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.742072][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.998622][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.082527][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.178719][ T4444] usb 3-1: USB disconnect, device number 8 [ 332.415438][ T6694] loop6: detected capacity change from 0 to 1024 [ 332.451694][ T6694] EXT4-fs: Ignoring removed orlov option [ 332.551767][ T6694] EXT4-fs (loop6): Test dummy encryption mode enabled [ 333.364591][ T6694] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 336.047571][ T5542] EXT4-fs (loop6): unmounting filesystem. [ 337.789859][ T6732] netlink: 76 bytes leftover after parsing attributes in process `syz.6.534'. [ 338.185845][ T6735] loop5: detected capacity change from 0 to 256 [ 338.193009][ T6735] exfat: Bad value for 'uid' [ 339.046372][ T4748] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 342.260611][ T5753] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 343.260577][ T6768] trusted_key: encrypted_key: key user:syz not found [ 343.817187][ T6767] Driver unsupported XDP return value 0 on prog (id 72) dev N/A, expect packet loss! [ 344.022634][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.054611][ T5753] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 344.104040][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.149883][ T5753] usb 2-1: config 0 descriptor?? [ 344.163116][ T6773] loop0: detected capacity change from 0 to 1024 [ 344.620771][ T22] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 344.705799][ T6784] netlink: 76 bytes leftover after parsing attributes in process `syz.5.547'. [ 344.820918][ T22] usb 7-1: Using ep0 maxpacket: 32 [ 344.845717][ T22] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 345.198298][ T22] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 345.232063][ T5753] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 345.286681][ T5753] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input12 [ 345.407081][ T22] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 345.415447][ T22] usb 7-1: Product: syz [ 345.419652][ T22] usb 7-1: Manufacturer: syz [ 345.425218][ T22] usb 7-1: SerialNumber: syz [ 345.613764][ T6790] loop2: detected capacity change from 0 to 256 [ 345.620939][ T6790] exfat: Bad value for 'uid' [ 345.650790][ T22] usb 7-1: config 0 descriptor?? [ 345.707256][ T6775] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 346.345951][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.371687][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.422471][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.424378][ T5753] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 346.462529][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.519563][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.554520][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.638984][ T5753] usb 2-1: USB disconnect, device number 11 [ 346.651141][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.659852][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.669540][ T5767] usb 7-1: USB disconnect, device number 6 [ 346.760397][ T6797] netlink: 'syz.5.549': attribute type 10 has an invalid length. [ 346.935985][ T6797] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 347.343352][ T6810] loop2: detected capacity change from 0 to 2 [ 347.353628][ T6810] jffs2: rp_size unrepresentable [ 348.317790][ T6816] loop5: detected capacity change from 0 to 1024 [ 348.325366][ T6816] EXT4-fs: Ignoring removed mblk_io_submit option [ 350.057447][ T6816] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f000c0ac, mo2=0002] [ 350.067458][ T6816] System zones: 0-1, 3-36 [ 350.407964][ T6816] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 350.932511][ T4968] EXT4-fs (loop5): unmounting filesystem. [ 351.817638][ T6848] netlink: 44 bytes leftover after parsing attributes in process `syz.1.559'. [ 352.936938][ T6859] loop6: detected capacity change from 0 to 256 [ 352.947636][ T6859] exfat: Bad value for 'uid' [ 353.810872][ T6840] loop2: detected capacity change from 0 to 32768 [ 353.929204][ T6840] [ 353.929204][ T6840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 353.929204][ T6840] [ 354.085816][ T6840] ERROR: (device loop2): diWrite: ixpxd invalid [ 354.085816][ T6840] [ 354.156260][ T6840] ERROR: (device loop2): remounting filesystem as read-only [ 354.188937][ T6840] ERROR: (device loop2): txCommit: [ 354.188937][ T6840] [ 354.287473][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.390732][ T5758] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 354.580672][ T5758] usb 7-1: Using ep0 maxpacket: 32 [ 354.588833][ T5758] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 354.620954][ T4330] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 354.630723][ T5758] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 354.659184][ T5758] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 354.689366][ T5758] usb 7-1: Product: syz [ 354.712501][ T5758] usb 7-1: Manufacturer: syz [ 354.717173][ T5758] usb 7-1: SerialNumber: syz [ 354.787271][ T5758] usb 7-1: config 0 descriptor?? [ 354.824006][ T6872] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 355.012827][ T4330] usb 2-1: config index 0 descriptor too short (expected 227, got 18) [ 355.024663][ T4330] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 355.059453][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.067723][ T4330] usb 2-1: Product: syz [ 355.071989][ T4330] usb 2-1: Manufacturer: syz [ 355.076611][ T4330] usb 2-1: SerialNumber: syz [ 355.191702][ T4330] usb 2-1: config 0 descriptor?? [ 355.242609][ T4330] ch341 2-1:0.0: ch341-uart converter detected [ 355.245794][ T6894] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 355.255365][ T6894] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 355.256891][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.271706][ T6894] vhci_hcd vhci_hcd.0: Device attached [ 355.278128][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.390878][ T6896] vhci_hcd: connection closed [ 355.425705][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.461063][ T4369] vhci_hcd: stop threads [ 355.477856][ T4369] vhci_hcd: release socket [ 355.529498][ T4369] vhci_hcd: disconnect device [ 355.548126][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.786964][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.982250][ T4330] usb 2-1: failed to send control message: -71 [ 355.988505][ T4330] ch341-uart: probe of ttyUSB0 failed with error -71 [ 356.006325][ T4330] usb 2-1: USB disconnect, device number 12 [ 356.020363][ T4330] ch341 2-1:0.0: device disconnected [ 356.050872][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.229010][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.281787][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.321694][ T4435] usb 7-1: USB disconnect, device number 7 [ 356.680543][ T6915] loop5: detected capacity change from 0 to 256 [ 356.690746][ T6915] exfat: Bad value for 'uid' [ 358.450169][ T6924] loop6: detected capacity change from 0 to 1024 [ 361.057909][ T6958] device syzkaller1 entered promiscuous mode [ 362.252919][ T6975] loop6: detected capacity change from 0 to 256 [ 362.266411][ T6975] exfat: Bad value for 'uid' [ 363.123789][ T4748] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 364.931903][ T7001] loop2: detected capacity change from 0 to 1024 [ 366.584588][ T7019] loop5: detected capacity change from 0 to 128 [ 366.968767][ T7015] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 366.975348][ T7015] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 366.983144][ T7015] vhci_hcd vhci_hcd.0: Device attached [ 367.090804][ T7022] vhci_hcd: connection closed [ 367.092477][ T4360] vhci_hcd: stop threads [ 367.247658][ T4360] vhci_hcd: release socket [ 367.304640][ T5767] vhci_hcd: vhci_device speed not set [ 367.390653][ T5767] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 367.432292][ T4360] vhci_hcd: disconnect device [ 367.560999][ T5767] usb 43-1: enqueue for inactive port 0 [ 367.786214][ T5767] vhci_hcd: vhci_device speed not set [ 369.966335][ T7034] loop1: detected capacity change from 0 to 4096 [ 370.020600][ T7034] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 370.478246][ T7047] loop6: detected capacity change from 0 to 1024 [ 370.534290][ T7034] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 370.709511][ T27] audit: type=1800 audit(1742235103.049:4): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.598" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 370.732118][ T7034] overlayfs: './file1' not a directory [ 373.352407][ T5767] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 373.678885][ T5767] usb 6-1: Using ep0 maxpacket: 32 [ 373.724080][ T5767] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 373.848475][ T5767] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 373.981185][ T5767] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 374.048761][ T5767] usb 6-1: Product: syz [ 374.100815][ T5767] usb 6-1: Manufacturer: syz [ 374.148588][ T5767] usb 6-1: SerialNumber: syz [ 374.182376][ T5767] usb 6-1: config 0 descriptor?? [ 374.191703][ T7067] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 374.351724][ T7083] tipc: Started in network mode [ 374.356989][ T7083] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 374.376959][ T7083] tipc: Enabled bearer , priority 0 [ 374.423841][ T7067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.021808][ T4442] tipc: Node number set to 11578026 [ 376.041038][ T7067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.154628][ T7067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.350872][ T7067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.392892][ T7067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.446921][ T7067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.534931][ T5753] usb 6-1: USB disconnect, device number 5 [ 378.400733][ T4442] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 378.600763][ T4442] usb 7-1: Using ep0 maxpacket: 8 [ 378.617186][ T4442] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 378.652754][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.681274][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.852867][ T4442] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.094050][ T4442] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.145177][ T4442] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.240720][ T4442] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.295785][ T4442] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 379.335767][ T4442] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.582800][ T4442] usb 7-1: usb_control_msg returned -32 [ 379.596482][ T4442] usbtmc 7-1:16.0: can't read capabilities [ 379.647445][ T4442] usb 7-1: USB disconnect, device number 8 [ 381.158242][ T7154] loop1: detected capacity change from 0 to 1024 [ 381.418734][ T7153] hfsplus: xattr searching failed [ 385.560560][ T4436] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 385.698222][ T41] hfsplus: b-tree write err: -5, ino 4 [ 385.750572][ T4436] usb 1-1: Using ep0 maxpacket: 32 [ 385.757819][ T4436] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 385.782469][ T4436] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 385.808664][ T4436] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 385.826708][ T4436] usb 1-1: Product: syz [ 385.841693][ T4436] usb 1-1: Manufacturer: syz [ 385.852842][ T4436] usb 1-1: SerialNumber: syz [ 385.877161][ T4436] usb 1-1: config 0 descriptor?? [ 385.889380][ T7187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 386.142923][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.170860][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.213282][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.250868][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.289014][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.314945][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.462326][ T4436] usb 1-1: USB disconnect, device number 8 [ 387.350820][ T7221] netlink: 76 bytes leftover after parsing attributes in process `syz.2.629'. [ 387.947314][ T7222] loop1: detected capacity change from 0 to 512 [ 388.059355][ T7222] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 388.103831][ T7222] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.733191][ T7242] tty tty22: ldisc open failed (-12), clearing slot 21 [ 392.155585][ T7274] loop6: detected capacity change from 0 to 128 [ 392.218070][ T7274] ext3: Bad value for 'sb' [ 394.067549][ T4748] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 394.350380][ T7281] ipt_ECN: cannot use operation on non-tcp rule [ 399.260710][ T7283] loop6: detected capacity change from 0 to 32768 [ 399.645093][ T4748] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (4748) [ 400.348683][ T7304] netlink: 76 bytes leftover after parsing attributes in process `syz.0.644'. [ 401.131272][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 401.911129][ T7322] loop6: detected capacity change from 0 to 512 [ 401.991263][ T7322] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 402.069582][ T7322] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.648: iget: bad extended attribute block 512 [ 402.121022][ T7322] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.648: couldn't read orphan inode 15 (err -117) [ 402.200645][ T7322] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 403.861294][ T5542] EXT4-fs (loop6): unmounting filesystem. [ 404.700689][ T4442] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 404.890756][ T4442] usb 1-1: Using ep0 maxpacket: 32 [ 404.906000][ T4442] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 405.682340][ T4442] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 405.732639][ T4442] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 405.749599][ T4442] usb 1-1: Product: syz [ 405.759431][ T4442] usb 1-1: Manufacturer: syz [ 405.770646][ T4442] usb 1-1: SerialNumber: syz [ 405.818122][ T4442] usb 1-1: config 0 descriptor?? [ 405.855728][ T7350] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.136931][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.217770][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.326412][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.354233][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.404219][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.441058][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.212042][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.659002][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.794993][ T7390] loop6: detected capacity change from 0 to 512 [ 407.954621][ T7390] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 408.318187][ T7390] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.663: iget: bad extended attribute block 512 [ 408.515586][ T7390] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.663: couldn't read orphan inode 15 (err -117) [ 408.689115][ T7390] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 408.793834][ T4433] usb 1-1: USB disconnect, device number 9 [ 410.075824][ T7398] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 410.082401][ T7398] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 410.180784][ T7398] vhci_hcd vhci_hcd.0: Device attached [ 410.206783][ T7401] vhci_hcd: connection closed [ 410.208393][ T6383] vhci_hcd: stop threads [ 410.259398][ T6383] vhci_hcd: release socket [ 410.294336][ T5542] EXT4-fs (loop6): unmounting filesystem. [ 410.329058][ T6383] vhci_hcd: disconnect device [ 413.217447][ T7422] netlink: 76 bytes leftover after parsing attributes in process `syz.1.668'. [ 416.072353][ T7436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 417.502720][ T22] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 417.700585][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 417.707669][ T22] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 418.975898][ T22] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 419.012401][ T22] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 419.045765][ T22] usb 2-1: Product: syz [ 419.070398][ T22] usb 2-1: Manufacturer: syz [ 419.079464][ T22] usb 2-1: SerialNumber: syz [ 419.360957][ T22] usb 2-1: config 0 descriptor?? [ 419.540605][ T22] usb 2-1: can't set config #0, error -71 [ 419.552684][ T7478] loop5: detected capacity change from 0 to 1024 [ 419.572096][ T22] usb 2-1: USB disconnect, device number 13 [ 419.575746][ T7478] EXT4-fs: Ignoring removed nobh option [ 419.601453][ T7478] EXT4-fs: Ignoring removed bh option [ 419.621521][ T7478] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 419.657836][ T7481] loop2: detected capacity change from 0 to 2 [ 419.694271][ T7481] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 419.730127][ T7478] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 420.536086][ T7478] bridge0: port 3(syz_tun) entered blocking state [ 420.542982][ T7478] bridge0: port 3(syz_tun) entered disabled state [ 420.552493][ T7478] device syz_tun entered promiscuous mode [ 420.559036][ T7478] bridge0: port 3(syz_tun) entered blocking state [ 420.565942][ T7478] bridge0: port 3(syz_tun) entered forwarding state [ 422.169276][ T4968] EXT4-fs (loop5): unmounting filesystem. [ 422.883154][ T7526] netlink: 76 bytes leftover after parsing attributes in process `syz.6.691'. [ 424.392438][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.692'. [ 426.854936][ T7573] loop5: detected capacity change from 0 to 256 [ 426.875612][ T7573] exfat: Bad value for 'uid' [ 427.736912][ T7546] loop6: detected capacity change from 0 to 32768 [ 427.771013][ T7546] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 427.793466][ T7546] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 427.804060][ T7546] BTRFS info (device loop6): metadata ratio 4 [ 427.810935][ T7546] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 427.831653][ T7546] BTRFS info (device loop6): force lzo compression, level 0 [ 427.860307][ T7546] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 427.890589][ T7546] BTRFS info (device loop6): trying to use backup root at mount time [ 428.080670][ T7546] BTRFS info (device loop6): doing ref verification [ 428.087579][ T7546] BTRFS info (device loop6): disabling tree log [ 428.098815][ T7546] BTRFS info (device loop6): using free space tree [ 428.167486][ T7546] BTRFS error (device loop6): open_ctree failed: -12 [ 429.904478][ T27] audit: type=1326 audit(1742235161.169:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd9f8d169 code=0x7ffc0000 [ 430.872916][ T27] audit: type=1326 audit(1742235161.169:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd9f8d169 code=0x7ffc0000 [ 430.998136][ T27] audit: type=1326 audit(1742235161.169:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5fd9f8d169 code=0x7ffc0000 [ 431.100571][ T27] audit: type=1326 audit(1742235161.169:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd9f8d169 code=0x7ffc0000 [ 431.190652][ T27] audit: type=1326 audit(1742235161.169:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd9f8d169 code=0x7ffc0000 [ 431.277418][ T27] audit: type=1326 audit(1742235161.179:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f5fd9f8d169 code=0x7ffc0000 [ 431.300616][ T4442] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 431.380295][ T27] audit: type=1326 audit(1742235161.179:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd9f8d169 code=0x7ffc0000 [ 431.497933][ T27] audit: type=1326 audit(1742235161.179:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd9f8d169 code=0x7ffc0000 [ 431.581444][ T4442] usb 1-1: device descriptor read/all, error -71 [ 431.864771][ T27] audit: type=1326 audit(1742235161.369:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fd9f8d169 code=0x7ffc0000 [ 432.437966][ T7631] netlink: 20 bytes leftover after parsing attributes in process `syz.5.706'. [ 432.451249][ T7631] loop5: detected capacity change from 0 to 64 [ 433.037673][ T27] audit: type=1326 audit(1742235161.369:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd9f8d169 code=0x7ffc0000 [ 433.292853][ T7631] BFS-fs: bfs_iget(): Bad inode number loop5:00000002 [ 433.528453][ T7639] netlink: 'syz.6.708': attribute type 10 has an invalid length. [ 433.613158][ T7639] tipc: Resetting bearer [ 433.749320][ T7645] loop2: detected capacity change from 0 to 64 [ 433.776600][ T7639] tipc: Resetting bearer [ 433.837830][ T7639] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.848532][ T7645] MINIX-fs: bad superblock or unable to read bitmaps [ 433.906075][ T7639] bond0: (slave team0): Enslaving as an active interface with an up link [ 434.021082][ T4748] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 434.635903][ T7657] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 440.018290][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 440.028717][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 440.038643][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 440.048301][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 440.056334][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 440.067162][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 440.082343][ T4267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 440.100921][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.107744][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.195059][ T4267] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 440.212220][ T4267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 440.220236][ T4267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 440.228548][ T4267] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 440.236298][ T4267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 443.651976][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 444.053320][ T7713] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 444.953036][ T7689] chnl_net:caif_netlink_parms(): no params data found [ 444.978341][ T7719] tipc: Enabled bearer , priority 0 [ 445.135702][ T7719] device syzkaller0 entered promiscuous mode [ 445.156179][ T7719] tipc: Resetting bearer [ 445.363411][ T7714] tipc: Resetting bearer [ 445.750669][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 446.610030][ T7738] loop5: detected capacity change from 0 to 128 [ 447.820964][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 448.894218][ T4748] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 449.903455][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 453.615174][ T7714] tipc: Disabling bearer [ 453.707761][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 453.981322][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.988472][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.042521][ T7689] device bridge_slave_0 entered promiscuous mode [ 454.053529][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.068168][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.080214][ T7689] device bridge_slave_1 entered promiscuous mode [ 454.404429][ T7768] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 455.136670][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.148617][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.326978][ T7689] team0: Port device team_slave_0 added [ 455.388354][ T7689] team0: Port device team_slave_1 added [ 455.532763][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.577381][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.663418][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.685203][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.692384][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.718984][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.773295][ T7689] device hsr_slave_0 entered promiscuous mode [ 455.780991][ T7689] device hsr_slave_1 entered promiscuous mode [ 455.788063][ T7689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.796455][ T7689] Cannot create hsr debugfs directory [ 456.161743][ T7689] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 456.188359][ T7689] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 456.216623][ T7689] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 456.235386][ T7689] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 456.348766][ T4360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.518604][ T7689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.549001][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 456.564051][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 456.752756][ T4360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.792771][ T7689] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.119787][ T4360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.167855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.189249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.258476][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.265820][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.295500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.318542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.370023][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.377252][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.415605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 457.596602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 457.828390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 457.913987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 457.931854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 457.951192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 457.998078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 458.021501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.640588][ T22] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 460.403956][ T7689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.450459][ T7689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.739201][ T4360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.763664][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.771709][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 460.778804][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.811524][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.854178][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.899172][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.981669][ T22] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 461.078339][ T7809] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 461.723678][ T22] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 461.746125][ T22] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 461.790977][ T22] usb 6-1: config 0 descriptor?? [ 461.826231][ T22] usb 6-1: can't set config #0, error -71 [ 461.859571][ T22] usb 6-1: USB disconnect, device number 6 [ 462.175097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 462.199814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 462.272503][ T7689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.160673][ T7831] netlink: 44 bytes leftover after parsing attributes in process `syz.6.753'. [ 463.482409][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 463.482444][ T27] audit: type=1804 audit(1742235195.819:26): pid=7838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.754" name="/newroot/97/bus/bus" dev="overlay" ino=555 res=1 errno=0 [ 465.805725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 465.826304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 466.319459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 466.328150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 466.421751][ T7879] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 467.208036][ T7689] device veth0_vlan entered promiscuous mode [ 467.215523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 467.226681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 467.249333][ T7689] device veth1_vlan entered promiscuous mode [ 468.416884][ T7689] device veth0_macvtap entered promiscuous mode [ 468.541464][ T7689] device veth1_macvtap entered promiscuous mode [ 468.689777][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.780607][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.869395][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.949669][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.010889][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.118159][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.186856][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.275796][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.342870][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.432302][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.550489][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.601732][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.637809][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.674276][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.705523][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.760487][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.797269][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.829907][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.878592][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 469.903186][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 469.925782][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 469.958314][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 469.991838][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 470.041374][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 470.062792][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 470.096642][ T7689] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.125975][ T7689] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.155056][ T7689] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.195025][ T7689] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.376805][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 470.946566][ T7894] loop2: detected capacity change from 0 to 32768 [ 471.185222][ T7894] XFS (loop2): Mounting V5 Filesystem [ 471.291186][ T4360] device hsr_slave_0 left promiscuous mode [ 471.375842][ T7894] XFS (loop2): Ending clean mount [ 471.391559][ T4360] device hsr_slave_1 left promiscuous mode [ 471.435837][ T4360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.462182][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.482219][ T4360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.495316][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.509236][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 471.522352][ T7947] loop6: detected capacity change from 0 to 128 [ 471.529936][ T4360] device bridge_slave_1 left promiscuous mode [ 471.540162][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.572070][ T4360] device bridge_slave_0 left promiscuous mode [ 471.578409][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.579647][ T7947] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 471.635634][ T7947] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 471.678752][ T4360] device veth1_macvtap left promiscuous mode [ 471.691476][ T4360] device veth0_macvtap left promiscuous mode [ 471.729031][ T4360] device veth1_vlan left promiscuous mode [ 471.744559][ T4360] device veth0_vlan left promiscuous mode [ 471.831777][ T4249] XFS (loop2): Unmounting Filesystem [ 471.859500][ T5542] EXT4-fs (loop6): unmounting filesystem. [ 475.167422][ T4360] team0 (unregistering): Port device team_slave_1 removed [ 475.328967][ T4360] team0 (unregistering): Port device team_slave_0 removed [ 475.492801][ T4360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.657218][ T4360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.384587][ T7980] ubi31: attaching mtd0 [ 476.390897][ T7980] ubi31: scanning is finished [ 476.395618][ T7980] ubi31: empty MTD device detected [ 476.450719][ T7980] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 476.458686][ T7980] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 476.466125][ T7980] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 476.473207][ T7980] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 476.480732][ T7980] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 476.487582][ T7980] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 476.495736][ T7980] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2280208282 [ 476.505898][ T7980] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 476.518063][ T7983] ubi31: background thread "ubi_bgt31d" started, PID 7983 [ 479.789068][ T7994] loop5: detected capacity change from 0 to 2048 [ 479.883180][ T7994] NILFS (loop5): unrecognized mount option "cgroup.type" [ 479.940145][ T7825] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.228073][ T8000] loop2: detected capacity change from 0 to 1024 [ 481.409202][ T8008] kvm [8006]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 481.485491][ T8008] kvm [8006]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 481.512524][ T8008] kvm [8006]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 481.850359][ T4360] bond0 (unregistering): Released all slaves [ 482.261413][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.269775][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.334244][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.376061][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.420636][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 482.492962][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 486.582953][ T8055] loop6: detected capacity change from 0 to 1024 [ 487.266162][ T8066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.953269][ T8122] loop6: detected capacity change from 0 to 1024 [ 490.054083][ T8120] kvm [8115]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 490.211207][ T8120] kvm [8115]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 490.327332][ T8120] kvm [8115]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 491.083407][ T8141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.956987][ T8152] loop7: detected capacity change from 0 to 128 [ 492.313914][ T8150] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 492.320489][ T8150] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 492.360646][ T8150] vhci_hcd vhci_hcd.0: Device attached [ 492.670114][ T8153] vhci_hcd: connection closed [ 492.687007][ T4490] vhci_hcd: stop threads [ 492.799610][ T4490] vhci_hcd: release socket [ 492.850772][ T5753] vhci_hcd: vhci_device speed not set [ 492.930690][ T5753] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 492.940168][ T4490] vhci_hcd: disconnect device [ 494.346166][ T8163] loop6: detected capacity change from 0 to 1024 [ 494.478003][ T8163] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 494.562093][ T7598] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 494.791012][ T7598] usb 3-1: Using ep0 maxpacket: 32 [ 494.816938][ T7598] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 494.951571][ T7598] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 495.040894][ T7598] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 495.130665][ T7598] usb 3-1: Product: syz [ 495.176010][ T7598] usb 3-1: Manufacturer: syz [ 495.238802][ T7598] usb 3-1: SerialNumber: syz [ 495.264238][ T7598] usb 3-1: config 0 descriptor?? [ 495.301927][ T5542] EXT4-fs (loop6): unmounting filesystem. [ 495.310640][ T8162] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.535233][ T8176] loop5: detected capacity change from 0 to 1024 [ 495.558982][ T8162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.607141][ T8162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.666918][ T5758] usb 3-1: USB disconnect, device number 9 [ 497.188650][ T8199] loop5: detected capacity change from 0 to 164 [ 497.352600][ T8199] Unable to read rock-ridge attributes [ 497.809575][ T8199] block device autoloading is deprecated and will be removed. [ 497.887947][ T8210] netlink: 44 bytes leftover after parsing attributes in process `syz.0.830'. [ 498.445011][ T8199] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 498.660644][ T5753] vhci_hcd: vhci_device speed not set [ 499.259640][ T8224] loop5: detected capacity change from 0 to 16 [ 499.564049][ T8224] erofs: (device loop5): mounted with root inode @ nid 36. [ 500.390695][ T8239] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 500.400865][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 500.410089][ T8239] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 500.420208][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 500.432828][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 500.444492][ T8239] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 500.454617][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 500.463930][ T8239] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 500.473783][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 500.484360][ T8239] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 500.495574][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 500.505100][ T8239] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 500.514771][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 500.524721][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 500.584405][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 501.311904][ T8246] netlink: 76 bytes leftover after parsing attributes in process `syz.0.838'. [ 501.578632][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.585017][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.763838][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 501.801451][ T8251] loop6: detected capacity change from 0 to 1024 [ 501.823456][ T8239] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 501.900800][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 502.070842][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 502.091295][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 502.107246][ T8239] erofs: (device loop5): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 502.122606][ T8239] syz.5.835: attempt to access beyond end of device [ 502.122606][ T8239] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 502.200819][ T8239] syz.5.835: attempt to access beyond end of device [ 502.200819][ T8239] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 502.266807][ T8239] syz.5.835: attempt to access beyond end of device [ 502.266807][ T8239] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 502.350156][ T8239] syz.5.835: attempt to access beyond end of device [ 502.350156][ T8239] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 502.897203][ T8269] netlink: 44 bytes leftover after parsing attributes in process `syz.0.841'. [ 503.450331][ T8271] loop6: detected capacity change from 0 to 164 [ 503.560557][ T8271] Unable to read rock-ridge attributes [ 503.655623][ T8271] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 504.486729][ T8296] loop5: detected capacity change from 0 to 1024 [ 507.319380][ T8317] netlink: 76 bytes leftover after parsing attributes in process `syz.5.852'. [ 507.929720][ T8320] loop7: detected capacity change from 0 to 1024 [ 509.525772][ T8340] netlink: 44 bytes leftover after parsing attributes in process `syz.2.856'. [ 509.997326][ T8342] loop7: detected capacity change from 0 to 256 [ 510.004482][ T8342] exfat: Bad value for 'uid' [ 510.923863][ T8347] loop7: detected capacity change from 0 to 164 [ 511.104812][ T8347] Unable to read rock-ridge attributes [ 511.130278][ T8347] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 513.388854][ T8366] loop7: detected capacity change from 0 to 1024 [ 514.659357][ T8379] loop2: detected capacity change from 0 to 128 [ 515.920980][ T8379] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 515.961078][ T8379] sysv_free_block: trying to free block not in datazone [ 516.084047][ T8379] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 518.096256][ T8403] netlink: 44 bytes leftover after parsing attributes in process `syz.0.869'. [ 518.333369][ T8409] loop2: detected capacity change from 0 to 7 [ 518.379046][ T8411] loop0: detected capacity change from 0 to 2048 [ 518.463633][ T8409] Dev loop2: unable to read RDB block 7 [ 518.501744][ T8409] loop2: unable to read partition table [ 518.568199][ T8409] loop2: partition table beyond EOD, truncated [ 518.631512][ T8411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 518.670727][ T8409] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 518.907984][ T3623] Dev loop2: unable to read RDB block 7 [ 518.944878][ T3623] loop2: unable to read partition table [ 518.984449][ T3623] loop2: partition table beyond EOD, truncated [ 519.194054][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 520.734530][ T5753] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 520.965168][ T8428] loop6: detected capacity change from 0 to 32768 [ 520.976540][ T8419] dccp_close: ABORT with 88 bytes unread [ 520.996425][ T8428] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.875 (8428) [ 521.021068][ T5753] usb 3-1: Using ep0 maxpacket: 32 [ 521.052895][ T5753] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 521.066324][ T8428] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 521.100726][ T5753] usb 3-1: config 0 has no interface number 0 [ 521.140717][ T8428] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 521.160690][ T5753] usb 3-1: config 0 interface 184 has no altsetting 0 [ 521.167872][ T8428] BTRFS info (device loop6): metadata ratio 4 [ 521.192249][ T5753] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 521.194718][ T8428] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 521.269541][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.306820][ T5753] usb 3-1: Product: syz [ 521.317397][ T8428] BTRFS info (device loop6): force lzo compression, level 0 [ 521.320568][ T5753] usb 3-1: Manufacturer: syz [ 521.340593][ T5753] usb 3-1: SerialNumber: syz [ 521.360662][ T8428] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 521.460929][ T8428] BTRFS info (device loop6): trying to use backup root at mount time [ 521.490100][ T8428] BTRFS info (device loop6): doing ref verification [ 521.585548][ T8428] BTRFS info (device loop6): disabling tree log [ 521.617239][ T8428] BTRFS info (device loop6): using free space tree [ 521.900897][ T8469] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 521.923099][ T5753] usb 3-1: config 0 descriptor?? [ 521.933731][ T4490] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 521.947931][ T8428] BTRFS warning (device loop6): couldn't read tree root [ 521.957156][ T8428] BTRFS warning (device loop6): try to load backup roots slot 1 [ 521.967766][ T4866] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 522.008559][ T5753] smsc75xx v1.0.0 [ 522.035743][ T8428] BTRFS warning (device loop6): couldn't read tree root [ 522.080638][ T8428] BTRFS warning (device loop6): try to load backup roots slot 2 [ 522.108216][ T8428] BTRFS error (device loop6): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 522.191101][ T8428] BTRFS warning (device loop6): couldn't read tree root [ 522.223542][ T8428] BTRFS warning (device loop6): try to load backup roots slot 3 [ 522.977531][ T8489] netlink: 44 bytes leftover after parsing attributes in process `syz.0.882'. [ 523.693425][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.7.883'. [ 524.073065][ T8428] BTRFS error (device loop6): open_ctree failed: -22 [ 524.151295][ T5753] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 524.156149][ T8509] loop7: detected capacity change from 0 to 2048 [ 524.180452][ T5753] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 524.228126][ T5753] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 524.260494][ T5753] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 524.290621][ T5753] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 524.313090][ T5753] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 524.355103][ T5753] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 524.418318][ T8509] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 524.440642][ T5753] usb 3-1: USB disconnect, device number 10 [ 524.788550][ T8514] loop6: detected capacity change from 0 to 128 [ 524.877777][ T8514] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 524.891183][ T8514] sysv_free_block: trying to free block not in datazone [ 524.928548][ T8514] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 525.235463][ T7689] EXT4-fs (loop7): unmounting filesystem. [ 526.791086][ T8534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.891'. [ 527.128712][ T8540] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 527.403634][ T8546] netlink: 68 bytes leftover after parsing attributes in process `syz.2.894'. [ 527.767861][ T8547] netlink: 44 bytes leftover after parsing attributes in process `syz.0.895'. [ 529.406463][ T8574] loop2: detected capacity change from 0 to 2048 [ 529.436888][ T8566] kvm [8565]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 529.484791][ T8566] kvm [8565]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 529.543400][ T8566] kvm [8565]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 529.563918][ T8574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 530.202750][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.904'. [ 530.302048][ T8594] netlink: 'syz.0.904': attribute type 7 has an invalid length. [ 530.322537][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 530.336666][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 530.509621][ T8599] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 530.540859][ T4267] Bluetooth: hci4: command 0x0405 tx timeout [ 533.703140][ T8626] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 534.029244][ T8629] netlink: 44 bytes leftover after parsing attributes in process `syz.7.910'. [ 535.577490][ T8641] loop6: detected capacity change from 0 to 2048 [ 535.673027][ T8644] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (14) [ 535.711591][ T8641] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 536.380031][ T5542] EXT4-fs (loop6): unmounting filesystem. [ 536.482937][ T8660] loop5: detected capacity change from 0 to 164 [ 536.522569][ T8660] Unable to read rock-ridge attributes [ 536.590297][ T8660] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 538.296259][ T8672] kvm [8671]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 538.351971][ T8672] kvm [8671]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 538.381624][ T8672] kvm [8671]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 538.451965][ T8672] kvm [8671]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 538.519056][ T8682] kvm [8678]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 538.578889][ T8682] kvm [8678]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 538.659487][ T8682] kvm [8678]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 541.055159][ T8711] loop0: detected capacity change from 0 to 2048 [ 541.199661][ T8711] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 541.553292][ T8726] loop5: detected capacity change from 0 to 164 [ 541.575548][ T8726] Unable to read rock-ridge attributes [ 543.542840][ T8743] kvm [8742]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 543.582030][ T8743] kvm [8742]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 543.605767][ T8743] kvm [8742]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 544.280122][ T8760] loop7: detected capacity change from 0 to 2048 [ 544.307828][ T8757] netlink: 1456 bytes leftover after parsing attributes in process `syz.5.941'. [ 544.334109][ T8760] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 544.443090][ T8757] netlink: 36 bytes leftover after parsing attributes in process `syz.5.941'. [ 544.542202][ T8764] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 544.545434][ T8760] syz.7.942: attempt to access beyond end of device [ 544.545434][ T8760] loop7: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 546.005361][ T8777] loop5: detected capacity change from 0 to 2048 [ 546.063854][ T8777] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 546.220816][ T8718] ------------[ cut here ]------------ [ 546.227137][ T8718] kernel BUG at fs/buffer.c:2666! [ 546.248033][ T8718] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 546.254174][ T8718] CPU: 0 PID: 8718 Comm: kmmpd-loop0 Not tainted 6.1.131-syzkaller #0 [ 546.262658][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 546.272741][ T8718] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 546.278151][ T8718] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 e1 3f e0 ff e9 b1 fe ff ff e8 a7 de 88 ff 0f 0b e8 a0 de 88 ff <0f> 0b e8 99 de 88 ff 0f 0b e8 92 de 88 ff 0f 0b e8 8b de 88 ff 0f [ 546.297788][ T8718] RSP: 0018:ffffc9000cb57c40 EFLAGS: 00010293 [ 546.303885][ T8718] RAX: ffffffff8201cb20 RBX: 0000000000000000 RCX: ffff88804ab75940 [ 546.311898][ T8718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.319894][ T8718] RBP: ffffc9000cb57d50 R08: ffffffff8201c6fd R09: ffffed100e0c897a [ 546.327901][ T8718] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100e0c8979 [ 546.335895][ T8718] R13: ffff888070644bc8 R14: 0000000000000000 R15: 0000000000003801 [ 546.343922][ T8718] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 546.352885][ T8718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.359491][ T8718] CR2: 00007f0651fa7bac CR3: 000000005feed000 CR4: 00000000003506f0 [ 546.367496][ T8718] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 546.375502][ T8718] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 546.383500][ T8718] Call Trace: [ 546.386788][ T8718] [ 546.389731][ T8718] ? __die_body+0x5e/0xa0 [ 546.394093][ T8718] ? die+0x83/0xb0 [ 546.397854][ T8718] ? do_trap+0x11e/0x350 [ 546.402135][ T8718] ? submit_bh_wbc+0x4c0/0x4e0 [ 546.406928][ T8718] ? submit_bh_wbc+0x4c0/0x4e0 [ 546.411721][ T8718] ? do_error_trap+0x13d/0x1e0 [ 546.416506][ T8718] ? submit_bh_wbc+0x4c0/0x4e0 [ 546.421292][ T8718] ? do_int3+0x30/0x30 [ 546.425381][ T8718] ? report_bug+0x3e0/0x500 [ 546.429904][ T8718] ? rcu_is_watching+0x11/0xb0 [ 546.434724][ T8718] ? handle_invalid_op+0x2c/0x40 [ 546.439687][ T8718] ? submit_bh_wbc+0x4c0/0x4e0 [ 546.444496][ T8718] ? exc_invalid_op+0x2f/0x40 [ 546.449205][ T8718] ? asm_exc_invalid_op+0x16/0x20 [ 546.454260][ T8718] ? submit_bh_wbc+0x9d/0x4e0 [ 546.458958][ T8718] ? submit_bh_wbc+0x4c0/0x4e0 [ 546.463751][ T8718] ? submit_bh_wbc+0x4c0/0x4e0 [ 546.468549][ T8718] write_mmp_block_thawed+0x3b6/0x5a0 [ 546.473953][ T8718] ? read_mmp_block+0x7e0/0x7e0 [ 546.478830][ T8718] ? update_process_times+0x1b0/0x1b0 [ 546.484271][ T8718] ? kmmpd+0x40c/0xa70 [ 546.488373][ T8718] write_mmp_block+0x13f/0x390 [ 546.493169][ T8718] kmmpd+0x40c/0xa70 [ 546.497106][ T8718] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 546.502732][ T8718] ? __kthread_parkme+0x168/0x1c0 [ 546.507811][ T8718] kthread+0x28d/0x320 [ 546.511915][ T8718] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 546.517512][ T8718] ? kthread_blkcg+0xd0/0xd0 [ 546.522142][ T8718] ret_from_fork+0x1f/0x30 [ 546.526613][ T8718] [ 546.529656][ T8718] Modules linked in: [ 547.563118][ T8718] ---[ end trace 0000000000000000 ]--- [ 547.568673][ T8718] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 547.662513][ T8760] syz.7.942 (8760) used greatest stack depth: 18648 bytes left [ 548.154845][ T8793] loop2: detected capacity change from 0 to 32768 [ 548.229923][ T4968] EXT4-fs (loop5): unmounting filesystem. [ 548.236532][ T8718] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 e1 3f e0 ff e9 b1 fe ff ff e8 a7 de 88 ff 0f 0b e8 a0 de 88 ff <0f> 0b e8 99 de 88 ff 0f 0b e8 92 de 88 ff 0f 0b e8 8b de 88 ff 0f [ 548.684163][ T8718] RSP: 0018:ffffc9000cb57c40 EFLAGS: 00010293 [ 548.992001][ T7825] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 549.477168][ T8718] RAX: ffffffff8201cb20 RBX: 0000000000000000 RCX: ffff88804ab75940 [ 549.669648][ T8718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 549.861283][ T8718] RBP: ffffc9000cb57d50 R08: ffffffff8201c6fd R09: ffffed100e0c897a [ 549.955510][ T8718] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100e0c8979 [ 550.007600][ T8718] R13: ffff888070644bc8 R14: 0000000000000000 R15: 0000000000003801 [ 550.057372][ T8718] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 550.093536][ T8718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.100181][ T8718] CR2: 00007f104bdf0420 CR3: 000000007fa07000 CR4: 00000000003506f0 [ 550.109284][ T8718] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 550.118276][ T8718] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 550.126555][ T8718] Kernel panic - not syncing: Fatal exception [ 550.133012][ T8718] Kernel Offset: disabled [ 550.137339][ T8718] Rebooting in 86400 seconds..