last executing test programs: 11m20.0228772s ago: executing program 4 (id=471): connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = syz_io_uring_setup(0x498, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_setup(0x651d, &(0x7f0000000640)={0x0, 0x4833, 0x4000, 0x2, 0x2f2, 0x0, r0}, &(0x7f0000000440)=0x0, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0xb0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a0b0105000009000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prlimit64(r5, 0x5, 0x0, &(0x7f0000000140)) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)="da90326376b1e75cfdb9d6fdcefda90dac1e68a89f7730653a1e377f1f14ca7596a02beb483c7b25ae47b424fa3bcd9b9b3c6e9cff42cdf49e2ff80ca0d39b3b1238f4ea49d8bef8ec610dcd430812", 0x4f, 0xc000, 0x0, {0x0, r7}}) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f00000000c0)='2\x00', 0x2) io_uring_enter(r0, 0x3498, 0x969, 0x0, 0x0, 0x0) 11m17.149838335s ago: executing program 4 (id=476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = memfd_create(0x0, 0x1) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x140d, 0xe5cf42fd8c1e8151, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x48014) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r2, 0x1, 0x7fffffff, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x20000054) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) open_by_handle_at(r3, &(0x7f0000000040)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x7, 0xffff0001, 0x7f, 0x2}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) 11m15.776401975s ago: executing program 4 (id=480): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000200), 0x3c}], 0x4c) 11m12.470053208s ago: executing program 4 (id=488): connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = syz_io_uring_setup(0x498, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_setup(0x651d, &(0x7f0000000640)={0x0, 0x4833, 0x4000, 0x2, 0x2f2, 0x0, r0}, &(0x7f0000000440)=0x0, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0xb0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a0b0105000009000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prlimit64(r5, 0x5, 0x0, &(0x7f0000000140)) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)="da90326376b1e75cfdb9d6fdcefda90dac1e68a89f7730653a1e377f1f14ca7596a02beb483c7b25ae47b424fa3bcd9b9b3c6e9cff42cdf49e2ff80ca0d39b3b1238f4ea49d8bef8ec610dcd430812", 0x4f, 0xc000, 0x0, {0x0, r7}}) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f00000000c0)='2\x00', 0x2) io_uring_enter(r0, 0x3498, 0x969, 0x0, 0x0, 0x0) 11m9.08510923s ago: executing program 4 (id=498): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000200), 0x3c}], 0x4c) 11m2.500369215s ago: executing program 2 (id=511): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x2b, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x4, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) writev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) r5 = semget$private(0x0, 0x4, 0x96) semop(r5, 0x0, 0x0) semctl$IPC_SET(r5, 0x0, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) sendto$inet(r0, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) 11m1.355246245s ago: executing program 4 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 10m59.619818387s ago: executing program 2 (id=518): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) waitid(0x1, 0x0, 0x0, 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 10m57.376104443s ago: executing program 2 (id=522): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mincore(&(0x7f00000d8000/0x1000)=nil, 0x1000, &(0x7f0000000280)) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\xd7\x8fL\xa2o\x0f\t\'-\xaf\x006y\xc9 a;\x04\xca\xb2\x9f/5\xb1\xb6i\xff\a\x00\x00\x19\xff\xda\xc3\x8a\x99q\x1e\xd3\xad@\x9f#Mw&\xdf\xab\xfd\xf8\xee\xa0\xff2|\x14\x89\x8a\xf0&Of\xc3\x1d5F\xf6N!\"\xd4|\xa4\xe0\x81\x88\xa3b\xcbZ}O\x84\xaf\xf9\xad\x9e\xaa\r\x85\x9fF\xbbs\x1b\x8e*T\x86\xca'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o\xae'}, {0x20, '/w\f.\x0el\x85op#\x00O\xaa\x8f)\xa82\x8bl\xd4p\xe9\xdaw\x9f\xc8'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c2f03ce2c7c32"}, 0x154) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x0, 0x3]}}) 10m55.706342819s ago: executing program 2 (id=530): connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = syz_io_uring_setup(0x498, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_setup(0x651d, &(0x7f0000000640)={0x0, 0x4833, 0x4000, 0x2, 0x2f2, 0x0, r0}, &(0x7f0000000440)=0x0, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0xb0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a0b0105000009000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prlimit64(r5, 0x5, 0x0, &(0x7f0000000140)) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)="da90326376b1e75cfdb9d6fdcefda90dac1e68a89f7730653a1e377f1f14ca7596a02beb483c7b25ae47b424fa3bcd9b9b3c6e9cff42cdf49e2ff80ca0d39b3b1238f4ea49d8bef8ec610dcd430812", 0x4f, 0xc000, 0x0, {0x0, r7}}) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f00000000c0)='2\x00', 0x2) io_uring_enter(r0, 0x3498, 0x969, 0x0, 0x0, 0x0) 10m52.618669109s ago: executing program 2 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r3, 0x29, 0x10, 0x0, 0x0) 10m51.209548042s ago: executing program 2 (id=540): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mincore(&(0x7f00000d8000/0x1000)=nil, 0x1000, &(0x7f0000000280)) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\xd7\x8fL\xa2o\x0f\t\'-\xaf\x006y\xc9 a;\x04\xca\xb2\x9f/5\xb1\xb6i\xff\a\x00\x00\x19\xff\xda\xc3\x8a\x99q\x1e\xd3\xad@\x9f#Mw&\xdf\xab\xfd\xf8\xee\xa0\xff2|\x14\x89\x8a\xf0&Of\xc3\x1d5F\xf6N!\"\xd4|\xa4\xe0\x81\x88\xa3b\xcbZ}O\x84\xaf\xf9\xad\x9e\xaa\r\x85\x9fF\xbbs\x1b\x8e*T\x86\xca'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o\xae'}, {0x20, '/w\f.\x0el\x85op#\x00O\xaa\x8f)\xa82\x8bl\xd4p\xe9\xdaw\x9f\xc8'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c2f03ce2c7c32"}, 0x154) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x0, 0x3]}}) 10m45.96943367s ago: executing program 32 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 10m35.428655691s ago: executing program 33 (id=540): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mincore(&(0x7f00000d8000/0x1000)=nil, 0x1000, &(0x7f0000000280)) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\xd7\x8fL\xa2o\x0f\t\'-\xaf\x006y\xc9 a;\x04\xca\xb2\x9f/5\xb1\xb6i\xff\a\x00\x00\x19\xff\xda\xc3\x8a\x99q\x1e\xd3\xad@\x9f#Mw&\xdf\xab\xfd\xf8\xee\xa0\xff2|\x14\x89\x8a\xf0&Of\xc3\x1d5F\xf6N!\"\xd4|\xa4\xe0\x81\x88\xa3b\xcbZ}O\x84\xaf\xf9\xad\x9e\xaa\r\x85\x9fF\xbbs\x1b\x8e*T\x86\xca'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o\xae'}, {0x20, '/w\f.\x0el\x85op#\x00O\xaa\x8f)\xa82\x8bl\xd4p\xe9\xdaw\x9f\xc8'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c2f03ce2c7c32"}, 0x154) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x0, 0x3]}}) 8m43.363655414s ago: executing program 5 (id=837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = memfd_create(0x0, 0x1) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48014) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r2, 0x1, 0x7fffffff, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x20000054) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) open_by_handle_at(r3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) 8m42.331579734s ago: executing program 5 (id=839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x59) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="1cc389cd084c0000000206010200000000000000000600000005000100070000000900020073797a300000000005000500020000000500040000000000110003006861742c6e6574b5b500000000000000f101042750c0ecbac7e28a15762fb2691149f9574aa5e99135a13be76c430c8b7917e1b508527c7ce4c530544b4bfaf3e2dbbea4658cdef8f4659c577a808fcce7c3921c025afc5b56e0f98386ef0082be1a2ad1a1702407fa15d837"], 0x4c}}, 0x8000) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0xb, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}]}, 0x34}}, 0x0) 8m40.460804148s ago: executing program 5 (id=842): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000c40)=ANY=[]) 8m39.246051444s ago: executing program 5 (id=848): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x7, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0) getsockopt$MRT(r1, 0x0, 0xcf, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 8m18.262394777s ago: executing program 34 (id=860): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x800008, &(0x7f0000000ac0)={[{@dmode={'dmode', 0x3d, 0x8000}}, {@map_off}, {}, {@check_relaxed}, {@check_relaxed}, {@hide}]}, 0x5, 0x581, &(0x7f0000000380)="$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") socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x7, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0) getsockopt$MRT(r1, 0x0, 0xcf, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 50.454150481s ago: executing program 7 (id=2339): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x188}}], 0x1, 0x810) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a0104000000000000000001000000240004802000018007000100727400001400028008000240ce31b6cf080001400000000308000b40000000000900010073797a3000e9ffff130000000100010000000000000aeeb9c7da275615ac46ea6889d53c4ae599307c3ebec1699a88c01503d6fa07347deedf1ea28f6f72f6f980cf56d609aa0aa2aba830c53cbb6f3d7823e6d132c066dd4c9ee3ec9c0b34dbefe68fa35363bb4c4fdded806dd29f43897acc350256c77f4e6e63466d3481f6bc59325ad99a55"], 0xd4}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf72}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 48.75285276s ago: executing program 7 (id=2343): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r1, 0x91502000) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100040000000000000002030000fffc4e220200000308000000000000380000000100"/56, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000840) 47.790099325s ago: executing program 7 (id=2348): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f16"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) 46.322204704s ago: executing program 7 (id=2353): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 45.029989448s ago: executing program 7 (id=2359): connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = syz_io_uring_setup(0x498, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_setup(0x651d, &(0x7f0000000640)={0x0, 0x4833, 0x4000, 0x2, 0x2f2, 0x0, r0}, &(0x7f0000000440)=0x0, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0xb0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a0b0105000009000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prlimit64(r6, 0x5, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)="da90326376b1e75cfdb9d6fdcefda90dac1e68a89f7730653a1e377f1f14ca7596a02beb483c7b25ae47b424fa3bcd9b9b3c6e9cff42cdf49e2ff80ca0d39b3b1238f4ea49d8bef8ec610dcd430812", 0x4f, 0xc000, 0x0, {0x0, r8}}) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r9, &(0x7f00000000c0)='2\x00', 0x2) io_uring_enter(r0, 0x3498, 0x969, 0x0, 0x0, 0x0) 43.779759578s ago: executing program 7 (id=2362): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a00060001117e6d92600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6e001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79811835d3a71d85667daff", 0x80}], 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e515", 0x46}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {0x0}, {0x0}], 0x4}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 27.557269165s ago: executing program 35 (id=2362): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a00060001117e6d92600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6e001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79811835d3a71d85667daff", 0x80}], 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e515", 0x46}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {0x0}, {0x0}], 0x4}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 21.075373685s ago: executing program 1 (id=2405): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a34f124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r7}) close_range(r4, r6, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt(r8, 0x84, 0x7d, 0x0, 0x0) futex(&(0x7f0000000040), 0x5, 0xfffffffc, 0x0, 0x0, 0xaffffffa) sendmsg$key(r0, 0x0, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0x98, 0xab, 0x10, 0x5fc9, 0x63, 0x9352, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0x2e, 0x30}}]}}]}}, 0x0) 15.102078181s ago: executing program 1 (id=2421): r0 = socket(0x22, 0x80003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c00"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="804df1b42783e980f6c5c859a53740352fc4db5c97dcdd2dda29f5b8cc9f25782cf31101d6a6e54c33dd0b2125520fba3b48"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r4, 0x25, 0x8, @void}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/net\x00') close_range(r0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x3c, 0x1, 0x0, "d30580c9043b98a900000800000000c21400000100", 0x3436324d}) 10.387239865s ago: executing program 6 (id=2428): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, r0, 0x9, 0x973f, 0x80081, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="240000001d005f80004000000000000002000000010000000000080008000100000303ff", 0x24) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) prctl$PR_GET_SECCOMP(0x15) r5 = fsopen(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42040, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x4ffe6, 0x0) 10.386565436s ago: executing program 0 (id=2429): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88000, 0xb2) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='/dev/kvm\x00', 0x400, 0x0, 0x8, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="800000000005010400000000000006000200000024000180"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x26000, 0x14000}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10.34623197s ago: executing program 1 (id=2430): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a34f124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r7, 0xffffffffffffffff}) poll(&(0x7f00000001c0)=[{r8}], 0x1, 0x0) r9 = socket(0x2, 0x80805, 0x0) setsockopt(r9, 0x84, 0x7d, 0x0, 0x0) futex(&(0x7f0000000040), 0x5, 0xfffffffc, 0x0, 0x0, 0xaffffffa) sendmsg$key(r0, 0x0, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0x98, 0xab, 0x10, 0x5fc9, 0x63, 0x9352, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0x2e, 0x30}}]}}]}}, 0x0) 8.788842137s ago: executing program 0 (id=2432): syz_open_dev$usbfs(0x0, 0x76, 0x101341) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x8000001, 0x341}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x34f4abb0713c3e09}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004800}, 0x40001) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 7.589388262s ago: executing program 6 (id=2434): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4880) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x70bd27, 0x65dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) 7.558105895s ago: executing program 0 (id=2435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 4.931229226s ago: executing program 3 (id=2436): fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r3, 0x1, 0x0, 0xeffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sched_setaffinity(r1, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) rseq(0x0, 0x0, 0x40000000, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 4.583665776s ago: executing program 6 (id=2437): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) read$FUSE(r5, &(0x7f0000003ec0)={0x2020}, 0x2020) sendfile(r5, r5, &(0x7f00000000c0)=0x7, 0x6fecb1) 4.532725071s ago: executing program 3 (id=2438): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000600)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@barrier_val={'barrier', 0x3d, 0x8e}}, {}, {@errors_remount}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x109}}, {@quota}]}, 0x5, 0x504, &(0x7f0000002580)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) lseek(0xffffffffffffffff, 0xfffd, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 3.356615864s ago: executing program 0 (id=2439): r0 = socket(0x22, 0x80003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="804df1b42783e980f6c5c859a53740352fc4db5c97dcdd2dda29f5b8cc9f25782cf31101d6a6e54c33dd0b2125520fba3b48"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r4, 0x25, 0x8, @void}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/net\x00') close_range(r0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x3c, 0x1, 0x0, "d30580c9043b98a900000800000000c21400000100", 0x3436324d}) 3.353505054s ago: executing program 3 (id=2440): r0 = socket(0x22, 0x80003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="804df1b42783e980f6c5c859a53740352fc4db5c97dcdd2dda29f5b8cc9f25782cf31101d6a6e54c33dd0b2125520fba3b48"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r4, 0x25, 0x8, @void}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/net\x00') close_range(r0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x3c, 0x1, 0x0, "d30580c9043b98a900000800000000c21400000100", 0x3436324d}) 3.276262931s ago: executing program 1 (id=2441): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x59) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="1cc389cd084c0000000206010200000000000000000600000005000100070000000900020073797a300000000005000500020000000500040000000000110003006861742c6e6574b5b500000000000000f101042750c0"], 0x4c}}, 0x8000) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0xb, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}]}, 0x34}}, 0x0) 3.104422017s ago: executing program 1 (id=2442): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88000, 0xb2) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='/dev/kvm\x00', 0x400, 0x0, 0x8, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="800000000005010400000000000006000200000024000180"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x26000, 0x14000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.029890893s ago: executing program 6 (id=2443): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x25}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4018045}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0x63, 0x4, 0x3ffd, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000300)={0x800080, 0x7ff, 0x2, 0xfff, 0xfd, 0x4}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x7e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000094}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r7, 0x0, 0xc0) unshare(0x6020400) r8 = syz_open_dev$loop(0x0, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000240), 0x10) fadvise64(r8, 0x4, 0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) 2.848646079s ago: executing program 1 (id=2444): syz_open_dev$usbfs(0x0, 0x76, 0x101341) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x8000001, 0x341}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x34f4abb0713c3e09}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004800}, 0x40001) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 1.949569588s ago: executing program 0 (id=2445): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, r0, 0x9, 0x973f, 0x80081, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="240000001d005f80004000000000000002000000010000000000080008000100000303ff", 0x24) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) prctl$PR_GET_SECCOMP(0x15) r5 = fsopen(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42040, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x4ffe6, 0x0) 1.864010826s ago: executing program 6 (id=2446): syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r2, 0x91502000) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100040000000000000002030000fffc4e220200000308000000000000380000000100"/56, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000840) 1.81619519s ago: executing program 3 (id=2447): fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r3, 0x1, 0x0, 0xeffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sched_setaffinity(r1, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) rseq(0x0, 0x0, 0x40000000, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 1.713001049s ago: executing program 3 (id=2448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 18.231938ms ago: executing program 6 (id=2449): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900"}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a34f124708900"}) close_range(r4, r5, 0x0) poll(&(0x7f00000001c0)=[{}], 0x1, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt(r6, 0x84, 0x7d, 0x0, 0x0) futex(&(0x7f0000000040), 0x5, 0xfffffffc, 0x0, 0x0, 0xaffffffa) sendmsg$key(r0, 0x0, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0x98, 0xab, 0x10, 0x5fc9, 0x63, 0x9352, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0x2e, 0x30}}]}}]}}, 0x0) 17.753598ms ago: executing program 3 (id=2450): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88000, 0xb2) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000001c0)={r0, 0x0, 0x400, 0x0, 0x8, &(0x7f0000000140)={@_ha_fsid}, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000280)={0x40000, 0xd000, 0xfffffffd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_delrule={0x28, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x939}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 0 (id=2451): add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e00)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x1) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x50000048) inotify_add_watch(r3, &(0x7f0000005780)='./file0\x00', 0x9600006f) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): network [ 313.863778][ T6369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.879933][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.896457][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.936213][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.963916][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.015007][ T6292] device veth1_vlan entered promiscuous mode [ 314.104294][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.150768][ T6588] netlink: 64 bytes leftover after parsing attributes in process `syz.1.622'. [ 314.173655][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.212973][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 314.835133][ T6292] device veth0_macvtap entered promiscuous mode [ 314.929293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.957085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 316.122541][ T6292] device veth1_macvtap entered promiscuous mode [ 316.221430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.243045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 316.381289][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.440021][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.450361][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.463397][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.491292][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.773215][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.892188][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.057041][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.068615][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.082722][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.129437][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.151090][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.211615][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.290936][ T6624] loop3: detected capacity change from 0 to 128 [ 317.368613][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.412641][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.420270][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.524988][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.623886][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.058567][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.080432][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.177303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.196853][ T6624] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 318.207859][ T6624] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 318.266226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.324065][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.371094][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.412865][ T6628] netlink: 'syz.1.631': attribute type 6 has an invalid length. [ 318.492688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.517640][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.538527][ T6292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.554416][ T6292] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.583906][ T6292] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.614884][ T6292] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.772995][ T6369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.916101][ T6653] netlink: 64 bytes leftover after parsing attributes in process `syz.1.633'. [ 321.255626][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.287079][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.348440][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 321.400186][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.475968][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.514316][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 321.886917][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 321.896974][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.071148][ T6678] binder: 6677:6678 ioctl 4018620d 0 returned -22 [ 322.096817][ T6678] binder: 6677:6678 unknown command 1074553620 [ 322.103375][ T6678] binder: 6677:6678 ioctl c0306201 200000000640 returned -22 [ 322.337787][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.346946][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.374985][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.466333][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.475276][ T6683] mmap: syz.3.640 (6683): VmData 175874048 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 322.497498][ T6683] netlink: 56 bytes leftover after parsing attributes in process `syz.3.640'. [ 322.546875][ T6369] device veth0_vlan entered promiscuous mode [ 322.638673][ T6369] device veth1_vlan entered promiscuous mode [ 322.729765][ T6687] netlink: 'syz.5.641': attribute type 6 has an invalid length. [ 322.823321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.846702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.887697][ T6369] device veth0_macvtap entered promiscuous mode [ 324.119008][ T6369] device veth1_macvtap entered promiscuous mode [ 324.265511][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.274076][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.367175][ T6700] netlink: 64 bytes leftover after parsing attributes in process `syz.5.645'. [ 325.061683][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.095515][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.105916][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.116806][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.135950][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.169722][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.265551][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.295338][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.315363][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.339407][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.382490][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.426421][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.475438][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.760354][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.772298][ T6714] binder: 6713:6714 ioctl 4018620d 0 returned -22 [ 325.852532][ T6720] loop0: detected capacity change from 0 to 128 [ 326.606931][ T6714] binder: 6713:6714 unknown command 1074553620 [ 326.613564][ T6714] binder: 6713:6714 ioctl c0306201 200000000640 returned -22 [ 326.629542][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.704656][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.837216][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.981869][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.994941][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.116784][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.408891][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.457180][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.568374][ T6720] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 327.580860][ T6720] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 327.684439][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 327.704621][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.771489][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.830902][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 327.954753][ T6369] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.964326][ T6369] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.974141][ T6369] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.983084][ T6369] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.913379][ T6747] netlink: 'syz.0.654': attribute type 6 has an invalid length. [ 328.948912][ T4778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.978354][ T4778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.018998][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.044326][ T4238] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.116347][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.143514][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.193595][ T4238] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.280628][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 329.312784][ T4238] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.447027][ T4238] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.059663][ T6780] loop3: detected capacity change from 0 to 8192 [ 334.701471][ T6796] binder: 6795:6796 ioctl 4018620d 0 returned -22 [ 334.859667][ T6780] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 335.126541][ T6780] REISERFS (device loop3): using ordered data mode [ 335.163575][ T6780] reiserfs: using flush barriers [ 335.267952][ T6809] netlink: 'syz.6.667': attribute type 6 has an invalid length. [ 335.533552][ T6780] REISERFS warning (device loop3): sh-458 journal_init_dev: cannot init journal device unknown-block(2304,0): -6 [ 335.735458][ T6780] REISERFS warning (device loop3): sh-462 journal_init: unable to initialize journal device [ 342.040372][ T4238] device hsr_slave_0 left promiscuous mode [ 342.064689][ T4238] device hsr_slave_1 left promiscuous mode [ 342.097000][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.195552][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.396961][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.560963][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.726999][ T4238] device bridge_slave_1 left promiscuous mode [ 342.855677][ T4238] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.895683][ T4238] device bridge_slave_0 left promiscuous mode [ 342.902027][ T4238] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.269518][ T6873] netlink: 64 bytes leftover after parsing attributes in process `syz.6.680'. [ 344.091637][ T4238] device veth1_macvtap left promiscuous mode [ 344.153879][ T6871] binder: 6870:6871 ioctl 4018620d 0 returned -22 [ 344.175677][ T4238] device veth0_macvtap left promiscuous mode [ 344.182313][ T4238] device veth1_vlan left promiscuous mode [ 344.193979][ T4238] device veth0_vlan left promiscuous mode [ 345.887487][ T4238] bond7 (unregistering): Released all slaves [ 345.914791][ T4238] bond6 (unregistering): (slave bridge12): Releasing backup interface [ 346.011422][ T4238] bond6 (unregistering): (slave bridge11): Releasing backup interface [ 347.173522][ T4238] bond6 (unregistering): Released all slaves [ 347.210039][ T4238] bond5 (unregistering): (slave bridge10): Releasing backup interface [ 348.001100][ T4238] bond5 (unregistering): (slave bridge9): Releasing backup interface [ 348.097825][ T6904] loop6: detected capacity change from 0 to 2048 [ 348.191581][ T6904] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 349.122904][ T4238] bond5 (unregistering): Released all slaves [ 349.362901][ T4238] bond4 (unregistering): (slave bridge8): Releasing backup interface [ 349.663364][ T6927] netlink: 64 bytes leftover after parsing attributes in process `syz.5.693'. [ 350.473710][ T4238] bond4 (unregistering): (slave bridge7): Releasing backup interface [ 350.754133][ T6942] hub 8-0:1.0: USB hub found [ 350.763455][ T6942] hub 8-0:1.0: 1 port detected [ 351.882632][ T4238] bond4 (unregistering): Released all slaves [ 351.892000][ T6940] binder: 6939:6940 ioctl 4018620d 0 returned -22 [ 352.050450][ T6952] loop7: detected capacity change from 0 to 16384 [ 352.368746][ T4238] bond3 (unregistering): Released all slaves [ 352.739157][ T6953] loop_set_status: loop7 () has still dirty pages (nrpages=160) [ 352.761610][ T4238] bond2 (unregistering): Released all slaves [ 352.839863][ T4238] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 352.947477][ T4238] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 353.018057][ T4238] bond1 (unregistering): Released all slaves [ 353.403020][ T4238] team0 (unregistering): Port device team_slave_1 removed [ 353.431836][ T4238] team0 (unregistering): Port device team_slave_0 removed [ 353.587535][ T4238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.923130][ T4238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.402400][ T4238] bond0 (unregistering): Released all slaves [ 354.623136][ T6863] netlink: 'syz.1.679': attribute type 6 has an invalid length. [ 356.515162][ T7006] binder: 6992:7006 ioctl 4018620d 0 returned -22 [ 356.554016][ T7004] loop6: detected capacity change from 0 to 2048 [ 356.956302][ T7004] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 359.900385][ T7041] netlink: 'syz.5.723': attribute type 6 has an invalid length. [ 361.156895][ T7055] netlink: 56 bytes leftover after parsing attributes in process `syz.1.726'. [ 364.715009][ T7097] netlink: 'syz.3.738': attribute type 6 has an invalid length. [ 366.666819][ T7101] hub 8-0:1.0: USB hub found [ 366.671798][ T7101] hub 8-0:1.0: 1 port detected [ 369.966261][ T7129] binder: 7126:7129 ioctl 4018620d 0 returned -22 [ 372.735244][ T7157] netlink: 'syz.5.752': attribute type 6 has an invalid length. [ 372.936776][ T7162] netlink: 'syz.3.753': attribute type 4 has an invalid length. [ 373.280749][ T7164] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 373.422756][ T7166] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.674711][ T7197] hub 8-0:1.0: USB hub found [ 376.679841][ T7197] hub 8-0:1.0: 1 port detected [ 378.183786][ T7214] binder: 7210:7214 ioctl 4018620d 0 returned -22 [ 378.224018][ T7214] binder: 7210:7214 unknown command 1074553620 [ 378.230672][ T7214] binder: 7210:7214 ioctl c0306201 200000000640 returned -22 [ 378.485635][ T7219] netlink: 'syz.1.767': attribute type 4 has an invalid length. [ 378.708006][ T7222] loop0: detected capacity change from 0 to 1024 [ 378.750684][ T7222] EXT4-fs (loop0): Ignoring removed orlov option [ 378.860168][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.866718][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.690377][ T7222] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 379.830446][ T7236] hub 8-0:1.0: USB hub found [ 379.835431][ T7236] hub 8-0:1.0: 1 port detected [ 383.170080][ T7237] hub 8-0:1.0: USB hub found [ 383.178970][ T7237] hub 8-0:1.0: 1 port detected [ 386.699600][ T7263] hub 8-0:1.0: USB hub found [ 386.723423][ T7263] hub 8-0:1.0: 1 port detected [ 386.865858][ T7267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.781'. [ 391.773288][ T7273] hub 8-0:1.0: USB hub found [ 391.782013][ T7273] hub 8-0:1.0: 1 port detected [ 392.039377][ T7290] netlink: 56 bytes leftover after parsing attributes in process `syz.5.787'. [ 393.017674][ T7302] hub 8-0:1.0: USB hub found [ 393.024551][ T7302] hub 8-0:1.0: 1 port detected [ 394.071246][ T7309] binder: 7308:7309 ioctl 4018620d 0 returned -22 [ 394.097361][ T7309] binder: 7308:7309 unknown command 1074553620 [ 394.103566][ T7309] binder: 7308:7309 ioctl c0306201 200000000640 returned -22 [ 394.663396][ T7307] loop3: detected capacity change from 0 to 2048 [ 394.991331][ T7307] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 396.427410][ T7331] loop5: detected capacity change from 0 to 128 [ 396.538204][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 396.587715][ T7331] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 396.599053][ T7331] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 396.803136][ T7342] hub 8-0:1.0: USB hub found [ 396.815630][ T7342] hub 8-0:1.0: 1 port detected [ 397.848214][ T7351] fuse: Bad value for 'group_id' [ 397.861598][ T7352] netlink: 56 bytes leftover after parsing attributes in process `syz.3.802'. [ 397.930102][ T7355] hub 8-0:1.0: USB hub found [ 397.935045][ T7355] hub 8-0:1.0: 1 port detected [ 398.181152][ T7362] loop3: detected capacity change from 0 to 2048 [ 398.320660][ T7368] binder: 7367:7368 ioctl 4018620d 0 returned -22 [ 398.338526][ T7368] binder: 7367:7368 unknown command 1074553620 [ 398.344708][ T7368] binder: 7367:7368 ioctl c0306201 200000000640 returned -22 [ 398.530549][ T7362] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 402.793751][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'. [ 404.110544][ T7432] loop6: detected capacity change from 0 to 2048 [ 404.311582][ T7438] binder: 7434:7438 ioctl 4018620d 0 returned -22 [ 404.456508][ T7432] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 404.549649][ T7449] hub 8-0:1.0: USB hub found [ 404.555216][ T7449] hub 8-0:1.0: 1 port detected [ 407.381784][ T7467] loop6: detected capacity change from 0 to 1024 [ 408.198034][ T7467] EXT4-fs (loop6): Ignoring removed orlov option [ 408.292186][ T7467] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 408.647333][ T7499] netlink: 'syz.5.833': attribute type 4 has an invalid length. [ 408.832263][ T7502] loop0: detected capacity change from 0 to 2048 [ 408.983107][ T7509] tipc: Started in network mode [ 409.011569][ T7509] tipc: Node identity 5a87272f10a9, cluster identity 4711 [ 409.102074][ T7509] tipc: Enabled bearer , priority 0 [ 409.111693][ T7509] device syzkaller0 entered promiscuous mode [ 409.130553][ T7502] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 409.134908][ T7509] tipc: Resetting bearer [ 410.837398][ T7508] tipc: Resetting bearer [ 411.476961][ T7523] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 411.754030][ T7508] tipc: Disabling bearer [ 411.794118][ T7531] loop5: detected capacity change from 0 to 1024 [ 411.938034][ T4274] Bluetooth: hci5: command 0x0406 tx timeout [ 411.952976][ T7531] EXT4-fs (loop5): Ignoring removed orlov option [ 411.960560][ T4256] tipc: Node number set to 1244538671 [ 412.797263][ T7531] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 413.057297][ T7559] hub 8-0:1.0: USB hub found [ 413.063306][ T7559] hub 8-0:1.0: 1 port detected [ 415.047560][ T7568] loop_set_status: loop7 () has still dirty pages (nrpages=163) [ 418.426427][ T7620] loop5: detected capacity change from 0 to 736 [ 418.718338][ T7631] misc userio: No port type given on /dev/userio [ 420.236859][ T7650] hub 8-0:1.0: USB hub found [ 420.242528][ T7650] hub 8-0:1.0: 1 port detected [ 422.459492][ T7259] Bluetooth: hci4: command 0x0406 tx timeout [ 424.671264][ T7670] netlink: 56 bytes leftover after parsing attributes in process `syz.3.873'. [ 424.851031][ T7672] device syzkaller0 entered promiscuous mode [ 424.876171][ T7675] syz.1.875 uses obsolete (PF_INET,SOCK_PACKET) [ 425.136604][ T7683] misc userio: No port type given on /dev/userio [ 426.037497][ T7675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 426.070185][ T7689] hub 8-0:1.0: USB hub found [ 426.115386][ T7689] hub 8-0:1.0: 1 port detected [ 426.232276][ T7680] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 427.332986][ T7704] ODEBUG: Out of memory. ODEBUG disabled [ 430.015096][ T7741] misc userio: No port type given on /dev/userio [ 431.665387][ T7259] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 432.065340][ T7259] usb 2-1: Using ep0 maxpacket: 16 [ 432.925394][ T7259] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 432.933027][ T7259] usb 2-1: can't read configurations, error -71 [ 435.351033][ T7805] hub 8-0:1.0: USB hub found [ 435.356746][ T7805] hub 8-0:1.0: 1 port detected [ 436.549405][ T7806] chnl_net:caif_netlink_parms(): no params data found [ 437.646954][ T7817] loop_set_status: loop7 () has still dirty pages (nrpages=288) [ 437.856658][ T7806] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.885467][ T7806] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.190311][ T7839] hub 8-0:1.0: USB hub found [ 438.195194][ T7839] hub 8-0:1.0: 1 port detected [ 438.375431][ T4268] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 439.021947][ T4268] usb 2-1: Using ep0 maxpacket: 16 [ 439.029465][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 439.067035][ T7806] device bridge_slave_0 entered promiscuous mode [ 439.119999][ T7806] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.145562][ T4268] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 439.186113][ T4268] usb 2-1: config 251 has no interface number 0 [ 439.192547][ T4268] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 439.209024][ T7806] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.292554][ T7806] device bridge_slave_1 entered promiscuous mode [ 439.379612][ T4268] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 439.391368][ T4268] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 439.404490][ T4268] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 439.436527][ T4268] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.310976][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.317359][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.343148][ T4268] usb 2-1: config 251 interface 202 has no altsetting 0 [ 440.356044][ T7806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.597122][ T7806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.635444][ T4268] usb 2-1: string descriptor 0 read error: -71 [ 440.652509][ T4268] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 440.665321][ T7806] team0: Port device team_slave_0 added [ 440.680594][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.736072][ T4268] usb 2-1: can't set config #251, error -71 [ 440.752597][ T4268] usb 2-1: USB disconnect, device number 11 [ 441.572017][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 442.125661][ T7806] team0: Port device team_slave_1 added [ 443.366417][ T7806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.373416][ T7806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.456530][ T7806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.501366][ T7806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.512808][ T7806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.581873][ T7620] Set syz1 is full, maxelem 65536 reached [ 443.656001][ T7806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.677399][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 443.913474][ T7806] device hsr_slave_0 entered promiscuous mode [ 443.922860][ T7806] device hsr_slave_1 entered promiscuous mode [ 443.959884][ T7806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.985391][ T7806] Cannot create hsr debugfs directory [ 444.482353][ T6333] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.736863][ T6333] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.842929][ T7901] netlink: 'syz.6.922': attribute type 4 has an invalid length. [ 445.155407][ T4276] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 445.445388][ T4276] usb 1-1: Using ep0 maxpacket: 16 [ 445.576050][ T4276] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 445.656317][ T4276] usb 1-1: config 251 has no interface number 0 [ 445.662655][ T4276] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 445.684044][ T4276] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 445.715356][ T4276] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 445.894611][ T4276] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 445.906961][ T4276] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.921074][ T4276] usb 1-1: config 251 interface 202 has no altsetting 0 [ 445.956083][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 445.964733][ T6333] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.495120][ T6333] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.687579][ T4276] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 446.697931][ T4276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.706127][ T4276] usb 1-1: Product: syz [ 446.710617][ T4276] usb 1-1: Manufacturer: syz [ 446.715590][ T4276] usb 1-1: SerialNumber: syz [ 446.765740][ T7904] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 446.773201][ T7904] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 446.964245][ T7806] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 447.020100][ T7806] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 447.182484][ T7806] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 447.615123][ T7806] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 448.265584][ T4276] cxacru 1-1:251.202: usbatm_usb_probe: bind failed: -19! [ 448.283428][ T4276] usb 1-1: USB disconnect, device number 7 [ 448.476116][ T7923] loop_set_status: loop7 () has still dirty pages (nrpages=641) [ 448.718756][ T7943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.930'. [ 448.888837][ T7806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.962240][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 448.984947][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.042966][ T7806] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.076143][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 449.103138][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.168140][ T4432] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.175509][ T4432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.189074][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 449.209356][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 449.242330][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.262399][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.269553][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.509130][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 449.570592][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 449.842364][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 450.117558][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 450.279720][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 450.496105][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 451.406356][ T1347] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 451.884964][ T7991] netlink: 16 bytes leftover after parsing attributes in process `syz.6.941'. [ 451.895364][ T1347] usb 1-1: Using ep0 maxpacket: 16 [ 451.930105][ T7984] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 451.974146][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 451.993089][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 452.002170][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 452.010938][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 452.020612][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 452.034422][ T7986] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 452.035638][ T1347] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 452.056678][ T1347] usb 1-1: config 251 has no interface number 0 [ 452.069924][ T1347] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 452.089470][ T1347] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 452.100670][ T1347] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 452.112009][ T1347] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 452.123242][ T1347] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.143635][ T1347] usb 1-1: config 251 interface 202 has no altsetting 0 [ 452.144718][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 452.290340][ T8007] hub 8-0:1.0: USB hub found [ 452.296029][ T8007] hub 8-0:1.0: 1 port detected [ 452.345758][ T1347] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 452.540558][ T1347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.900757][ T1347] usb 1-1: Product: syz [ 453.317496][ T1347] usb 1-1: Manufacturer: syz [ 453.322168][ T1347] usb 1-1: SerialNumber: syz [ 453.355426][ T1347] usb 1-1: can't set config #251, error -71 [ 453.399100][ T1347] usb 1-1: USB disconnect, device number 8 [ 454.695680][ T8032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.951'. [ 454.869683][ T6333] device hsr_slave_0 left promiscuous mode [ 454.903064][ T6333] device hsr_slave_1 left promiscuous mode [ 454.911133][ T6333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.927011][ T6333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.935116][ T6333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.948536][ T6333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.971372][ T6333] device bridge_slave_1 left promiscuous mode [ 454.981798][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.993875][ T8036] loop6: detected capacity change from 0 to 8192 [ 455.003333][ T6333] device bridge_slave_0 left promiscuous mode [ 455.019317][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.037194][ T6333] device veth1_macvtap left promiscuous mode [ 455.043472][ T6333] device veth0_macvtap left promiscuous mode [ 455.050071][ T6333] device veth1_vlan left promiscuous mode [ 455.056607][ T6333] device veth0_vlan left promiscuous mode [ 455.112983][ T8036] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 455.165578][ T26] audit: type=1800 audit(1771913998.570:5): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.952" name="file2" dev="loop6" ino=1048594 res=0 errno=0 [ 455.190126][ T8036] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.232181][ T8036] FAT-fs (loop6): Filesystem has been set read-only [ 455.259004][ T8036] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.273727][ T8036] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.322848][ T8036] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.382962][ T8036] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.396696][ T8036] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.406717][ T8036] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.415845][ T8036] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.424731][ T8036] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.443724][ T8036] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 455.570968][ T8053] hub 8-0:1.0: USB hub found [ 455.577114][ T8053] hub 8-0:1.0: 1 port detected [ 455.966942][ T6333] team0 (unregistering): Port device team_slave_1 removed [ 456.143375][ T6333] team0 (unregistering): Port device team_slave_0 removed [ 456.380123][ T6333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.403286][ T6333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.856436][ T8060] hub 8-0:1.0: USB hub found [ 456.862457][ T8060] hub 8-0:1.0: 1 port detected [ 457.693047][ T6333] bond0 (unregistering): Released all slaves [ 458.252885][ T8069] loop1: detected capacity change from 0 to 4096 [ 458.278491][ T8069] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 458.475902][ T8031] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 458.527533][ T8069] ntfs3: loop1: ino=21, "file1" fallocate(0x20) is not supported [ 459.057102][ T8079] hub 8-0:1.0: USB hub found [ 459.062477][ T8079] hub 8-0:1.0: 1 port detected [ 460.311924][ T8087] hub 8-0:1.0: USB hub found [ 460.317930][ T8087] hub 8-0:1.0: 1 port detected [ 461.305376][ T4276] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 461.402462][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 461.420788][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 461.475182][ T7806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.588908][ T8110] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 464.127976][ T8116] loop1: detected capacity change from 0 to 8192 [ 464.213144][ T8116] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 464.322233][ T8116] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 464.403431][ T8116] FAT-fs (loop1): Filesystem has been set read-only [ 464.410599][ T26] audit: type=1800 audit(1771914007.730:6): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.966" name="file2" dev="loop1" ino=1048595 res=0 errno=0 [ 464.628689][ T8116] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 464.982969][ T8116] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 465.478865][ T8129] loop3: detected capacity change from 0 to 2048 [ 465.486262][ T8116] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 465.506017][ T8116] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 465.514931][ T8116] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 465.561296][ T8116] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 465.591678][ T8116] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 465.652476][ T8116] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 465.725811][ T8129] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 465.749015][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 465.762865][ T8116] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 465.959314][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 466.016461][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 466.025568][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 466.036356][ T7806] device veth0_vlan entered promiscuous mode [ 466.044621][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 466.104357][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 466.324974][ T7806] device veth1_vlan entered promiscuous mode [ 466.598302][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 466.635872][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 466.674841][ T7806] device veth0_macvtap entered promiscuous mode [ 466.724794][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 466.754550][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 466.814918][ T7806] device veth1_macvtap entered promiscuous mode [ 466.842706][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 466.871698][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 466.927978][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.995488][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.033514][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.044912][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.055372][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.066592][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.077873][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.090026][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.115124][ T7806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.132382][ T8175] hub 8-0:1.0: USB hub found [ 467.138191][ T8175] hub 8-0:1.0: 1 port detected [ 468.018981][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 468.126452][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 468.288905][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.400485][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.410739][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.421365][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.445517][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.456314][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.467307][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.478542][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.489949][ T7806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.514912][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 468.546115][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 468.577982][ T8188] fuse: Bad value for 'user_id' [ 468.615582][ T7806] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.624817][ T7806] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.668907][ T7806] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.680752][ T7806] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.833565][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.838300][ T8197] loop_set_status: loop7 () has still dirty pages (nrpages=64) [ 468.860220][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.983595][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 469.611925][ T4686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.686535][ T4686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.734422][ T8208] netlink: 'syz.6.988': attribute type 4 has an invalid length. [ 469.742705][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 469.910680][ T8206] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 469.940800][ T8215] loop6: detected capacity change from 0 to 2048 [ 470.096383][ T8219] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 470.116043][ T8215] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 470.329812][ T8235] hub 8-0:1.0: USB hub found [ 470.335437][ T8235] hub 8-0:1.0: 1 port detected [ 471.753817][ T8240] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 471.947132][ T8244] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 472.970082][ T8248] loop7: detected capacity change from 0 to 8192 [ 473.398198][ T8248] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 473.416410][ T8248] REISERFS (device loop7): using ordered data mode [ 473.423027][ T8248] reiserfs: using flush barriers [ 473.481309][ T8248] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 473.505993][ T8248] REISERFS (device loop7): checking transaction log (loop7) [ 473.526849][ T8248] REISERFS (device loop7): Using r5 hash to sort names [ 473.586726][ T8248] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 473.693487][ T8248] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 473.790640][ T8248] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 473.937268][ T8282] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1003'. [ 474.235551][ T4231] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 475.585651][ T4231] usb 8-1: unable to read config index 0 descriptor/all [ 476.095108][ T4231] usb 8-1: can't read configurations, error -71 [ 476.427816][ T8327] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1015'. [ 476.433249][ T8328] loop0: detected capacity change from 0 to 1024 [ 476.568103][ T8328] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 476.592740][ T8328] EXT4-fs (loop0): orphan cleanup on readonly fs [ 476.616947][ T8328] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.1014: Freeing blocks not in datazone - block = 0, count = 4096 [ 476.796181][ T8328] EXT4-fs (loop0): 1 orphan inode deleted [ 476.803782][ T8328] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 479.782535][ T8366] loop7: detected capacity change from 0 to 8192 [ 482.343048][ T8389] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1026'. [ 487.908708][ T8435] loop7: detected capacity change from 0 to 8192 [ 487.971001][ T8448] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1040'. [ 488.121610][ T8435] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 488.128244][ T8451] loop3: detected capacity change from 0 to 736 [ 488.153972][ T8435] REISERFS (device loop7): using ordered data mode [ 488.161122][ T8435] reiserfs: using flush barriers [ 488.175510][ T8435] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 488.192237][ T8435] REISERFS (device loop7): checking transaction log (loop7) [ 488.210911][ T8435] REISERFS (device loop7): Using r5 hash to sort names [ 488.220083][ T8435] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 488.247054][ T8435] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 488.298989][ T8435] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 492.156761][ T8503] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1054'. [ 492.496113][ T8505] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 492.503823][ T8510] loop6: detected capacity change from 0 to 1024 [ 492.566410][ T8512] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 492.591254][ T8510] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 492.625721][ T8510] EXT4-fs (loop6): orphan cleanup on readonly fs [ 492.646133][ T8510] EXT4-fs error (device loop6): ext4_free_blocks:6234: comm syz.6.1056: Freeing blocks not in datazone - block = 0, count = 4096 [ 492.706866][ T8510] EXT4-fs (loop6): 1 orphan inode deleted [ 492.820314][ T8510] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 493.112443][ T8508] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 494.768459][ T8534] loop0: detected capacity change from 0 to 8192 [ 494.946036][ T8534] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 495.028205][ T8534] REISERFS (device loop0): using ordered data mode [ 495.034768][ T8534] reiserfs: using flush barriers [ 495.115308][ T8534] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 495.167031][ T8534] REISERFS (device loop0): checking transaction log (loop0) [ 495.195520][ T8534] REISERFS (device loop0): Using r5 hash to sort names [ 495.220178][ T8534] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 495.284931][ T8534] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 495.352586][ T8534] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 495.666785][ T8554] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 495.851738][ T7259] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 496.255770][ T7259] usb 1-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 496.427914][ T7259] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 496.752169][ T7259] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 496.854319][ T7259] usb 1-1: config 0 interface 0 has no altsetting 0 [ 496.935354][ T7259] usb 1-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 496.998807][ T7259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.139452][ T7259] usb 1-1: config 0 descriptor?? [ 497.166063][ T8534] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 497.171389][ T8578] loop1: detected capacity change from 0 to 736 [ 497.679332][ T7259] wacom 0003:056A:0325.0004: unknown main item tag 0x3 [ 497.873894][ T8534] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 497.937945][ T7259] wacom 0003:056A:0325.0004: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.0-1/input0 [ 498.079741][ T7259] usb 1-1: USB disconnect, device number 9 [ 498.252045][ T8586] fido_id[8586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 500.905802][ T8451] Set syz1 is full, maxelem 65536 reached [ 501.729363][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.735768][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.999672][ T8624] loop1: detected capacity change from 0 to 2048 [ 502.467075][ T8624] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 502.933817][ T8652] loop7: detected capacity change from 0 to 1024 [ 503.282317][ T8649] loop3: detected capacity change from 0 to 8192 [ 503.995631][ T8652] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 504.042830][ T8652] EXT4-fs (loop7): orphan cleanup on readonly fs [ 504.065550][ T8652] EXT4-fs error (device loop7): ext4_free_blocks:6234: comm syz.7.1081: Freeing blocks not in datazone - block = 0, count = 4096 [ 504.162509][ T8652] EXT4-fs (loop7): 1 orphan inode deleted [ 504.265317][ T8652] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 504.295050][ T8649] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 504.305772][ T8649] REISERFS (device loop3): using ordered data mode [ 504.312319][ T8649] reiserfs: using flush barriers [ 504.781299][ T8649] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 505.008657][ T8649] REISERFS (device loop3): checking transaction log (loop3) [ 505.019150][ T8649] REISERFS (device loop3): Using r5 hash to sort names [ 505.042610][ T8649] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 505.105395][ T8649] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 505.673092][ T8685] loop6: detected capacity change from 0 to 2048 [ 505.772355][ T8685] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 506.656745][ T8698] device syzkaller0 entered promiscuous mode [ 507.718519][ T8714] loop7: detected capacity change from 0 to 8192 [ 508.076317][ T8714] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 508.265090][ T8714] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 508.274963][ T26] audit: type=1800 audit(1771914051.670:7): pid=8714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1093" name="file2" dev="loop7" ino=1048598 res=0 errno=0 [ 508.341437][ T8714] FAT-fs (loop7): Filesystem has been set read-only [ 508.550190][ T8735] loop0: detected capacity change from 0 to 2048 [ 508.572814][ T8730] loop1: detected capacity change from 0 to 8192 [ 508.682087][ T8730] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 508.697680][ T8735] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 508.776735][ T8730] REISERFS (device loop1): using ordered data mode [ 508.783701][ T8730] reiserfs: using flush barriers [ 508.931612][ T8730] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 509.047381][ T8730] REISERFS (device loop1): checking transaction log (loop1) [ 509.117849][ T8730] REISERFS (device loop1): Using r5 hash to sort names [ 509.125068][ T8730] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 509.257683][ T8730] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 509.375482][ T8730] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 509.750491][ T8759] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 509.879824][ T8761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 509.995305][ T21] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 510.322807][ T8773] loop7: detected capacity change from 0 to 16384 [ 510.556516][ T21] usb 2-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 510.751470][ T21] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 511.021899][ T21] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 511.772924][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 511.811334][ T21] usb 2-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 511.843753][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.896448][ T21] usb 2-1: config 0 descriptor?? [ 511.951482][ T21] usb 2-1: can't set config #0, error -71 [ 511.959400][ T8785] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 512.010215][ T21] usb 2-1: USB disconnect, device number 13 [ 512.170376][ T8786] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 512.391040][ T8777] loop_set_status: loop7 () has still dirty pages (nrpages=416) [ 512.864194][ T8804] loop1: detected capacity change from 0 to 736 [ 513.967019][ T8810] tipc: Started in network mode [ 513.975318][ T8810] tipc: Node identity 9a67355efbc3, cluster identity 4711 [ 513.977315][ T8816] fuse: Invalid rootmode [ 514.015517][ T8810] tipc: Enabled bearer , priority 0 [ 514.076708][ T8810] tipc: Resetting bearer [ 514.166610][ T8809] tipc: Disabling bearer [ 514.898731][ T8844] misc userio: No port type given on /dev/userio [ 518.917571][ T8876] loop3: detected capacity change from 0 to 2048 [ 519.073827][ T8876] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 519.572170][ T8898] netlink: 'syz.7.1132': attribute type 4 has an invalid length. [ 519.646171][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 520.902520][ T8925] fuse: Bad value for 'rootmode' [ 523.718127][ T8963] loop0: detected capacity change from 0 to 2048 [ 523.805761][ T8963] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 524.174805][ T8972] loop7: detected capacity change from 0 to 8192 [ 524.626303][ T8972] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 524.749464][ T26] audit: type=1800 audit(1771914068.160:8): pid=8972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1150" name="file2" dev="loop7" ino=1048599 res=0 errno=0 [ 524.776689][ T8972] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 524.860131][ T8972] FAT-fs (loop7): Filesystem has been set read-only [ 524.868340][ T8972] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 524.905890][ T8972] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 524.915146][ T8972] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 524.947244][ T8972] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 525.010779][ T8972] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 525.060479][ T8972] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 525.100018][ T8972] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 525.135467][ T8972] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 525.160960][ T8988] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 525.164655][ T8972] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 525.232904][ T8991] loop6: detected capacity change from 0 to 2048 [ 525.310834][ T8991] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 525.775675][ T9002] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 526.592321][ T9029] misc userio: No port type given on /dev/userio [ 526.898771][ T9027] loop3: detected capacity change from 0 to 4096 [ 526.995402][ T9027] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 527.134404][ T9043] hub 8-0:1.0: USB hub found [ 527.140623][ T9043] hub 8-0:1.0: 1 port detected [ 528.048611][ T9027] netlink: 'syz.3.1161': attribute type 16 has an invalid length. [ 528.142289][ T9027] netlink: 'syz.3.1161': attribute type 17 has an invalid length. [ 530.375028][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 530.406902][ T9027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.822654][ T9058] hub 8-0:1.0: USB hub found [ 530.828815][ T9058] hub 8-0:1.0: 1 port detected [ 531.401128][ T9060] loop1: detected capacity change from 0 to 2048 [ 533.210974][ T9060] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 533.451045][ T9096] loop3: detected capacity change from 0 to 736 [ 533.546955][ T9098] loop6: detected capacity change from 0 to 2048 [ 533.748408][ T9098] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 534.203870][ T9115] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1172'. [ 534.244162][ T9111] loop3: detected capacity change from 0 to 1024 [ 534.288703][ T9111] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 534.336425][ T9111] EXT4-fs (loop3): orphan cleanup on readonly fs [ 534.358391][ T9111] EXT4-fs error (device loop3): ext4_free_blocks:6234: comm syz.3.1177: Freeing blocks not in datazone - block = 0, count = 4096 [ 534.388453][ T9111] EXT4-fs (loop3): 1 orphan inode deleted [ 534.394368][ T9111] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 535.512634][ T9127] netlink: 'syz.7.1180': attribute type 4 has an invalid length. [ 535.801889][ T9132] netlink: 'syz.7.1182': attribute type 4 has an invalid length. [ 535.940045][ T9140] misc userio: No port type given on /dev/userio [ 537.694019][ T9160] loop1: detected capacity change from 0 to 2048 [ 537.846051][ T9160] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 537.860321][ T9161] loop6: detected capacity change from 0 to 8192 [ 537.914003][ T9161] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 538.012107][ T9161] REISERFS (device loop6): using ordered data mode [ 538.125568][ T9161] reiserfs: using flush barriers [ 538.199437][ T9161] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 538.305802][ T9161] REISERFS (device loop6): checking transaction log (loop6) [ 538.345402][ T9161] REISERFS (device loop6): Using r5 hash to sort names [ 538.364497][ T9161] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 538.433370][ T9161] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 538.496845][ T9161] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 538.965834][ T4276] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 539.060487][ T9184] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1188'. [ 539.330511][ T9192] hub 8-0:1.0: USB hub found [ 539.335983][ T9192] hub 8-0:1.0: 1 port detected [ 540.926672][ T4276] usb 7-1: device descriptor read/all, error -71 [ 541.058102][ T9203] netlink: 'syz.3.1193': attribute type 4 has an invalid length. [ 541.164116][ T9205] loop0: detected capacity change from 0 to 2048 [ 541.297117][ T9211] loop7: detected capacity change from 0 to 1024 [ 541.418689][ T9205] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 541.467272][ T9211] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 541.505522][ T9221] loop3: detected capacity change from 0 to 128 [ 541.651868][ T9221] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 541.663261][ T9221] ext4 filesystem being mounted at /271/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 541.821436][ T9211] EXT4-fs (loop7): orphan cleanup on readonly fs [ 542.090873][ T9211] EXT4-fs error (device loop7): ext4_free_blocks:6234: comm syz.7.1197: Freeing blocks not in datazone - block = 0, count = 4096 [ 542.207622][ T9211] EXT4-fs (loop7): 1 orphan inode deleted [ 542.219118][ T9211] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 543.149273][ T9237] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1201'. [ 543.353190][ T9239] misc userio: No port type given on /dev/userio [ 548.246033][ T9285] loop3: detected capacity change from 0 to 8192 [ 548.390350][ T9285] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 548.439275][ T26] audit: type=1800 audit(1771914091.850:9): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1210" name="file2" dev="loop3" ino=1048600 res=0 errno=0 [ 548.462274][ T9285] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 548.473625][ T9285] FAT-fs (loop3): Filesystem has been set read-only [ 548.546915][ T9295] loop7: detected capacity change from 0 to 128 [ 549.022404][ T9285] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 549.291080][ T9295] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 549.302439][ T9295] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 549.320709][ T9285] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 549.398043][ T9285] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 549.407522][ T9285] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 549.416511][ T9285] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 549.425561][ T9285] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 549.436795][ T9285] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 549.453355][ T9285] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 549.603923][ T9285] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 549.771888][ T9304] misc userio: No port type given on /dev/userio [ 549.914502][ T9319] netlink: 'syz.0.1216': attribute type 4 has an invalid length. [ 550.128896][ T9324] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1219'. [ 551.246734][ T9346] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 551.312558][ T9347] loop7: detected capacity change from 0 to 8192 [ 551.326901][ T9348] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 551.358646][ T9347] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 551.402756][ T26] audit: type=1800 audit(1771914094.810:10): pid=9347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1224" name="file2" dev="loop7" ino=1048601 res=0 errno=0 [ 551.413302][ T9350] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 551.429670][ T9347] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 551.453447][ T9347] FAT-fs (loop7): Filesystem has been set read-only [ 551.470842][ T9347] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 551.500007][ T9347] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 551.521040][ T9347] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 551.544075][ T9351] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 551.545460][ T9347] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 551.583922][ T9347] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 551.636507][ T9347] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 551.675575][ T9347] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 551.700039][ T9347] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 551.728952][ T9347] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 551.959160][ T9359] misc userio: No port type given on /dev/userio [ 552.062970][ T9368] netlink: 'syz.0.1227': attribute type 4 has an invalid length. [ 552.240541][ T9377] netlink: 'syz.0.1229': attribute type 4 has an invalid length. [ 552.649534][ T9388] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1231'. [ 555.373908][ T9407] hub 8-0:1.0: USB hub found [ 555.382739][ T9407] hub 8-0:1.0: 1 port detected [ 555.411285][ T9409] hub 8-0:1.0: USB hub found [ 555.418546][ T9409] hub 8-0:1.0: 1 port detected [ 556.056247][ T9403] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 556.067596][ T9412] loop7: detected capacity change from 0 to 2048 [ 556.171786][ T9411] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 556.179955][ T9412] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 556.568336][ T9441] netlink: 'syz.6.1244': attribute type 4 has an invalid length. [ 556.860742][ T9432] loop3: detected capacity change from 0 to 8192 [ 556.982535][ T9432] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 556.995977][ T26] audit: type=1800 audit(1771914100.410:11): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1242" name="file2" dev="loop3" ino=1048602 res=0 errno=0 [ 556.997066][ T9432] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 557.029282][ T9432] FAT-fs (loop3): Filesystem has been set read-only [ 557.053196][ T9432] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 557.135864][ T9432] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 557.179199][ T9432] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 557.239316][ T9432] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 557.252656][ T9432] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 557.261695][ T9432] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 557.270620][ T9432] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 558.078435][ T9432] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 558.096225][ T9432] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 558.235348][ T9466] hub 8-0:1.0: USB hub found [ 558.241553][ T9466] hub 8-0:1.0: 1 port detected [ 559.450826][ T9473] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 560.159471][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 562.353679][ T9495] netlink: 'syz.0.1256': attribute type 4 has an invalid length. [ 562.631323][ T9505] loop3: detected capacity change from 0 to 2048 [ 562.705175][ T9509] loop0: detected capacity change from 0 to 1024 [ 562.785906][ T9505] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 562.813186][ T9509] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 562.922924][ T9509] EXT4-fs (loop0): orphan cleanup on readonly fs [ 563.018974][ T9509] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.1260: Freeing blocks not in datazone - block = 0, count = 4096 [ 563.030907][ T9517] loop6: detected capacity change from 0 to 2048 [ 563.071530][ T9509] EXT4-fs (loop0): 1 orphan inode deleted [ 563.090151][ T9509] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 563.172764][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.230562][ T9517] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 564.033191][ T9535] hub 8-0:1.0: USB hub found [ 564.039069][ T9535] hub 8-0:1.0: 1 port detected [ 565.056128][ T9541] fuse: Bad value for 'fd' [ 565.318372][ T9547] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 565.322910][ T9553] loop7: detected capacity change from 0 to 736 [ 565.402377][ T9555] hub 8-0:1.0: USB hub found [ 565.408279][ T9555] hub 8-0:1.0: 1 port detected [ 566.378895][ T9556] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 566.558630][ T9562] loop3: detected capacity change from 0 to 2048 [ 566.699050][ T9572] loop0: detected capacity change from 0 to 1024 [ 566.720597][ T9562] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 566.826245][ T9572] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 566.832301][ T9581] loop1: detected capacity change from 0 to 8192 [ 566.848819][ T9572] EXT4-fs (loop0): orphan cleanup on readonly fs [ 566.947817][ T9572] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.1273: Freeing blocks not in datazone - block = 0, count = 4096 [ 566.982754][ T9572] EXT4-fs (loop0): 1 orphan inode deleted [ 567.002076][ T9572] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 567.028760][ T9588] fuse: Bad value for 'fd' [ 567.097589][ T9581] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 567.290192][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1269'. [ 567.837024][ T26] audit: type=1800 audit(1771914111.240:12): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1275" name="file2" dev="loop1" ino=1048603 res=0 errno=0 [ 567.884557][ T9581] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 568.005321][ T9581] FAT-fs (loop1): Filesystem has been set read-only [ 568.012112][ T9581] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 568.024870][ T9581] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 568.043361][ T9581] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 568.080872][ T9581] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 568.113138][ T9581] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 569.404718][ T9581] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 570.500185][ T9609] hub 8-0:1.0: USB hub found [ 570.506569][ T9609] hub 8-0:1.0: 1 port detected [ 571.040836][ T9581] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 571.065561][ T9581] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 571.115461][ T9581] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 571.357914][ T9620] hub 8-0:1.0: USB hub found [ 571.363409][ T9620] hub 8-0:1.0: 1 port detected [ 572.357005][ T9629] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 572.366654][ T9630] fuse: Unknown parameter '0x0000000000000003' [ 573.368858][ T9642] loop7: detected capacity change from 0 to 1024 [ 573.390096][ T9646] netlink: 'syz.0.1290': attribute type 4 has an invalid length. [ 573.667090][ T9642] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 573.686474][ T9642] EXT4-fs (loop7): orphan cleanup on readonly fs [ 573.726809][ T9642] EXT4-fs error (device loop7): ext4_free_blocks:6234: comm syz.7.1289: Freeing blocks not in datazone - block = 0, count = 4096 [ 573.846079][ T9642] EXT4-fs (loop7): 1 orphan inode deleted [ 573.852103][ T9642] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 573.929990][ T9659] loop0: detected capacity change from 0 to 2048 [ 574.667917][ T9659] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 575.978677][ T9697] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 577.425584][ T9717] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 577.513541][ T9719] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 579.655839][ T9752] netlink: 'syz.1.1312': attribute type 4 has an invalid length. [ 580.458593][ T9768] loop6: detected capacity change from 0 to 8192 [ 580.491968][ T9768] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 580.546401][ T26] audit: type=1800 audit(1771914123.960:13): pid=9768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1315" name="file2" dev="loop6" ino=1048604 res=0 errno=0 [ 582.451704][ T9797] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 582.677614][ T9795] device syzkaller0 entered promiscuous mode [ 582.706530][ T9801] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 582.779775][ T9804] netlink: 'syz.0.1326': attribute type 4 has an invalid length. [ 585.315942][ T9826] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 585.415727][ T9827] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 585.795310][ T9833] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 586.017599][ T9836] loop6: detected capacity change from 0 to 8192 [ 586.070506][ T9836] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 586.099129][ T9836] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 586.115357][ T26] audit: type=1800 audit(1771914129.510:14): pid=9836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1331" name="file2" dev="loop6" ino=1048605 res=0 errno=0 [ 586.162976][ T9843] hub 8-0:1.0: USB hub found [ 586.168378][ T9843] hub 8-0:1.0: 1 port detected [ 586.274249][ T9836] FAT-fs (loop6): Filesystem has been set read-only [ 586.324845][ T9842] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 586.499084][ T9836] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 586.754754][ T9836] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 587.042219][ T9836] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 587.078647][ T9836] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 587.120874][ T9836] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 587.159167][ T9836] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 587.189537][ T9849] overlayfs: missing 'lowerdir' [ 587.201330][ T9836] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 587.505505][ T9836] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 587.515728][ T9836] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 587.982426][ T9856] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 589.281170][ T9874] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 589.373883][ T9878] loop0: detected capacity change from 0 to 4096 [ 589.374900][ T9872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 589.497567][ T9878] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 589.720378][ T9878] netlink: 'syz.0.1349': attribute type 16 has an invalid length. [ 589.806447][ T9887] loop1: detected capacity change from 0 to 128 [ 590.063441][ T9878] netlink: 'syz.0.1349': attribute type 17 has an invalid length. [ 590.576948][ T9887] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 590.587938][ T9887] ext4 filesystem being mounted at /283/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 590.838916][ T9889] loop6: detected capacity change from 0 to 8192 [ 590.859474][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 590.888497][ T9889] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 590.941606][ T9878] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.943300][ T26] audit: type=1800 audit(1771914134.350:15): pid=9889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1352" name="file2" dev="loop6" ino=1048606 res=0 errno=0 [ 590.974928][ T9889] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 591.031981][ T9889] FAT-fs (loop6): Filesystem has been set read-only [ 591.050679][ T9878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 591.074585][ T9889] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 591.084373][ T9889] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 591.102687][ T9889] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 591.124330][ T9889] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 591.135528][ T9904] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 591.136247][ T9889] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 591.167470][ T9889] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 591.183027][ T9889] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 591.198511][ T9889] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 591.219918][ T9900] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 591.232474][ T9889] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 592.725468][ T9926] hub 8-0:1.0: USB hub found [ 592.735423][ T9926] hub 8-0:1.0: 1 port detected [ 593.788137][ T9934] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 593.849567][ T9935] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 594.423483][ T9944] device syzkaller0 entered promiscuous mode [ 595.018108][ T9955] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 595.240405][ T9956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 598.135639][ T9989] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 598.733728][T10005] netlink: 'syz.3.1384': attribute type 4 has an invalid length. [ 599.737746][T10018] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 601.989812][T10048] hub 8-0:1.0: USB hub found [ 601.995415][T10048] hub 8-0:1.0: 1 port detected [ 604.567502][T10073] binder: 10072:10073 ioctl 4018620d 0 returned -22 [ 605.006569][T10082] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 605.056151][T10083] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 605.752893][T10093] device syzkaller0 entered promiscuous mode [ 606.211367][T10100] device syzkaller0 entered promiscuous mode [ 608.759433][T10119] binder: 10117:10119 ioctl 4018620d 0 returned -22 [ 609.382236][T10128] netlink: 'syz.6.1421': attribute type 4 has an invalid length. [ 609.567162][T10134] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1423'. [ 609.633503][T10132] loop1: detected capacity change from 0 to 4096 [ 609.775338][T10132] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 609.881330][T10132] netlink: 'syz.1.1422': attribute type 16 has an invalid length. [ 609.907634][T10132] netlink: 'syz.1.1422': attribute type 17 has an invalid length. [ 610.032510][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 610.091203][T10132] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.146415][T10132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.629367][T10153] hub 8-0:1.0: USB hub found [ 611.635417][T10153] hub 8-0:1.0: 1 port detected [ 612.770315][T10156] loop1: detected capacity change from 0 to 8192 [ 613.316530][T10156] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 613.379454][T10156] REISERFS (device loop1): using ordered data mode [ 613.421823][T10156] reiserfs: using flush barriers [ 613.510241][T10156] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 613.547177][T10164] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 613.565680][T10156] REISERFS (device loop1): checking transaction log (loop1) [ 613.598412][T10156] REISERFS (device loop1): Using r5 hash to sort names [ 613.636394][T10156] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 613.688592][T10156] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 613.722742][T10156] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 613.827269][T10156] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 614.378975][T10175] loop7: detected capacity change from 0 to 2048 [ 614.540298][T10175] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 615.270652][T10182] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1435'. [ 618.315486][T10205] loop6: detected capacity change from 0 to 128 [ 618.627147][T10209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'. [ 618.693646][T10214] loop7: detected capacity change from 0 to 128 [ 619.332586][T10227] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1448'. [ 621.528899][T10241] loop7: detected capacity change from 0 to 128 [ 623.131541][T10241] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 623.142447][T10241] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 623.214120][T10250] loop1: detected capacity change from 0 to 2048 [ 623.356426][T10250] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 623.551640][T10254] device syzkaller0 entered promiscuous mode [ 624.320702][T10261] device syzkaller0 entered promiscuous mode [ 624.611400][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.505129][T10276] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1462'. [ 628.950780][T10287] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 629.030314][T10296] loop1: detected capacity change from 0 to 4096 [ 629.219022][T10296] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 629.322986][T10294] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 629.464901][T10300] loop7: detected capacity change from 0 to 2048 [ 629.542594][T10296] netlink: 'syz.1.1468': attribute type 16 has an invalid length. [ 629.574726][T10296] netlink: 'syz.1.1468': attribute type 17 has an invalid length. [ 629.622176][T10296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.640665][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1470'. [ 629.640930][T10300] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 630.555448][T10321] loop1: detected capacity change from 0 to 128 [ 630.621885][T10321] FAT-fs (loop1): bogus number of reserved sectors [ 630.628707][T10321] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 630.638467][T10321] FAT-fs (loop1): Can't find a valid FAT filesystem [ 632.776969][T10326] loop0: detected capacity change from 0 to 128 [ 632.846432][T10326] FAT-fs (loop0): bogus number of reserved sectors [ 632.869699][T10326] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 632.887357][T10326] FAT-fs (loop0): Can't find a valid FAT filesystem [ 634.751523][T10330] loop1: detected capacity change from 0 to 8192 [ 634.794132][T10330] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 638.817713][T10369] netlink: 'syz.7.1487': attribute type 4 has an invalid length. [ 639.042401][T10379] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 639.180543][T10380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 639.354934][T10383] netlink: 'syz.6.1494': attribute type 4 has an invalid length. [ 639.850826][T10392] loop7: detected capacity change from 0 to 128 [ 641.620706][T10392] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 641.631689][T10392] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 641.675449][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1496'. [ 642.077215][T10396] loop3: detected capacity change from 0 to 8192 [ 643.212286][T10396] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 643.267525][ T26] audit: type=1800 audit(1771914186.680:16): pid=10396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1497" name="file2" dev="loop3" ino=1048609 res=0 errno=0 [ 643.291021][T10396] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 643.315323][T10396] FAT-fs (loop3): Filesystem has been set read-only [ 643.359303][T10396] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 643.380376][T10396] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 643.410493][T10396] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 643.447909][T10396] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 643.473309][T10415] netlink: 'syz.6.1503': attribute type 4 has an invalid length. [ 643.501491][T10396] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 643.515389][T10396] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 643.548496][T10421] netlink: 'syz.7.1505': attribute type 4 has an invalid length. [ 643.556523][T10396] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 643.590795][T10396] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 643.615472][T10396] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 644.958095][T10439] netlink: 'syz.6.1510': attribute type 4 has an invalid length. [ 646.447131][T10462] netlink: 'syz.1.1517': attribute type 4 has an invalid length. [ 646.792089][T10478] loop3: detected capacity change from 0 to 8192 [ 646.874770][T10478] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 647.028005][ T26] audit: type=1800 audit(1771914190.440:17): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1523" name="file2" dev="loop3" ino=1048610 res=0 errno=0 [ 648.013607][T10502] netlink: 'syz.6.1530': attribute type 4 has an invalid length. [ 651.651522][T10525] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 652.548026][T10531] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 652.649089][T10539] netlink: 'syz.6.1541': attribute type 16 has an invalid length. [ 652.665955][T10539] netlink: 'syz.6.1541': attribute type 17 has an invalid length. [ 652.747985][T10539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 652.779045][T10539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 652.810095][T10537] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 652.925960][T10542] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 654.387557][T10557] loop3: detected capacity change from 0 to 128 [ 654.408906][T10559] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 654.996694][T10569] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 655.279619][T10577] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 655.304080][T10582] loop7: detected capacity change from 0 to 4096 [ 655.568264][T10582] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 655.702603][T10582] netlink: 'syz.7.1552': attribute type 16 has an invalid length. [ 655.720855][T10582] netlink: 'syz.7.1552': attribute type 17 has an invalid length. [ 656.173031][ T26] audit: type=1800 audit(1771914199.580:18): pid=10598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1552" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 656.550424][T10606] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 657.119676][T10582] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 657.597130][T10582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 658.474135][T10626] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 659.057615][T10631] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 662.375402][ T4276] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 662.635314][ T4276] usb 2-1: Using ep0 maxpacket: 16 [ 662.755436][ T4276] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 662.774096][ T4276] usb 2-1: config 251 has no interface number 0 [ 662.814592][ T4276] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 662.835468][ T4276] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 662.857728][ T4276] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 662.884340][ T4276] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 662.908172][ T4276] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.949549][ T4276] usb 2-1: config 251 interface 202 has no altsetting 0 [ 663.183026][T10688] netlink: 'syz.6.1584': attribute type 4 has an invalid length. [ 663.185433][ T4276] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 663.243190][ T4276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.246453][T10691] netlink: 'syz.0.1580': attribute type 4 has an invalid length. [ 664.258852][ T4276] usb 2-1: Product: syz [ 664.263070][ T4276] usb 2-1: Manufacturer: syz [ 664.267851][ T4276] usb 2-1: SerialNumber: syz [ 664.285544][T10670] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 664.293117][T10670] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 665.465971][ T4276] cxacru 2-1:251.202: usbatm_usb_probe: bind failed: -19! [ 665.975525][ T4276] usb 2-1: USB disconnect, device number 14 [ 667.540544][T10723] netlink: 'syz.6.1595': attribute type 16 has an invalid length. [ 667.570778][T10723] netlink: 'syz.6.1595': attribute type 17 has an invalid length. [ 667.630844][T10723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 668.280587][T10739] netlink: 'syz.7.1598': attribute type 4 has an invalid length. [ 671.234224][T10758] loop7: detected capacity change from 0 to 4096 [ 671.385363][T10758] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 671.436955][T10758] netlink: 'syz.7.1607': attribute type 16 has an invalid length. [ 671.470118][T10758] netlink: 'syz.7.1607': attribute type 17 has an invalid length. [ 672.039412][T10758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 672.389334][T10769] netlink: 'syz.3.1613': attribute type 4 has an invalid length. [ 675.220699][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 675.257490][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 677.777607][T10819] netlink: 'syz.7.1625': attribute type 4 has an invalid length. [ 678.888913][T10823] netlink: 'syz.6.1626': attribute type 16 has an invalid length. [ 678.896989][T10823] netlink: 'syz.6.1626': attribute type 17 has an invalid length. [ 678.928829][T10823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 681.205525][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1633'. [ 681.228210][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1633'. [ 683.883075][T10862] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1639'. [ 684.644759][T10878] netlink: 'syz.3.1644': attribute type 16 has an invalid length. [ 684.678942][T10878] netlink: 'syz.3.1644': attribute type 17 has an invalid length. [ 685.653329][T10878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 686.303782][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.523158][T10914] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1654'. [ 688.842775][T10924] device syzkaller0 entered promiscuous mode [ 689.075812][T10932] loop1: detected capacity change from 0 to 4096 [ 689.109316][T10932] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 689.684995][T10932] netlink: 'syz.1.1659': attribute type 16 has an invalid length. [ 689.705253][T10932] netlink: 'syz.1.1659': attribute type 17 has an invalid length. [ 690.151668][T10932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.116252][T10966] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 693.454909][T10978] device syzkaller0 entered promiscuous mode [ 693.706314][T10982] netlink: 'syz.1.1673': attribute type 4 has an invalid length. [ 695.648696][T11005] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1680'. [ 696.700241][T11016] fuse: Bad value for 'fd' [ 696.751423][T11010] fuse: Bad value for 'fd' [ 697.348258][T11030] device syzkaller0 entered promiscuous mode [ 699.506746][T11054] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1692'. [ 702.508077][T11069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1697'. [ 702.574306][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 702.629223][T11070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1697'. [ 702.712864][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 702.808013][T11072] device syzkaller0 entered promiscuous mode [ 704.036935][T11084] netlink: 'syz.0.1702': attribute type 4 has an invalid length. [ 709.434732][T11125] fuse: Bad value for 'fd' [ 710.531946][T11145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1717'. [ 710.586332][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 710.956927][T11147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1717'. [ 711.054146][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 712.770562][T11183] misc userio: No port type given on /dev/userio [ 714.970926][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 714.994104][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 715.934651][T11208] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1733'. [ 715.983009][T11208] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1733'. [ 716.285963][T11225] netlink: 'syz.7.1738': attribute type 4 has an invalid length. [ 719.263966][T11257] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1747'. [ 719.281532][T11262] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1749'. [ 719.432474][T11269] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 719.573529][T11275] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1755'. [ 719.683694][T11271] loop7: detected capacity change from 0 to 8192 [ 719.723481][T11271] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 723.771571][T11313] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1764'. [ 723.816068][T11312] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1765'. [ 724.916350][T11335] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1772'. [ 724.961705][T11334] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1773'. [ 726.066610][T11346] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1776'. [ 726.134539][T11349] fuse: Bad value for 'fd' [ 727.119106][T11358] fuse: Bad value for 'fd' [ 727.185010][T11360] nftables ruleset with unbound chain [ 733.245441][T11392] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1791'. [ 733.286552][T11392] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1791'. [ 733.303323][T11399] fuse: Bad value for 'fd' [ 737.975045][T11450] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1806'. [ 738.411458][T11447] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1805'. [ 740.079743][T11475] loop1: detected capacity change from 0 to 8192 [ 740.129303][T11475] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 740.184436][ T26] audit: type=1800 audit(1771914283.590:19): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1814" name="file2" dev="loop1" ino=1048612 res=0 errno=0 [ 740.207084][T11475] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 740.444983][T11475] FAT-fs (loop1): Filesystem has been set read-only [ 740.475643][T11475] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 740.485505][T11475] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 740.854009][T11475] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 740.895786][T11475] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 740.976353][T11475] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 741.009885][T11475] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 741.055205][T11475] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 741.064127][T11475] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 741.107313][T11475] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 741.120117][T11498] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1823'. [ 744.913107][T11533] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 745.847738][T11545] netlink: 'syz.1.1839': attribute type 4 has an invalid length. [ 747.293987][T11548] loop7: detected capacity change from 0 to 8192 [ 747.362444][T11548] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 747.458616][ T26] audit: type=1800 audit(1771914290.870:20): pid=11548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1841" name="file2" dev="loop7" ino=1048613 res=0 errno=0 [ 747.487690][T11548] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 747.500963][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.541715][T11548] FAT-fs (loop7): Filesystem has been set read-only [ 747.619492][T11548] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 747.642925][T11548] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 747.731477][T11548] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 747.795503][T11548] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 748.165738][T11548] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 748.220495][T11548] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 748.574018][T11548] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 748.614117][T11548] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 748.623180][T11548] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 749.476087][T11594] netlink: 'syz.7.1852': attribute type 4 has an invalid length. [ 756.630618][T11669] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1853'. [ 758.189099][T11685] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1883'. [ 758.213304][T11689] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1885'. [ 760.859912][T11683] loop1: detected capacity change from 0 to 8192 [ 761.154167][T11683] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 763.640951][T11737] fuse: Bad value for 'fd' [ 763.938476][T11750] sd 0:0:1:0: PR command failed: 2 [ 763.985230][T11750] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 764.625482][T11750] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 772.583067][T11902] misc userio: No port type given on /dev/userio [ 777.081341][T11943] fuse: Bad value for 'fd' [ 779.582747][T11980] hub 8-0:1.0: USB hub found [ 779.693609][T11980] hub 8-0:1.0: 1 port detected [ 780.714847][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1975'. [ 781.518945][T12010] fuse: Bad value for 'fd' [ 781.690416][T12006] loop7: detected capacity change from 0 to 8192 [ 781.735453][T12006] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 781.985174][T12006] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 781.995385][ T26] audit: type=1800 audit(1771914325.390:21): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1979" name="file2" dev="loop7" ino=1048614 res=0 errno=0 [ 782.068842][T12006] FAT-fs (loop7): Filesystem has been set read-only [ 782.109165][T12006] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 782.164497][T12006] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 782.209047][T12006] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 782.250501][T12006] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 782.269042][T12006] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 782.278032][T12006] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 782.287058][T12006] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 782.296926][T12006] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 782.305893][T12006] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 784.242108][T12048] misc userio: No port type given on /dev/userio [ 787.505843][T12095] fuse: Bad value for 'fd' [ 788.597261][T12096] netlink: 'syz.6.2006': attribute type 16 has an invalid length. [ 790.665287][ T21] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 791.076612][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 791.188900][T12140] misc userio: No port type given on /dev/userio [ 791.965289][ T21] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 791.973691][ T21] usb 2-1: config 251 has no interface number 0 [ 791.997559][ T21] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 792.015172][ T21] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 792.035156][ T21] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 792.047664][ T21] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 792.079462][ T21] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 792.115296][ T21] usb 2-1: config 251 interface 202 has no altsetting 0 [ 792.316299][ T21] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 792.404467][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.662073][ T21] usb 2-1: Product: syz [ 792.747615][ T21] usb 2-1: Manufacturer: syz [ 792.917057][ T21] usb 2-1: SerialNumber: syz [ 793.176937][ T21] usb 2-1: can't set config #251, error -71 [ 793.185487][ T21] usb 2-1: USB disconnect, device number 15 [ 794.263507][T12177] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 794.299394][T12177] kvm: pic: level sensitive irq not supported [ 794.299756][T12177] kvm: pic: non byte read [ 794.318843][T12177] kvm: pic: level sensitive irq not supported [ 794.318924][T12177] kvm: pic: non byte read [ 794.333520][T12177] kvm: pic: level sensitive irq not supported [ 794.333636][T12177] kvm: pic: non byte read [ 798.477430][T12217] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2044'. [ 801.074920][T12249] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 802.415628][T12266] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2055'. [ 802.529906][T12268] binder: 12267:12268 ioctl 4018620d 0 returned -22 [ 802.546180][T12268] binder: 12267:12268 unknown command 1074553620 [ 802.552672][T12268] binder: 12267:12268 ioctl c0306201 200000000640 returned -22 [ 808.167450][T12328] hub 8-0:1.0: USB hub found [ 808.172397][T12328] hub 8-0:1.0: 1 port detected [ 808.995734][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.544829][T12373] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2091'. [ 811.586370][T12373] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2091'. [ 813.363495][T12398] loop7: detected capacity change from 0 to 1024 [ 813.605294][T12398] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 813.652667][T12398] EXT4-fs (loop7): orphan cleanup on readonly fs [ 813.702583][T12398] EXT4-fs error (device loop7): ext4_free_blocks:6234: comm syz.7.2101: Freeing blocks not in datazone - block = 0, count = 4096 [ 813.821091][T12398] EXT4-fs (loop7): 1 orphan inode deleted [ 813.855243][T12398] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 816.300462][T12415] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2105'. [ 824.456200][T12536] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2143'. [ 824.518869][T12540] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2143'. [ 827.421196][T12572] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 827.901880][T12583] binder: 12582:12583 ioctl 4018620d 0 returned -22 [ 827.939651][T12583] binder: 12582:12583 unknown command 1074553620 [ 827.946039][T12583] binder: 12582:12583 ioctl c0306201 200000000640 returned -22 [ 840.465235][ T4276] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 840.765319][ T4276] usb 8-1: Using ep0 maxpacket: 16 [ 840.886258][ T4276] usb 8-1: config 251 has an invalid interface number: 202 but max is 0 [ 840.904916][ T4276] usb 8-1: config 251 has no interface number 0 [ 840.931062][ T4276] usb 8-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 840.975437][ T4276] usb 8-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 841.005257][ T4276] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 841.045526][ T4276] usb 8-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 841.071088][ T4276] usb 8-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.115201][ T4276] usb 8-1: config 251 interface 202 has no altsetting 0 [ 841.299038][ T4276] usb 8-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 841.325119][ T4276] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.333158][ T4276] usb 8-1: Product: syz [ 841.365184][ T4276] usb 8-1: Manufacturer: syz [ 841.369873][ T4276] usb 8-1: SerialNumber: syz [ 841.466101][ T4276] usb 8-1: can't set config #251, error -71 [ 841.504651][ T4276] usb 8-1: USB disconnect, device number 4 [ 843.299431][T12727] loop7: detected capacity change from 0 to 256 [ 843.403380][T12727] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 852.001496][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'. [ 852.525450][ T5648] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 852.703169][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'. [ 852.795646][ T5648] usb 8-1: Using ep0 maxpacket: 16 [ 853.352844][ T5648] usb 8-1: config 251 has an invalid interface number: 202 but max is 0 [ 853.361765][ T5648] usb 8-1: config 251 has no interface number 0 [ 853.368505][ T5648] usb 8-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 853.379314][ T5648] usb 8-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 853.390597][ T5648] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 853.492371][ T5648] usb 8-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 853.526967][ T5648] usb 8-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 855.086181][ T5648] usb 8-1: config 251 interface 202 has no altsetting 0 [ 855.145360][ T5648] usb 8-1: string descriptor 0 read error: -71 [ 855.165345][ T5648] usb 8-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 855.174429][ T5648] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.355671][ T5648] usb 8-1: can't set config #251, error -71 [ 856.120643][ T5648] usb 8-1: USB disconnect, device number 5 [ 856.249897][T12864] device syzkaller0 entered promiscuous mode [ 856.267541][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 856.362651][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 857.268496][ T5648] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 857.535170][ T5648] usb 2-1: Using ep0 maxpacket: 16 [ 857.665424][ T5648] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 857.680521][ T5648] usb 2-1: config 251 has no interface number 0 [ 857.731271][ T5648] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 859.219190][ T5648] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 859.307907][T12913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2256'. [ 859.317248][ T5648] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 859.386321][T12915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2256'. [ 859.425183][ T5648] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 859.485109][ T5648] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 859.721737][ T5648] usb 2-1: config 251 interface 202 has no altsetting 0 [ 860.046014][ T5648] usb 2-1: string descriptor 0 read error: -71 [ 860.286797][ T5648] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 860.895208][ T5648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.965239][ T5648] usb 2-1: can't set config #251, error -71 [ 860.982254][ T5648] usb 2-1: USB disconnect, device number 16 [ 861.400233][T12957] hub 8-0:1.0: USB hub found [ 861.405253][T12957] hub 8-0:1.0: 1 port detected [ 863.166297][T12974] overlayfs: failed to resolve './file0': -2 [ 865.892772][T13031] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2287'. [ 870.367149][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.134684][T13129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2317'. [ 875.144120][T13129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2317'. [ 883.946576][T13223] hub 8-0:1.0: USB hub found [ 883.952501][T13223] hub 8-0:1.0: 1 port detected [ 885.407507][T13233] misc userio: No port type given on /dev/userio [ 889.996408][T13286] misc userio: No port type given on /dev/userio [ 891.608273][T13304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2368'. [ 898.078215][T13328] hub 8-0:1.0: USB hub found [ 898.083907][T13328] hub 8-0:1.0: 1 port detected [ 901.451363][T13354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2382'. [ 903.158098][T13379] loop1: detected capacity change from 0 to 256 [ 904.541645][T13379] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 907.276899][T13406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2396'. [ 911.149149][T13412] chnl_net:caif_netlink_parms(): no params data found [ 911.325454][ T4276] Bluetooth: hci3: command 0x0409 tx timeout [ 911.408933][T11922] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.660402][T11922] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.715901][T13412] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.728492][T13412] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.745203][ T4268] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 912.754363][T13458] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2409'. [ 912.775266][T13412] device bridge_slave_0 entered promiscuous mode [ 912.799712][T11922] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.843063][T13412] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.861864][T13412] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.004818][T13412] device bridge_slave_1 entered promiscuous mode [ 913.061866][T13412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.073547][T13412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.098197][T11922] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.168336][ T4268] usb 2-1: Using ep0 maxpacket: 16 [ 913.446284][ T4268] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 913.526923][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.611722][T13412] team0: Port device team_slave_0 added [ 913.674082][ T4268] usb 2-1: Product: syz [ 913.824657][ T4268] usb 2-1: Manufacturer: syz [ 913.890449][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 913.896673][ T4268] usb 2-1: SerialNumber: syz [ 914.669062][T13412] team0: Port device team_slave_1 added [ 914.834088][ T4268] usb 2-1: config 0 descriptor?? [ 915.058888][T13412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.123542][T13412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.278417][T13412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.291515][T13412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.308126][T13412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.409704][T13412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.510933][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 916.526455][ T4276] usb 2-1: USB disconnect, device number 17 [ 916.948264][T13494] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2420'. [ 917.074482][T13412] device hsr_slave_0 entered promiscuous mode [ 917.102959][T13412] device hsr_slave_1 entered promiscuous mode [ 917.138053][T13412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 917.204640][T13412] Cannot create hsr debugfs directory [ 917.998524][T11922] tipc: Left network mode [ 919.533402][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 921.818624][T13412] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 923.368851][T13545] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2431'. [ 923.588821][T13412] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 924.418114][T13412] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 924.593586][T13412] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 925.185178][ T4268] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 929.221480][T13412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.259087][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 929.286095][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 929.360101][T13412] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.379375][T13385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 929.408999][T13385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 929.423267][T13385] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.430539][T13385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.456870][ T4268] usb 2-1: device not accepting address 18, error -71 [ 929.504594][T13385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 929.521870][T13385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 929.534036][T13385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 929.545051][T13385] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.552173][T13385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.333005][T11186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 931.036674][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 931.231144][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 931.487895][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 931.496818][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 931.701295][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 931.736680][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 932.157599][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.173240][T13412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1086.604969][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1086.611599][ C1] rcu: 1-...!: (2 GPs behind) idle=95f/1/0x4000000000000000 softirq=42695/42695 fqs=0 [ 1086.622306][ C1] (t=10500 jiffies g=58017 q=82) [ 1086.627420][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g58017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1086.638600][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1086.648558][ C1] rcu: RCU grace-period kthread stack dump: [ 1086.654428][ C1] task:rcu_preempt state:R running task stack:27120 pid: 15 ppid: 2 flags:0x00004000 [ 1086.665189][ C1] Call Trace: [ 1086.668457][ C1] [ 1086.671386][ C1] __schedule+0x11ef/0x43c0 [ 1086.675959][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 1086.681436][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1086.686645][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1086.692524][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1086.697365][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1086.703257][ C1] ? __mod_timer+0x91e/0xd00 [ 1086.707905][ C1] schedule+0x11b/0x1e0 [ 1086.712061][ C1] schedule_timeout+0x184/0x2d0 [ 1086.716907][ C1] ? console_conditional_schedule+0x40/0x40 [ 1086.722797][ C1] ? update_process_times+0x200/0x200 [ 1086.728164][ C1] ? prepare_to_swait_event+0x331/0x350 [ 1086.733732][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 1086.738610][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1086.744012][ C1] ? rcu_gp_init+0xd6c/0x10f0 [ 1086.748735][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 1086.753597][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1086.758817][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1086.764127][ C1] rcu_gp_kthread+0x9b/0x370 [ 1086.768716][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1086.774609][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1086.779712][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1086.785598][ C1] ? __kthread_parkme+0x157/0x1b0 [ 1086.790676][ C1] kthread+0x436/0x520 [ 1086.794736][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1086.799844][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1086.804439][ C1] ret_from_fork+0x1f/0x30 [ 1086.808877][ C1] [ 1086.811891][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1086.818286][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1086.823498][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 1086.824483][ C1] NMI backtrace for cpu 1 [ 1086.836688][ C1] CPU: 1 PID: 13631 Comm: syz.0.2451 Not tainted syzkaller #0 [ 1086.844143][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1086.854194][ C1] Call Trace: [ 1086.857472][ C1] [ 1086.860309][ C1] dump_stack_lvl+0x188/0x250 [ 1086.865011][ C1] ? show_regs_print_info+0x20/0x20 [ 1086.870195][ C1] ? load_image+0x400/0x400 [ 1086.874731][ C1] ? try_to_wake_up+0x3d4/0x1050 [ 1086.879702][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 1086.884654][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1086.891003][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1086.896449][ C1] ? _raw_spin_lock+0x40/0x40 [ 1086.901111][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1086.907197][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1086.913162][ C1] rcu_dump_cpu_stacks+0x22f/0x380 [ 1086.918262][ C1] print_cpu_stall+0x31d/0x5f0 [ 1086.923014][ C1] rcu_sched_clock_irq+0x6ea/0x1120 [ 1086.928211][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 1086.933049][ C1] ? account_process_tick+0x22a/0x3a0 [ 1086.938409][ C1] update_process_times+0x193/0x200 [ 1086.943595][ C1] tick_sched_timer+0x37d/0x560 [ 1086.948476][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 1086.954008][ C1] __hrtimer_run_queues+0x4ad/0xb70 [ 1086.959204][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1086.964390][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1086.970448][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 1086.975385][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1086.981369][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1086.987008][ C1] [ 1086.989953][ C1] [ 1086.992885][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1086.999113][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 1087.004908][ C1] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ee ea 97 f7 48 89 df e8 26 c3 98 f7 e8 91 b5 b9 f7 fb bf 01 00 00 00 a6 c9 8c f7 65 8b 05 47 d7 3c 76 85 c0 74 02 5b c3 e8 94 e4 3a [ 1087.024584][ C1] RSP: 0018:ffffc9000469fbc0 EFLAGS: 00000282 [ 1087.030639][ C1] RAX: 824910956e9a4400 RBX: ffff88805cca65c0 RCX: 824910956e9a4400 [ 1087.038598][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 1087.046555][ C1] RBP: 0000000000000000 R08: ffff88805cca65c3 R09: 1ffff1100b994cb8 [ 1087.054670][ C1] R10: dffffc0000000000 R11: ffffed100b994cb9 R12: ffff88805cca65c0 [ 1087.062641][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 [ 1087.070610][ C1] get_signal+0x11d6/0x12c0 [ 1087.075146][ C1] arch_do_signal_or_restart+0xe7/0x12c0 [ 1087.080800][ C1] ? _copy_from_user+0x111/0x170 [ 1087.085765][ C1] ? load_gs_index+0x130/0x130 [ 1087.090522][ C1] ? get_sigframe_size+0x10/0x10 [ 1087.095451][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 1087.100907][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 1087.106194][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1087.111832][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 1087.117284][ C1] do_syscall_64+0x58/0xa0 [ 1087.121731][ C1] ? clear_bhb_loop+0x30/0x80 [ 1087.126397][ C1] ? clear_bhb_loop+0x30/0x80 [ 1087.131075][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1087.136974][ C1] RIP: 0033:0x7f34a1300627 [ 1087.141402][ C1] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1087.161683][ C1] RSP: 002b:00007f349f5180e8 EFLAGS: 00000246 [ 1087.167860][ C1] RAX: 00000000000000ca RBX: 00007f34a157a188 RCX: 00007f34a1300629 [ 1087.175824][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f34a157a188 [ 1087.183916][ C1] RBP: 00007f34a157a180 R08: 0000000000000000 R09: 0000000000000000 [ 1087.191977][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.199939][ C1] R13: 00007f34a157a218 R14: 00007ffeac4223c0 R15: 00007ffeac4224a8 [ 1087.207908][ C1]