last executing test programs: 11.029702779s ago: executing program 2 (id=113): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002f40)='./bus\x00', 0x1020020, 0x0, 0x1, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) 9.763045953s ago: executing program 2 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f4}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) 9.682997386s ago: executing program 0 (id=119): statx(0xffffffffffffffff, 0x0, 0x1000, 0x400, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25de65ad82501f4ff02c0a530d68f0d07c29b8923714a250a14a8ae3529baac35a079feab0d9875c40d6b82621ed700af165021879f1525992b5a83630b447f01d012cefd13e4487ebd9c07dc7eada71190426a0204a9b068329b98615a64e0831bbafd768c72a39dbb338aceb8f702f599f9f3"], 0x7e, 0x14f3, &(0x7f0000001580)="$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") setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x5}, {0x20, 0x6}}, 0x24, 0x2) 8.676281123s ago: executing program 3 (id=121): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1cef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe77621219a4745cac5531636761ca83f2412d1f607e9002fb41024932205e2176fc5b326c9542"], 0x1, 0x315, &(0x7f0000001f80)="$eJzs3U1PE08cB/Dvb9pC+UP4r4Ax8aKiJHohoh6MlxrTq3dPRqUlIWwwAibKxUo8Go8evPsWfBFeNL4B9eLJF8BtzczObvdhui2xy1L8fhLIdHYefsM+zaypCyL6Z91rf/9485f+EaCGGoA7gALQBOoAzuJc8/n23uae3+0UNVQzNfSPIKwpuTLr211XVV3P1LA8/amOuWQelSMIgrs/qg6CKmfOfgcFTNvz0GxvHnNc45IdXA+4UFEolUn+DeQQh3iB+QrDISKiE8De/5W9TcyZLIFSwIq97U/0/T/rsOoAxuuWn8sKCivo+38QemVKi96//5tN/fWeWcLp2Z+KVomjBNPIfJ5CeGSl5mDiXlX+tEHZWNTMxmYdq+uv0VE4QMtKVFgyvzvhoRsZEu3y1CjDcLbWyIz0/n/haPSMciZbMQppY9PvTuuEI/7FYT2Om3yWr/JQPHxAJ57/1QPRu8n8XbzMnlINHf/1wS3Omlq6FOyyv9VqqVSRM6aT87YHa8gom+4VSbLN6AFBL47AEedBlDB9LyD9WCEc3ZqrA+k3vuiq5cWf8nVNX0upWjV7JKyuP/ULH6WUIxqivJMHsozf+IR2Yv6vdHwrSJyZRZd6MSXtkRGOZ8A5VTclvdydoxenLsYRWNNHHhsBR3xa9hZPcBvzuy/3t2q+392Zwv7WY53QOYnEs7kdsTmNN4CzTPmJGgrKoNfPCe9oQRDnyIBx2URQZvDXxtqgvn7EOfr0cRXWZ1mco457N01UIpr+FBauw7Wp/QVFB2Spieix+lga1BOtAZtKuUbRCbMr0U63GblJLJ1yet4l4frPzOTtrM5cZ/Qvr2CeXrzIRKrFtXgFl54KLrjmLkPWBrOOf13M93hjwJrRrLkuXwWuJDIFhT16Js5TQ9r4hkd8/k9ERERERERERERERERERERERERENGn+/lsEkMR3IS69D5tNlal6jEREREREREREREREREREREREREREREREk2709//O9N/U5Po/4s37f72h7/9NvQDYvkyJ7/8lqsafAAAA//+PBIIk") socket$kcm(0x2, 0xa, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket(0x1e, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 8.209816216s ago: executing program 0 (id=122): listen(0xffffffffffffffff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x8000000000007, 0x0) fcntl$setpipe(r1, 0x407, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.266303002s ago: executing program 3 (id=123): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2142, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x2000000007d, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.22686265s ago: executing program 0 (id=124): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024", @ANYBLOB="97b61e88553572fd2efdef5bcdc603f5cf17a49bf1d8457078ace3df30c7c941b1103b86953f4b1b43816a58622af5d511ff04c37a8893dc5ea494888e218c88326783f69ee710da511f74fe812d33a93825fb7eb8eca7196d483f5689286f28bf447eca9c6676aad40948ce1a2154e82ce6ecb85f76965d75d05e46"], 0xfe, 0x2dd, &(0x7f0000000bc0)="$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") r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r3, 0x5435, 0x0) ioprio_get$pid(0x3, r0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x1) 6.21675721s ago: executing program 1 (id=125): r0 = socket$inet6(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000900000000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4004000) sendto$inet6(r0, &(0x7f0000000000)='z', 0x10a7a, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6.113700623s ago: executing program 1 (id=126): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002f40)='./bus\x00', 0x1020020, 0x0, 0x1, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) 6.066362964s ago: executing program 3 (id=127): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x0, 0x0, 0x4020, 0x0, "bb02a3c344ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000"], 0x78) 4.804664479s ago: executing program 2 (id=128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x8000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x7, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.627402144s ago: executing program 3 (id=129): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1cef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe77621219a4745cac5531636761ca83f2412d1f607e9002fb41024932205e2176fc5b326c9542"], 0x1, 0x315, &(0x7f0000001f80)="$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") socket$kcm(0x2, 0xa, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket(0x1e, 0x1, 0x0) sendmsg$nl_route(r0, 0x0, 0x48000) 4.479088738s ago: executing program 2 (id=130): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) write$UHID_INPUT(r0, &(0x7f0000000440)={0x8, {"df760ef80d05964eea3a01158b5a2835f6f16cae491061acd489dcb96ed6285c6efc3a4c75fc30fc6ab31c164f4df2c8552dc182030fefc45e94c56cd473dd0e1e6900d2692dd5d921e2ece40823b632da5e14f76275aabfb9a0706c9cb7500fc9d538037c0395f961f872a66890fb36bbe98ec727272384849c76d89eaedc46c4383359a561697cb6e91190cad0e8533a03e349dca1b19100360fc76333cdb2e7231a038bb1659b2046f3da9287280aba169981acf9199b28441d78886b9c00d53bd066ad3dc8731d05439570f695cef994592ba5ff1f45c1057699f42b7d24d77d707ec59ed923a810a3f147a3c5c70b114595b00d27cef74a1f0f8291ec9595b5abcc1aa7c48a008ae16b28c15fe851abfc672e1587eec53045f480c5a658fea67dd66b8086636dbc391dac4d091b1cd549f6f10ee6af752a1d2146fd4cda7754aaae159f0e87f7f7fb655cee222c457fb7e4ad6a529ce72a88e955001541e45a6d15c6158e6d5c2fd3f1c63c116b917688633fccea7e38c82556f809b5f93d38e7851a51b16c27f8375830f6a15378c254f1d6c09be19723efeced3dcd455a7f0b9ebf596ede9d1866cbc78ab46703f463856ef89a19629905826007eddd48fb24143bcc2811d1fabc050655af997851b4b9f77793bfabefb359ed8d47ce72d990179dce59facdfc9a6ab06691e4eb3bd1ed4dfd26c267aba98fd0ca12cf04e998487916d2177b339bf04751f7c82ebf24bae0d6f160a5f1d20eb4cc33215cf2dafac8a41a53076f5c96977edf2f267422fab138419ab3adaea14a3063052bff0e8847d5c9b18fc5c36b791dc8bf630e35ff9b0ecc606e886e0cee932d01a35377c5ea43b83dd6e94014447e350b335108b72627c162f639e841c7ef998067cbc2fd5f70c8543155df74a4ebd20b26febaea950a150f00ed650ccb0e04c0bd7995be1fab9abcc48408f70fa470a7a46f766e146a18277e0e85038318997d3d3cf7e08904f1fc12d53f6d135c3da9c7d7c34b3b5e50acae48d25bb4e29b74d2acab5a1b60f34aa8bc7f7e2ad6e182d155226db84f5f5931dcc3fe9e7d187908053e5c9eb29847085b853c17f8d4cce69d6b454293b2fb5b98ac245be352cd03fe26d2f7a84a0e65e98642054a9b2cb6b61d80fae8eadb587e0850c115a3b7ac96f3e7998b5ce9aa579ef54510f76f177095bf966fa4c0fcafd446fd66b25d740edb50a65f99cceb4ff496ce4d7b7eada0baa6da71327e6d1bdec0d9ead633b2b0287337ac8b2f1e3056958fd10ab555b1c2b40b451f3e7f4f772572f0c5495fd1add089a3920c06fc53c1fbed3b493f745e4228714881e74d6e5ef824e6540111843c83a2d7755752ff4c4095832af4c59f37ac73822ac5372c3877c9557be1ae5ddd9decca77a5e5a0035255361437279d811ab6428b6d98a96cbbf71b3c01dcf3e2c6272efd7297a88b8852e41c6e6b8aad5539ccfbe10edde64305d51dc80bb1a6116aa583f5189eb2790b7dcb1eb8b71d498b68f5fe194274d04c190d0647cdbb4e53e2b7d7f3e9b8b753f98ef27e8340e5bf4dc39554e66fc057dffc58afb90fd569861ff4989f1b98f42ee11d99c9bc2798bf3fbebd5ea963016fd771879a824bf4c53aedcab1753eb91afda7d4aadaac79463fdccdd1a0c5f2d635b5643a0989d5f7af0343bbf0433aaf295895d148df560300957509415428efde9db7394886e0ae1e6b2761b2dd2d3019a509c9ab644504ceae3f93c73bd915eaf6b7c2ffa775c8b47fa4abd0234ad47c799b99f2e8b2fcca650af26c115615f38dcce5bc2db47206107690b8102b9fc0ab784a084cdf4fac0bf89b2ba322cf2258664c14b14735ded0207cf14281ae9cf58b57ed04611753cbc8745395157f4f77c912d37e3dd511b27d976d4ab1ceeb6228b4860aaead14939bf28736d0cc019431da22f37e07561e1b90fe679423c69ac3f4fca28764e1b8a0bcfbfeeac232df436bc16571a72528440064f4ff2e268e8e08956a35d01eb9f61b738ae270c6949bbc43650863f1967bc317b1bd61eda64b24d0782e96f45ed789b856f698243834e678a87822ee508a0cd78fd0a79c7f585d14bab85e1b3949e73b9db361e3c9cd7d0057f07423ff04d42398458f6b9cb86bce45c7b34704f6ca1ec1e993344d276c23957abf03c7b8cbed5a4ca05468eb0f0d2d753659537ed488ddf680a0d230b5ceaa2454a6fe0a44dbc0274dc4e7f89df9873472fa15fc59f4ba98fc8f4b5268f4d9cfd9bc396ccbc6a8cc29b676154b2d89c0c943a95bea536566eed0c7560a7aad38ab20ab3c277ad91bed3b6d1fde305cbf79e865fc01d4043db2ebd14b6a0566480b5afa575336067cb5e1eb9761b54dcd66a53f6bb9d0b00d0d346d5b4957e94deca812a2aed2c68470634418dba103b3cbf8467dea836e90baba9d605af939fe4d8b8cfdf322ad85d7b5be01f00d1068b7e0acaf346fd9ffa718241adaa80880f34ce5ebbf26f4b7b109b774a729799e3051f0d1a59a166f7b44d0d6c2f5a33c76b78abfe70d587112ecca1f6f4b79997a5479d0fa2015492b3e0ba23495eddb94a180b531b1b60e1026aa9bdb1a13aff302e692d27fb4d612437baaf7456e4fe8f19fc1cc7c3e8e14752be44451a6d69a3ec62bd8dd1dbebfb7835cd179e1fbc7d9b93913fa7f04269948125e575afce5b6184667cb9da93d45a1ba339077919d4909e1ed4455b2daa77628396f667d9cd6226faae84b86cb2daafe6ae0f322de1822d7d803827ff9705d22e2540596618044042ae4a3938605941f3ace200b0aea13d67c52189257547e915cfd819ee0062b49f9f20d6fb8b6f929c2557eb78ee025ac13296f082635a62daf45ddd99fac42005f4908647e45a474b80d32dd8fc6ccb3e85658775d2290f4a73a233a30d58f14773e03f1954a20b09718c49c88cadf85a88af0bde6ab9669b6ef4e4cf7ceeb68f0ce6517f1daf4279c330b88d2f206bbb56ac54442aefce7783c0d2297ece869df8d66d2c3629c9808dacb65d961f79219322abe1328a39269ffef17551b578dc2f1f1ffa5f9cafee1097bafa3e4c15c2228f2ea6e243d3fb3bac4e98cb24662d6a8dc514225fadf1c123e3f3ad543ee3653b4753d4242f62bf3a1bc6687730c2a3d6a704fc0c6689d8f8db0b60dbc6b7f030090cff324734f968d99f46fe614ab808fca7e28a0e897c3468cf8db5d7f7fff6ec350a34d5adf0f22e55ccd4bde7dc4377c3d9491f0849893ca81b14ff1d326ce79c7c25d8016bcc0fdd5d644b63757e71232fa83ebeee03871c5bdd3823624c3daa6534c10bda8807c7d357914f5818a98d50ac57111bf6f4199ddbaaa8fe4861621a94e9c5116d13bd9c3c3ab55cbda41891285bedc1c7983da21acd07738ff78be8d820ce3817445ba5231f2b22f7c55fc1fcad72757db83b9d6d0883f780001254f94a518f4b86eb1897693dcd7ff042eeacf3584220aaddb2b7313df1437f1c76e0a3e30c2e9d87e00011bcb5312742cc09e146f0def68961fc18707aa41910a98d325bff78c7367ce5424361dad3dd570ae5803c7282be3fd51d45900326972f450d957fe41e2631a4a0867cb863af0fba2b83bd23201fd7fa524e2ff4330ec9ab67345892ff54ac5b679d576ba547f5ce2984e36c8cbe8e8acc0094fe93e66b18cdfe86f7e1977f107cc7543947b91a07d0f663c5f0e5ca3e18d3d648ab0ce7c3875b7ef980eeedbdd19f49749045cc51d07a983f36102a577ab02ad43376319062cf90056aa596936230e7a2994c3de3d1924a71efd1099d8da7da3ec6200928980c776a4d252a43ec157a490f1db197730d8237c8b61b8442cfea11b41b32bd147719244a19ac49553a145e6fa5364061219fc28c33a76921a4ef612259dd05308145f254584eead8379f9a9e68ad496b52e3ba62f57282b764c29071b6213af6113c8b1b4dd2a60277d3552758f6cd46cec963e7bb8a609805b1c40c37c33f2ceacdc8f9988718cd0614c7093f1b2035303d23ae6020631367dd5078948a3cf312fdccfbc3acffd5740981a6866069a23a32ffb76f4d57087cbe306e41fdffb5d1f8821bcdca8815f5174e0c7445f6dbc0e4aba1ac03dccb13fc21111c7ba4533c46a81c837465cae03e9bf7632e604f40d32711c682cec6c48d155d0e810effbc1a5249b328aadcd5c073bc16dc6049a4036b73daf0c4fcda6ddbbb19a2ab5c846aa5e554f246499f8d9e2a45338e9ae64eb151fc346940c8ba0bea587d571e9948e42e2166c69454acb4b0e4567a77a5fefe3df1b5577ecfb79fbcf361e79afa9e7aa58b8cebc074d4b2e3605314834831d758de0513d403cb4271ae399ab052fd56ebc7cb9c2d4d46d916c841b4862db9b4425b94af8947aa3dd7a2cc4d8c24b9046a1b5562a68532a13ddf9f6fcd3f95707b3ba8ba4575873028c5db7dff121e5115f913eddd852511df7e0c297362f528a1e3c82cc645f94a4cc62fbd3b2463d3f04df77b6a227fa17906da95294698c3569b1e40765fded272627bec6ed648c4be90d6ff861b0dc4de770661f553721b3803e1317eb31e6b80a3ea53bbb8ad845a6198d264365efe21777b7325f4b3a0c60fbc6d066473c1046bd5a65e3aeba956e88f96aa387b5358284c5ef9691b28b527cee46e6e8362e4ca1cee86ff103c235845a16ce908b6bd7e9ad4f52d226730b10fdfabba9688de261d779bac6c8bf105175a4de8522ae7b7ee9abc5015798a8330ed410cae6932e3cd7235cc100e1c91366cd728d248a674fc27907fdf1c09dcae0cd77915b4675f0a9580f9baa0ce5dd1ab3218caae891f93123cb885f60c9059abf39f592159a2ad2904312bfeb1290c9522db1cf28957f654ed7858024410b10ad34782f835f343cda817039487039af3c47fd17558e2cc1e26a1c60033fbf7ef6c445b7c16dc66bc33fde59de9029c073685f12aefd6aab624a0544f206e3e53e66067700a9d1bcebf6cacd0243a75774d45007b2432dc24f721520d7fd9b7565b275dd851d9274c1b13bb64dbddd2abba2ed24f89c13a66928a5a9417241d328bcac4c3c05019f7696fd317cc2307596f3948c0de01b4b85dda5dce78256e6812f7f44c83651f0d34053433aae149c531edc16f5d996e452834ca4dffc1e8b53c8eb89f3c086c87123eea749786b87e81ac3c0914ca739dedb2d1137ec361b5aefd5b4c4cc2aa53653a1f71cdc83c76f93a786fe99b672346bdf57e5a45c895dccd18f4a545a57289967cb22d9983679015e8b0c7d56300fd4d978ed02fcdd0694bb00a4b2450cb3044f2ebf957e9c57481663aea12f5ea2f39168781a12f524d2fd03df11f83d5da8884549d27d9a8866601d086d5224515582ff37b428aebd72c1772dd901f4afb3ff600ae56c93d7168ec3c4f684b2c9f8d2ef378bd1f415ed88a52e36414f61f401eb4f5a0068178eac8e63b4bd33ffc2d00991788801dcde2fa5d2ca3b802e34983b4b707bc18a09e5b4c64cfc408665f2de96b69c5b823c540a6397a77e5343870eda63573559e4545660dd6ed61b444a62b35a756642928350a2f22320f4a4a3ec218962daf9e012842f43b5d66a38ab399f50eb57d83a7a3bb53b70dacff66cc020f80b2afbebf05bf79917d45f268b2769edba65ae0a5ca501fc26ae40ab7ee55dca1daffe933fa3919ee469d73b64b0f8c52f3ed64dda2bfdd974bfa2b4b27c7b08e36423d6a125995e774715e328ac8754e32bce0096e37d3caa2da6c28fca70706364f6bb8916065a9be4", 0x1000}}, 0x1006) 3.573694433s ago: executing program 0 (id=131): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1cef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe77621219a4745cac5531636761ca83f2412d1f607e9002fb41024932205e2176fc5b326c9542"], 0x1, 0x315, &(0x7f0000001f80)="$eJzs3U1PE08cB/Dvb9pC+UP4r4Ax8aKiJHohoh6MlxrTq3dPRqUlIWwwAibKxUo8Go8evPsWfBFeNL4B9eLJF8BtzczObvdhui2xy1L8fhLIdHYefsM+zaypCyL6Z91rf/9485f+EaCGGoA7gALQBOoAzuJc8/n23uae3+0UNVQzNfSPIKwpuTLr211XVV3P1LA8/amOuWQelSMIgrs/qg6CKmfOfgcFTNvz0GxvHnNc45IdXA+4UFEolUn+DeQQh3iB+QrDISKiE8De/5W9TcyZLIFSwIq97U/0/T/rsOoAxuuWn8sKCivo+38QemVKi96//5tN/fWeWcLp2Z+KVomjBNPIfJ5CeGSl5mDiXlX+tEHZWNTMxmYdq+uv0VE4QMtKVFgyvzvhoRsZEu3y1CjDcLbWyIz0/n/haPSMciZbMQppY9PvTuuEI/7FYT2Om3yWr/JQPHxAJ57/1QPRu8n8XbzMnlINHf/1wS3Omlq6FOyyv9VqqVSRM6aT87YHa8gom+4VSbLN6AFBL47AEedBlDB9LyD9WCEc3ZqrA+k3vuiq5cWf8nVNX0upWjV7JKyuP/ULH6WUIxqivJMHsozf+IR2Yv6vdHwrSJyZRZd6MSXtkRGOZ8A5VTclvdydoxenLsYRWNNHHhsBR3xa9hZPcBvzuy/3t2q+392Zwv7WY53QOYnEs7kdsTmNN4CzTPmJGgrKoNfPCe9oQRDnyIBx2URQZvDXxtqgvn7EOfr0cRXWZ1mco457N01UIpr+FBauw7Wp/QVFB2Spieix+lga1BOtAZtKuUbRCbMr0U63GblJLJ1yet4l4frPzOTtrM5cZ/Qvr2CeXrzIRKrFtXgFl54KLrjmLkPWBrOOf13M93hjwJrRrLkuXwWuJDIFhT16Js5TQ9r4hkd8/k9ERERERERERERERERERERERERENGn+/lsEkMR3IS69D5tNlal6jEREREREREREREREREREREREREREREREk2709//O9N/U5Po/4s37f72h7/9NvQDYvkyJ7/8lqsafAAAA//+PBIIk") socket$kcm(0x2, 0xa, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket(0x1e, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 3.106111955s ago: executing program 1 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 3.057475777s ago: executing program 3 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x7, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ed", 0x90}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x0, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.023323328s ago: executing program 2 (id=134): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x1, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004011}, 0x24048084) 2.853740913s ago: executing program 1 (id=135): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2142, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x2000000007d, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.853570682s ago: executing program 2 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f4}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) 1.347072864s ago: executing program 1 (id=137): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x0, 0x0, 0x4020, 0x0, "bb02a3c344ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000"], 0x78) 1.204659768s ago: executing program 0 (id=138): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x8000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x7, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 910.558815ms ago: executing program 0 (id=139): socket$inet6(0xa, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x100058f, &(0x7f0000000340)={[{@user_xattr}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@nobarrier}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x583, &(0x7f00000015c0)="$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") r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x20f}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) ioprio_set$pid(0x2, 0x0, 0x2007) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140), 0x10000000000001af) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@init_itable_val={'init_itable', 0x3d, 0xe94}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@min_batch_time={'min_batch_time', 0x3d, 0xb}}, {@quota}]}, 0x2, 0x571, &(0x7f0000000d00)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@initdev, @in=@private}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @loopback}}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) stat(0x0, &(0x7f00000006c0)) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@redirect_dir_off}], [{@obj_role={'obj_role', 0x3d, 'nobarrier'}}, {@subj_user={'subj_user', 0x3d, '\x98\x9a\x8e\xf7\xae\xdd\xb4\x8bM\xa8+\x1f\xd4i\xc3\xd6Eth\xa6T\tr\xdb\xca\xbd\xba!\x9e\xa0\xe8WH\xbcG%\xbb\xbe\x9d>e\x19\xfd\xbf\"VC\xc5[2\xf1:\xc7\xb4\"\x91?\xeb\xa6\xc9\xb2s\x9eg\x1cbib\xda\xba\b\xe6\xec\x8f\xc9\xd5\xf8\xb5\xf8\x93\xf1?Vn\x85\xceS\xb2\x85\x8e\xe5\x84\xde\xd2]r\xf2\v\x9dm\xc5\a\x9aL\xcb~\xd9~\xff\xfa@\xab\xdb\x14\xcc^\xd2\xd1&\xd3\x1b\xe7\x7fq\n\xf2\x03B!\x1e\xf6\xda\x94\xb2\x06\xd2\x1d\x95[\xb3\xf8G\x11\xfd\xa1\x10\xa7\b\xea\xf1\x11E\xa4AO\xa8\x9a\t\xc9\xd3\xa2z\x1c\bR'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, 'errors=continue'}}]}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002380)=@nat={'nat\x00', 0x8, 0x5, 0x508, 0x118, 0x208, 0xffffffff, 0x208, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@hl={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id=0xfffd, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 796.465099ms ago: executing program 3 (id=140): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002f40)='./bus\x00', 0x1020020, 0x0, 0x1, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) 0s ago: executing program 1 (id=141): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1cef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe77621219a4745cac5531636761ca83f2412d1f607e9002fb41024932205e2176fc5b326c9542"], 0x1, 0x315, &(0x7f0000001f80)="$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") socket$kcm(0x2, 0xa, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket(0x1e, 0x1, 0x0) sendmsg$nl_route(r0, 0x0, 0x48000) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 64.376789][ T5433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.389475][ T5433] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. syzkaller login: [ 86.191256][ T5755] cgroup: Unknown subsys name 'net' [ 86.329316][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.020094][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.874959][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.884359][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.893260][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.902043][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.911602][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.919800][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.928143][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.934243][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.936619][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.948126][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.951041][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.960795][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.976408][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.985558][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.994338][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.995201][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.011597][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.020777][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.057130][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.068987][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.078688][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.094256][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.102513][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.121685][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.648499][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 90.767378][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 90.808275][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 90.872457][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 90.897269][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.905470][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.913256][ T5768] bridge_slave_0: entered allmulticast mode [ 90.920920][ T5768] bridge_slave_0: entered promiscuous mode [ 90.941029][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.948217][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.955676][ T5768] bridge_slave_1: entered allmulticast mode [ 90.963238][ T5768] bridge_slave_1: entered promiscuous mode [ 91.051396][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.085775][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.093263][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.101017][ T5766] bridge_slave_0: entered allmulticast mode [ 91.108619][ T5766] bridge_slave_0: entered promiscuous mode [ 91.119056][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.152993][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.162360][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.169867][ T5766] bridge_slave_1: entered allmulticast mode [ 91.177151][ T5766] bridge_slave_1: entered promiscuous mode [ 91.244552][ T5768] team0: Port device team_slave_0 added [ 91.263284][ T5768] team0: Port device team_slave_1 added [ 91.269534][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.277456][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.284925][ T5767] bridge_slave_0: entered allmulticast mode [ 91.292509][ T5767] bridge_slave_0: entered promiscuous mode [ 91.314646][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.324175][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.333097][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.340471][ T5781] bridge_slave_0: entered allmulticast mode [ 91.347686][ T5781] bridge_slave_0: entered promiscuous mode [ 91.365843][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.373309][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.380837][ T5767] bridge_slave_1: entered allmulticast mode [ 91.388020][ T5767] bridge_slave_1: entered promiscuous mode [ 91.397231][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.419153][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.427918][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.435616][ T5781] bridge_slave_1: entered allmulticast mode [ 91.443443][ T5781] bridge_slave_1: entered promiscuous mode [ 91.484440][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.491689][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.517841][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.572871][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.580108][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.606749][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.620930][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.633667][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.645792][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.658711][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.673030][ T5766] team0: Port device team_slave_0 added [ 91.688031][ T5766] team0: Port device team_slave_1 added [ 91.750911][ T5781] team0: Port device team_slave_0 added [ 91.760590][ T5767] team0: Port device team_slave_0 added [ 91.781384][ T5781] team0: Port device team_slave_1 added [ 91.816606][ T5767] team0: Port device team_slave_1 added [ 91.835119][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.842334][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.868553][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.883093][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.890175][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.916269][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.971203][ T5768] hsr_slave_0: entered promiscuous mode [ 91.978240][ T5768] hsr_slave_1: entered promiscuous mode [ 91.986405][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.993667][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.019972][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.033215][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.041533][ T5083] Bluetooth: hci0: command tx timeout [ 92.046960][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.073463][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.087071][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.094265][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.120740][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.136034][ T51] Bluetooth: hci1: command tx timeout [ 92.142410][ T5083] Bluetooth: hci2: command tx timeout [ 92.166533][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.174059][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.200471][ T51] Bluetooth: hci3: command tx timeout [ 92.206332][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.247445][ T5766] hsr_slave_0: entered promiscuous mode [ 92.254042][ T5766] hsr_slave_1: entered promiscuous mode [ 92.260723][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.268696][ T5766] Cannot create hsr debugfs directory [ 92.376508][ T5767] hsr_slave_0: entered promiscuous mode [ 92.384279][ T5767] hsr_slave_1: entered promiscuous mode [ 92.391399][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.399017][ T5767] Cannot create hsr debugfs directory [ 92.410673][ T5781] hsr_slave_0: entered promiscuous mode [ 92.420793][ T5781] hsr_slave_1: entered promiscuous mode [ 92.427153][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.435046][ T5781] Cannot create hsr debugfs directory [ 92.852860][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.893973][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.907536][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.922921][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.998436][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.022992][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.043068][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.059091][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.134698][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.159489][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.172959][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.206124][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.282899][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.296509][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.307870][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.343450][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.368144][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.458362][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.525144][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.536412][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.543943][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.559684][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.567009][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.618225][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.684327][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.714823][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.722124][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.747239][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.754636][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.768252][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.806628][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.813895][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.827518][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.834714][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.907324][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.008160][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.045528][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.052778][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.096450][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.103855][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.121664][ T51] Bluetooth: hci0: command tx timeout [ 94.206596][ T51] Bluetooth: hci1: command tx timeout [ 94.213625][ T51] Bluetooth: hci2: command tx timeout [ 94.279805][ T5083] Bluetooth: hci3: command tx timeout [ 94.328815][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.447202][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.563773][ T5768] veth0_vlan: entered promiscuous mode [ 94.605306][ T5768] veth1_vlan: entered promiscuous mode [ 94.657291][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.712958][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.731593][ T5768] veth0_macvtap: entered promiscuous mode [ 94.764399][ T5768] veth1_macvtap: entered promiscuous mode [ 94.803690][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.815947][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.838428][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.885417][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.895126][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.906914][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.917462][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.972207][ T5781] veth0_vlan: entered promiscuous mode [ 95.011491][ T5766] veth0_vlan: entered promiscuous mode [ 95.037187][ T5767] veth0_vlan: entered promiscuous mode [ 95.049087][ T5781] veth1_vlan: entered promiscuous mode [ 95.082944][ T5766] veth1_vlan: entered promiscuous mode [ 95.107591][ T5767] veth1_vlan: entered promiscuous mode [ 95.186294][ T5781] veth0_macvtap: entered promiscuous mode [ 95.201024][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.211824][ T5781] veth1_macvtap: entered promiscuous mode [ 95.218099][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.300936][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.315290][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.328584][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.357061][ T5766] veth0_macvtap: entered promiscuous mode [ 95.364619][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.375963][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.390307][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.403930][ T5767] veth0_macvtap: entered promiscuous mode [ 95.415010][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.426445][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.436254][ T5766] veth1_macvtap: entered promiscuous mode [ 95.457252][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.468342][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.477582][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.486997][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.523219][ T5767] veth1_macvtap: entered promiscuous mode [ 95.584346][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.604559][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.616266][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.630546][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.644415][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.701760][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.716051][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.726483][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.737400][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.749300][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.809056][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.826167][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.837537][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.853554][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.865471][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.879033][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.893284][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.209987][ T5083] Bluetooth: hci0: command tx timeout [ 96.283395][ T5083] Bluetooth: hci2: command tx timeout [ 96.289183][ T5083] Bluetooth: hci1: command tx timeout [ 96.360525][ T51] Bluetooth: hci3: command tx timeout [ 96.477348][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.546774][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.623243][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.701168][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.756856][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.781850][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.796766][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.808111][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.828789][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.879774][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.892624][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.912401][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.938939][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.995815][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.006942][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.016350][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.027416][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.069897][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.096363][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.149835][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.175809][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.267879][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.289460][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.324412][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.352606][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.431119][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.439022][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.011724][ T5771] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.057384][ T5856] syz.0.6[5856]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 98.280740][ T51] Bluetooth: hci0: command tx timeout [ 98.972138][ T51] Bluetooth: hci1: command tx timeout [ 98.977701][ T51] Bluetooth: hci2: command tx timeout [ 98.987491][ T51] Bluetooth: hci3: command tx timeout [ 99.059775][ T5771] usb 4-1: Using ep0 maxpacket: 8 [ 99.071492][ T5771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 99.086479][ T5771] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 99.099763][ T5771] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 99.108978][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.155672][ T5856] loop0: detected capacity change from 0 to 2048 [ 99.174614][ T5771] usb 4-1: config 0 descriptor?? [ 99.213165][ T5848] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.398395][ T5860] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.433228][ T5862] loop1: detected capacity change from 0 to 16 [ 99.520109][ T5862] erofs: (device loop1): mounted with root inode @ nid 36. [ 99.574558][ T5860] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 99.601451][ T27] cfg80211: failed to load regulatory.db [ 99.607375][ T5860] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 99.638810][ T5862] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 46 [ 99.667880][ T5862] syz.1.7: attempt to access beyond end of device [ 99.667880][ T5862] loop1: rw=0, sector=296, nr_sectors = 8 limit=16 [ 99.669802][ T5860] Remounting filesystem read-only [ 99.690908][ T5862] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 46 [ 99.708327][ T1320] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 99.717460][ T1320] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 99.728169][ T5864] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 46 [ 99.745784][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.756341][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.766584][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.777935][ T5863] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 99.788336][ T1320] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 99.795451][ T5864] syz.1.7: attempt to access beyond end of device [ 99.795451][ T5864] loop1: rw=0, sector=296, nr_sectors = 8 limit=16 [ 99.810112][ T1320] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 99.817544][ T1320] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 99.825632][ T5864] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 46 [ 99.837873][ T1320] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 99.864918][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.875170][ T5771] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 99.883986][ T1320] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 99.891662][ T5771] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 99.907824][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.920923][ T5771] logitech 0003:046D:CA04.0001: item fetching failed at offset 2/40 [ 99.937722][ T5771] logitech 0003:046D:CA04.0001: parse failed [ 99.944275][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.964932][ T5862] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 46 [ 99.986733][ T5771] logitech: probe of 0003:046D:CA04.0001 failed with error -22 [ 99.996490][ T1320] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 100.023888][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.040262][ T5862] syz.1.7: attempt to access beyond end of device [ 100.040262][ T5862] loop1: rw=0, sector=296, nr_sectors = 8 limit=16 [ 100.076928][ T1320] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 100.090407][ T5862] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 46 [ 100.109277][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.151319][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.179780][ T1320] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 100.188906][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.198366][ T1320] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 100.206181][ T1320] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 100.213662][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.222709][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.240005][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.259283][ T1320] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 100.278992][ T1320] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 100.306576][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.329784][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.353330][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.381999][ T1320] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 100.396949][ T1320] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 100.423579][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.453054][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.474234][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.492753][ T1320] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 100.509383][ T1320] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 100.528922][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.548068][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.567441][ T1320] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.614558][ T5856] NILFS (loop0): mounting fs with errors [ 100.678029][ T5860] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 100.710366][ T5860] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 100.720307][ T5860] Remounting filesystem read-only [ 100.749780][ T11] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 100.772220][ T9] usb 4-1: USB disconnect, device number 2 [ 100.776065][ T11] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 100.794774][ T11] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 100.809361][ T11] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 100.889892][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 100.898930][ T11] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 100.935052][ T5869] loop3: detected capacity change from 0 to 8 [ 100.947348][ T11] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 101.006865][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.082564][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.399235][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.547874][ T11] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 101.570377][ T11] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 101.577780][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.607384][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.633391][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.669396][ T5768] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 101.756740][ T5768] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 101.891564][ T5768] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 101.906764][ T5768] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 101.915183][ T5768] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 101.923755][ T5768] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 103.348540][ T5879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12'. [ 103.967193][ T5887] loop0: detected capacity change from 0 to 164 [ 104.770852][ T5894] process 'syz.2.15' launched './file2' with NULL argv: empty string added [ 105.446006][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 108.877447][ T5908] sched: RT throttling activated [ 109.360014][ T5911] Zero length message leads to an empty skb [ 109.536716][ T5916] loop2: detected capacity change from 0 to 64 [ 109.699221][ T5916] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET) [ 110.480038][ T5918] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.646824][ T5937] loop2: detected capacity change from 0 to 512 [ 113.674987][ T5937] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.731030][ T5937] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.850510][ T5937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.879956][ T5937] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.945954][ T28] audit: type=1800 audit(1777524818.583:2): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.27" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 114.024408][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.770409][ T5952] loop2: detected capacity change from 0 to 2048 [ 115.785850][ T5952] ext4: Unknown parameter 'dont_measure' [ 115.957127][ T5770] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.086363][ T5942] loop3: detected capacity change from 0 to 32768 [ 116.189354][ T5951] loop2: detected capacity change from 0 to 1024 [ 116.197168][ T5951] ======================================================= [ 116.197168][ T5951] WARNING: The mand mount option has been deprecated and [ 116.197168][ T5951] and is ignored by this kernel. Remove the mand [ 116.197168][ T5951] option from the mount to silence this warning. [ 116.197168][ T5951] ======================================================= [ 116.232513][ T5951] EXT4-fs: Ignoring removed orlov option [ 116.290798][ T5951] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 116.299200][ T5951] System zones: 0-1, 3-12 [ 116.306642][ T5951] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.147335][ T5942] JBD2: Ignoring recovery information on journal [ 117.198863][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 117.682009][ T5942] JBD2: journal reset failed [ 117.703161][ T5942] (syz.3.28,5942,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 117.758990][ T5970] loop0: detected capacity change from 0 to 4096 [ 117.765916][ T5942] (syz.3.28,5942,0):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 117.768518][ T5970] EXT4-fs: inline encryption not supported [ 119.182880][ T5970] EXT4-fs: inline encryption not supported [ 119.188865][ T5970] ext4: Unknown parameter 'smackfstransmute' [ 120.089426][ T5984] loop2: detected capacity change from 0 to 512 [ 120.311351][ T5984] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.829906][ T5984] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.916371][ T5984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.000117][ T5984] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.123959][ T28] audit: type=1800 audit(1777524825.763:3): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.39" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 121.240240][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.666692][ T6007] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 123.075400][ T6011] loop2: detected capacity change from 0 to 8 [ 123.132277][ T5999] loop1: detected capacity change from 0 to 32768 [ 123.720256][ T6011] SQUASHFS error: xz decompression failed, data probably corrupt [ 123.864132][ T5999] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.43 (5999) [ 124.006145][ T6011] SQUASHFS error: Failed to read block 0x108: -5 [ 124.045324][ T6011] SQUASHFS error: Unable to read metadata cache entry [106] [ 124.071576][ T5999] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.082346][ T5999] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 124.091262][ T5999] BTRFS info (device loop1): using free space tree [ 124.101364][ T6011] SQUASHFS error: Unable to read inode 0x11f [ 124.301995][ T5999] BTRFS info (device loop1): enabling ssd optimizations [ 124.349683][ T5999] BTRFS info (device loop1): auto enabling async discard [ 124.465652][ T6031] loop0: detected capacity change from 0 to 4096 [ 124.504947][ T5767] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.539920][ T6031] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 124.866569][ T6031] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 124.911251][ T6031] ntfs3: loop0: Failed to load $Extend (-22). [ 124.917444][ T6031] ntfs3: loop0: Failed to initialize $Extend. [ 125.139286][ T6031] ntfs3: loop0: ino=0, attr_set_size [ 125.404850][ T6036] ntfs3: loop0: ino=0, attr_set_size [ 125.433444][ T6038] ntfs3: loop0: ino=0, attr_set_size [ 125.620362][ T6031] ntfs3: loop0: no free space to extend mft [ 126.642000][ T6049] loop0: detected capacity change from 0 to 512 [ 126.859892][ T6049] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.903131][ T6049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.007214][ T6049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.040257][ T6049] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.319927][ T1562] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.632757][ T1562] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.641891][ T1562] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.652694][ T1562] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.667002][ T1562] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.689500][ T28] audit: type=1800 audit(1777524832.323:4): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.50" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 127.734881][ T1562] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.749765][ T1562] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.815410][ T1562] usb 2-1: Product: syz [ 127.849736][ T1562] usb 2-1: Manufacturer: syz [ 127.906579][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.917666][ T1562] cdc_wdm 2-1:1.0: skipping garbage [ 127.923445][ T1562] cdc_wdm 2-1:1.0: skipping garbage [ 127.969354][ T1562] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 127.986531][ T1562] cdc_wdm 2-1:1.0: Unknown control protocol [ 128.289075][ T6066] loop2: detected capacity change from 0 to 32768 [ 128.330312][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.378428][ T6066] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.403340][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.410055][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.416848][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.423527][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.433797][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.440503][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.447208][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.453890][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.460282][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.466944][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.473323][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.479982][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.486437][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.493095][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.499681][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.506355][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.512790][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.519454][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 128.525975][ T5828] usb 2-1: USB disconnect, device number 2 [ 128.532525][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 128.532557][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 128.633726][ T6066] XFS (loop2): Ending clean mount [ 128.739161][ T28] audit: type=1800 audit(1777524833.373:5): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.56" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 128.791189][ T6085] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 129.034552][ T5781] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.773447][ T28] audit: type=1107 audit(1777524834.403:6): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 129.879541][ T6105] loop0: detected capacity change from 0 to 512 [ 129.918310][ T6105] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.946498][ T6105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.021513][ T6105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.090582][ T6105] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.158825][ T28] audit: type=1800 audit(1777524834.793:7): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.66" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 130.246286][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.811968][ T6107] loop1: detected capacity change from 0 to 32768 [ 130.981446][ T6128] loop0: detected capacity change from 0 to 512 [ 130.998154][ T28] audit: type=1800 audit(1777524835.633:8): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.67" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 131.124491][ T6128] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.76: inode has both inline data and extents flags [ 131.237734][ T6128] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.76: couldn't read orphan inode 15 (err -117) [ 131.291803][ T28] audit: type=1107 audit(1777524835.933:9): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 131.385626][ T6128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.499009][ T6135] loop2: detected capacity change from 0 to 512 [ 131.538672][ T6135] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.609815][ T6135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.682274][ T6135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.718053][ T6135] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.827319][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.866623][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.571664][ T6161] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 132.918165][ T6169] loop1: detected capacity change from 0 to 512 [ 132.959163][ T6169] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.90: inode has both inline data and extents flags [ 133.004228][ T6169] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.90: couldn't read orphan inode 15 (err -117) [ 133.049279][ T6169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.185634][ T6155] loop2: detected capacity change from 0 to 32768 [ 133.265853][ T28] audit: type=1800 audit(1777524837.903:10): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.85" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 133.799949][ T6181] loop3: detected capacity change from 0 to 64 [ 135.264643][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.409352][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.429724][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.378153][ T6209] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 136.706150][ T6200] loop2: detected capacity change from 0 to 32768 [ 136.846354][ T28] audit: type=1800 audit(1777524841.463:11): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.99" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 137.531697][ T6224] loop3: detected capacity change from 0 to 64 [ 139.052434][ T6249] loop2: detected capacity change from 0 to 64 [ 140.352164][ T6257] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 141.452759][ T6274] loop3: detected capacity change from 0 to 64 [ 142.046835][ T6276] loop0: detected capacity change from 0 to 256 [ 142.154113][ T28] audit: type=1107 audit(1777524846.793:12): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 142.196079][ T6276] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 142.762331][ T6285] loop3: detected capacity change from 0 to 64 [ 145.162158][ T6304] loop0: detected capacity change from 0 to 128 [ 145.184498][ T6304] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.315936][ T6304] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.436182][ T6304] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 145.445188][ T6304] FAT-fs (loop0): Filesystem has been set read-only [ 147.098754][ T6311] loop3: detected capacity change from 0 to 64 [ 148.219383][ T6328] loop0: detected capacity change from 0 to 64 [ 149.629685][ T28] audit: type=1107 audit(1777524854.263:13): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 150.056638][ T6344] loop0: detected capacity change from 0 to 512 [ 150.128632][ T6344] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 150.170215][ T6344] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 150.387841][ T6344] EXT4-fs (loop0): failed to open journal device unknown-block(0,4) -6 [ 150.697335][ T6344] loop0: detected capacity change from 0 to 512 [ 150.761496][ T6344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.774379][ T6344] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.797216][ T6344] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #2: comm syz.0.139: corrupted inode contents [ 150.816544][ T6344] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #2: comm syz.0.139: mark_inode_dirty error [ 150.833471][ T6344] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #2: comm syz.0.139: corrupted inode contents [ 150.858405][ T6344] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.139: mark_inode_dirty error [ 150.871785][ T6344] BUG: unable to handle page fault for address: ffffffffffffff93 [ 150.879607][ T6344] #PF: supervisor read access in kernel mode [ 150.885733][ T6344] #PF: error_code(0x0000) - not-present page [ 150.891758][ T6344] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 150.897833][ T6344] Oops: 0000 [#1] PREEMPT SMP KASAN [ 150.903386][ T6344] CPU: 1 PID: 6344 Comm: syz.0.139 Not tainted syzkaller #0 [ 150.910729][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.920858][ T6344] RIP: 0010:ext4_ext_map_blocks+0x2d11/0x6800 [ 150.927346][ T6344] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 f7 e0 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 4d 89 fc 49 8d [ 150.947085][ T6344] RSP: 0018:ffffc9000b897500 EFLAGS: 00010246 [ 150.953387][ T6344] RAX: 0000000000000000 RBX: ffffffffffffff8b RCX: 0000000000080000 [ 150.961438][ T6344] RDX: ffffc9000d1c2000 RSI: 0000000000021f52 RDI: ffffffffffffff93 [ 150.969504][ T6344] RBP: ffffc9000b8977b0 R08: ffff88802c6f1e00 R09: 0000000000000002 [ 150.977550][ T6344] R10: 00000000ffffffe4 R11: 0000000000000002 R12: 0000000000000001 [ 150.985607][ T6344] R13: 1ffff92001712ecc R14: dffffc0000000000 R15: ffffffffffffff8b [ 150.993653][ T6344] FS: 00007f4b34aa16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 151.002647][ T6344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.009291][ T6344] CR2: ffffffffffffff93 CR3: 000000002d1da000 CR4: 00000000003506e0 [ 151.009314][ T6344] Call Trace: [ 151.009341][ T6344] [ 151.009374][ T6344] ? __might_sleep+0xe0/0xe0 [ 151.009412][ T6344] ? ext4_ext_release+0x10/0x10 [ 151.009448][ T6344] ? __lock_acquire+0x7d40/0x7d40 [ 151.009478][ T6344] ? ext4_es_lookup_extent+0x60e/0xa00 [ 151.009499][ T6344] ext4_map_blocks+0x9e2/0x1b80 [ 151.009528][ T6344] ? ext4_issue_zeroout+0x250/0x250 [ 151.009556][ T6344] ext4_getblk+0x1d0/0x6f0 [ 151.009583][ T6344] ? ext4_get_block_unwritten+0x100/0x100 [ 151.009610][ T6344] ? __asan_memset+0x22/0x40 [ 151.009635][ T6344] ext4_bread+0x2a/0x170 [ 151.009657][ T6344] ext4_append+0x2c2/0x560 [ 151.009683][ T6344] ? ext4_init_new_dir+0x570/0x570 [ 151.009709][ T6344] ext4_add_entry+0x9eb/0xd90 [ 151.009734][ T6344] ? ext4_inc_count+0x1b0/0x1b0 [ 151.009758][ T6344] ? ext4_init_new_dir+0x4a1/0x570 [ 151.009781][ T6344] ext4_mkdir+0x55c/0xce0 [ 151.009806][ T6344] ? ext4_symlink+0x980/0x980 [ 151.009840][ T6344] ? inode_permission+0xf3/0x480 [ 151.009862][ T6344] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 151.009878][ T6344] ? security_inode_mkdir+0xb7/0x100 [ 151.009906][ T6344] vfs_mkdir+0x296/0x440 [ 151.009925][ T6344] do_mkdirat+0x1dc/0x450 [ 151.009944][ T6344] ? vfs_mkdir+0x440/0x440 [ 151.009962][ T6344] __x64_sys_mkdirat+0x89/0xa0 [ 151.009978][ T6344] do_syscall_64+0x55/0xa0 [ 151.009998][ T6344] ? clear_bhb_loop+0x40/0x90 [ 151.010019][ T6344] ? clear_bhb_loop+0x40/0x90 [ 151.010039][ T6344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.010062][ T6344] RIP: 0033:0x7f4b33b9bc47 [ 151.010084][ T6344] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.010103][ T6344] RSP: 002b:00007f4b34aa0e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 151.010122][ T6344] RAX: ffffffffffffffda RBX: 00007f4b34aa0ee0 RCX: 00007f4b33b9bc47 [ 151.010135][ T6344] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c [ 151.010146][ T6344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.010156][ T6344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080 [ 151.010166][ T6344] R13: 00007f4b34aa0ea0 R14: 0000000000000000 R15: 0000000000000000 [ 151.010185][ T6344] [ 151.010190][ T6344] Modules linked in: [ 151.010216][ T6344] CR2: ffffffffffffff93 [ 151.010234][ T6344] ---[ end trace 0000000000000000 ]--- [ 151.010242][ T6344] RIP: 0010:ext4_ext_map_blocks+0x2d11/0x6800 [ 151.010271][ T6344] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 f7 e0 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 4d 89 fc 49 8d [ 151.010285][ T6344] RSP: 0018:ffffc9000b897500 EFLAGS: 00010246 [ 151.010298][ T6344] RAX: 0000000000000000 RBX: ffffffffffffff8b RCX: 0000000000080000 [ 151.010310][ T6344] RDX: ffffc9000d1c2000 RSI: 0000000000021f52 RDI: ffffffffffffff93 [ 151.010321][ T6344] RBP: ffffc9000b8977b0 R08: ffff88802c6f1e00 R09: 0000000000000002 [ 151.010334][ T6344] R10: 00000000ffffffe4 R11: 0000000000000002 R12: 0000000000000001 [ 151.010349][ T6344] R13: 1ffff92001712ecc R14: dffffc0000000000 R15: ffffffffffffff8b [ 151.010362][ T6344] FS: 00007f4b34aa16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 151.010376][ T6344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.010386][ T6344] CR2: ffffffffffffff93 CR3: 000000002d1da000 CR4: 00000000003506e0 [ 151.010405][ T6344] Kernel panic - not syncing: Fatal exception [ 151.010994][ T6344] Kernel Offset: disabled