last executing test programs: 1m46.94697587s ago: executing program 2 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.memory_migrate\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x1) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) 1m46.051662392s ago: executing program 2 (id=227): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0xec0}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @sack_perm], 0x20000000000000a1) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd80000", 0x4b, 0x810, 0x0, 0x0) 1m46.028449764s ago: executing program 2 (id=228): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000100)=ANY=[], 0xf9, 0x692, &(0x7f0000000cc0)="$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") setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)='$', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = getpgid(r0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1208000, 0x0, 0x7, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1m44.74050126s ago: executing program 2 (id=229): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53a, &(0x7f0000000e00)="$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") setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 1m44.709697772s ago: executing program 2 (id=230): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x20008017) 1m38.078009674s ago: executing program 2 (id=237): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) 1m38.013724598s ago: executing program 32 (id=237): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) 1m14.861638639s ago: executing program 1 (id=480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1b, 0x7ff, 0x6}}}}]}, 0x48}}, 0x10) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m14.484074311s ago: executing program 1 (id=487): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x20008017) 1m14.01328744s ago: executing program 1 (id=488): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, r0, 0x5, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x4040048}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x201, 0x0) r2 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x7c) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x36) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m13.966431182s ago: executing program 1 (id=489): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4008800) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020) 1m13.81952694s ago: executing program 1 (id=490): r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x3, 0xa0800) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) 1m13.413510434s ago: executing program 1 (id=498): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x20008017) 1m13.354862218s ago: executing program 33 (id=498): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x20008017) 1m6.850580863s ago: executing program 5 (id=553): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fallocate(r2, 0x41, 0x0, 0x7) 1m6.784397947s ago: executing program 5 (id=554): setresuid(0x0, 0xee00, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x50, 0x12, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xfff2}, {0xb, 0x1}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}, {0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 1m6.783945617s ago: executing program 5 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r8 = openat$cgroup_devices(r6, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) write(r8, &(0x7f00000002c0)="0e0100120f0a00110001926c000000002e0c7000f5fe00", 0x17) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}], 0x1, 0xffffff01, 0xa) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 1m5.950186296s ago: executing program 5 (id=556): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200810, &(0x7f0000000180)=ANY=[], 0xfd, 0x1501, &(0x7f0000001b40)="$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") sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x880) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) syz_open_procfs(r0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) syz_open_procfs(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) pwrite64(r1, &(0x7f0000000140)="a9", 0x1, 0x600001002) 1m5.89458687s ago: executing program 5 (id=557): socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x10) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x40488c0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010029bd7000fed6df250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) 1m0.511336488s ago: executing program 5 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r8 = openat$cgroup_devices(r6, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) write(r8, &(0x7f00000002c0)="0e0100120f0a00110001926c000000002e0c7000f5fe00", 0x17) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}], 0x1, 0xffffff01, 0xa) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 1m0.398128595s ago: executing program 34 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r8 = openat$cgroup_devices(r6, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) write(r8, &(0x7f00000002c0)="0e0100120f0a00110001926c000000002e0c7000f5fe00", 0x17) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}], 0x1, 0xffffff01, 0xa) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 36.296609632s ago: executing program 3 (id=805): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000240)=ANY=[], 0x8, 0x1cc, &(0x7f00000006c0)="$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") open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) 36.232909096s ago: executing program 3 (id=807): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000088d82, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000040)={0x0, 0x5cd0, 0x100, 0xfffffffc, 0x1bc}, &(0x7f0000002180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847b9, 0xebd0, 0xa, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) open_tree(0xffffffffffffffff, 0x0, 0x8100) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000300)=""/146, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x69, 0xdd, 0x34, 0x40, 0xccd, 0x93, 0x235a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x6c, 0xe0, 0x8d, 0x0, [], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24000000) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 33.167400446s ago: executing program 3 (id=845): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB='\n\x00'], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r1, 0x1) shutdown(r0, 0x0) 33.051193354s ago: executing program 3 (id=849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x11) close(r1) fanotify_init(0x20, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2800000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 32.976309608s ago: executing program 3 (id=850): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/219, 0xdb) 31.636100787s ago: executing program 3 (id=866): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000b00)={0x1, 0x5, 0x10, 0x3, 0x0, 0xf, 0x0}) 16.616935416s ago: executing program 35 (id=866): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000b00)={0x1, 0x5, 0x10, 0x3, 0x0, 0xf, 0x0}) 12.735894376s ago: executing program 0 (id=985): socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x10) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0xffffffffffffffc5, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x40488c0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010029bd7000fed6df250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) 12.522576009s ago: executing program 0 (id=986): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @sack_perm, @mss={0x2, 0x3}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @window={0x3, 0xfffe}, @timestamp], 0x2000000000000133) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0xc, 0x0, 0x46) 12.478521931s ago: executing program 0 (id=987): syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0xc000, &(0x7f00000001c0)={[{@shortname_mixed}, {@shortname_win95}, {@uni_xlate}, {@utf8}, {@fat=@dos1xfloppy}]}, 0x11, 0x357, &(0x7f0000000300)="$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") 12.368207448s ago: executing program 0 (id=989): syz_open_procfs(0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175"], 0x0, 0x0, 0x0, 0x0}, 0x0) 12.32635195s ago: executing program 4 (id=990): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fallocate(r2, 0x41, 0x0, 0x7) 12.300669672s ago: executing program 4 (id=991): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00Q\x00'], 0x0) 12.192341748s ago: executing program 4 (id=992): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 12.183592189s ago: executing program 4 (id=994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x7fffffff, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x4, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6}]}}]}, 0x38}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 11.864195868s ago: executing program 7 (id=1001): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fallocate(r2, 0x41, 0x0, 0x7) 11.845254989s ago: executing program 7 (id=1003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(0x0, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) 11.748433695s ago: executing program 8 (id=1005): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f0000000340)={0x44, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.732804205s ago: executing program 4 (id=1006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @random="b524732b4e4a"}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="89e7ee2c78dad9b4b473fec988", 0xd}], 0x1) 11.224115295s ago: executing program 8 (id=1008): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c8549b407c2c0e032881010203010902240001000000000904000002ff18d40009050602ff030040000905820208"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4b, &(0x7f0000000840)=""/126, &(0x7f00000001c0)=0x7e) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000340)={0x4}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="b75db6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 10.98023205s ago: executing program 7 (id=1009): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000880)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000000640)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f646c2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d7887d00cb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1db22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf10701000000bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323c8d3900a65b788e99ddf9d9a2383f1730c78631034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3d336bda45335a68c185e0ca79792cc1a9253da5271d1c9", 0x17f}], 0x3}, 0x0) 10.799869701s ago: executing program 6 (id=1011): socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x10) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0xffffffffffffffc5, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x40488c0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010029bd7000fed6df250200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) 10.697414477s ago: executing program 6 (id=1012): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0090de404ce16edd8f86996c9180cfcb13cd80200dd8da1d3093e75254f9eda64e9ae6c9c59d786a629592778a97672cef880b53ec4f03f8ed32b55678b8c823aab57990fb536cafc3d9e78efac58deefb4fe78831e3936634fc59c0e1f9081207e19e65b8f5eb9e068e6dbd9bd0238eba2b8e855835fb46c04258461231196cc451f48ea25486801be08a833503ddb6e4"], 0xfd, 0x1a1, &(0x7f0000000000)="$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") ioctl$TCSETS(0xffffffffffffffff, 0x5410, &(0x7f0000000040)={0xfffffffe, 0x1000, 0xfffffffc, 0x7, 0x0, "00000400000000000c00000008eaff00"}) ptrace$setregs(0xd, r0, 0x4b314952, &(0x7f0000000ac0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 10.687879447s ago: executing program 8 (id=1013): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fallocate(r2, 0x41, 0x0, 0x7) 10.584306863s ago: executing program 8 (id=1014): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x400, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) preadv2(r0, &(0x7f0000000b00)=[{&(0x7f00000008c0)=""/93, 0x5d}, {0x0}], 0x2, 0xb, 0x5, 0x13) 10.583930713s ago: executing program 6 (id=1015): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x24, 0x2c, 0xf31, 0x70bd2d, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048844}, 0x4010) 10.583759133s ago: executing program 8 (id=1016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x7fffffff, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x4, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6}]}}]}, 0x38}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 9.365751825s ago: executing program 0 (id=1017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 717.922057ms ago: executing program 6 (id=1018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 681.35629ms ago: executing program 4 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r1, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000000c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000000300)) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r3, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 625.783333ms ago: executing program 0 (id=1020): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2016840, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003340)={0x2020}, 0x2020) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 602.682555ms ago: executing program 8 (id=1021): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$ndb(0x0, 0x0, 0x12080) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) connect$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 599.358855ms ago: executing program 7 (id=1022): socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x10) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0xffffffffffffffc5, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x40488c0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010029bd7000fed6df250200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) 543.387768ms ago: executing program 6 (id=1023): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c8549b407c2c0e032881010203010902240001000000000904000002ff18d40009050602ff030040000905820208"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4b, &(0x7f0000000840)=""/126, &(0x7f00000001c0)=0x7e) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000340)={0x4}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="b75db6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 455.749893ms ago: executing program 7 (id=1024): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fallocate(r2, 0x41, 0x0, 0x7) 384.274267ms ago: executing program 7 (id=1025): semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(0x0, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) 0s ago: executing program 6 (id=1026): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x192, &(0x7f0000009480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.237831][ T4749] loop1: detected capacity change from 0 to 1024 [ 55.274905][ T4754] loop0: detected capacity change from 0 to 512 [ 55.277971][ T4754] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 55.334799][ T4754] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 55.336133][ T4754] System zones: 1-12 [ 55.342501][ T4754] EXT4-fs (loop0): 1 truncate cleaned up [ 55.343467][ T4754] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 55.372286][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 55.968097][ T4365] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 56.001458][ T4792] loop3: detected capacity change from 0 to 256 [ 56.034663][ T4792] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 56.037021][ T4792] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 56.168078][ T4365] usb 1-1: Using ep0 maxpacket: 16 [ 56.172581][ T4365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.174254][ T4365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.175788][ T4365] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.177850][ T4365] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 56.183610][ T4365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.190631][ T4365] usb 1-1: config 0 descriptor?? [ 56.424617][ T4809] capability: warning: `syz.1.119' uses deprecated v2 capabilities in a way that may be insecure [ 56.434309][ T4809] loop1: detected capacity change from 0 to 2048 [ 56.455905][ T4809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 56.465206][ T4811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.469720][ T4811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.508954][ T4815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.510316][ T4815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.595622][ T4365] microsoft 0003:045E:07DA.0001: invalid report_count -845894383 [ 56.596710][ T4365] microsoft 0003:045E:07DA.0001: item 0 4 1 9 parsing failed [ 56.598089][ T4365] microsoft 0003:045E:07DA.0001: parse failed [ 56.599376][ T4365] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 56.797880][ T4365] usb 1-1: USB disconnect, device number 4 [ 57.467032][ T4840] loop4: detected capacity change from 0 to 4096 [ 57.510377][ T4840] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.512123][ T4846] device syzkaller0 entered promiscuous mode [ 57.607329][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 57.883174][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.885232][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.040401][ T4380] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 58.219361][ T4380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.221084][ T4380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.222507][ T4380] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.224573][ T4380] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.228771][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.234272][ T4380] usb 1-1: config 0 descriptor?? [ 58.255311][ T4883] loop4: detected capacity change from 0 to 512 [ 58.310769][ T4883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 58.347650][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 58.354808][ T4889] device syzkaller0 entered promiscuous mode [ 58.479403][ T4897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 58.812640][ T4380] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 58.817208][ T4380] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 58.822211][ T4897] bridge1: port 1(veth0_to_bond) entered blocking state [ 58.824053][ T4897] bridge1: port 1(veth0_to_bond) entered disabled state [ 58.829262][ T4897] device veth0_to_bond entered promiscuous mode [ 58.838465][ T4900] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 58.851442][ T4900] exFAT-fs (loop1): hint_cluster is invalid (17) [ 58.875847][ T4905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.877288][ T4905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.064878][ T4911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.155'. [ 59.081811][ T4381] usb 1-1: USB disconnect, device number 5 [ 59.292929][ T4922] set_capacity_and_notify: 1 callbacks suppressed [ 59.292938][ T4922] loop1: detected capacity change from 0 to 164 [ 59.301957][ T4924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.304952][ T4924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.462887][ T4933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.465527][ T4933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.645856][ T4941] netlink: 32 bytes leftover after parsing attributes in process `syz.2.166'. [ 60.815357][ T4980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.178'. [ 60.864749][ T4995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.867440][ T4995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.168397][ T4388] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 61.348155][ T4388] usb 1-1: Using ep0 maxpacket: 16 [ 61.350201][ T4388] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.351881][ T4388] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.353400][ T4388] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 61.355354][ T4388] usb 1-1: config 0 interface 0 has no altsetting 0 [ 61.358492][ T4388] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 61.361438][ T4388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.363846][ T4388] usb 1-1: config 0 descriptor?? [ 61.376957][ T5005] tipc: Started in network mode [ 61.377872][ T5005] tipc: Node identity 0e30d59bc78, cluster identity 4711 [ 61.379114][ T5005] tipc: Enabled bearer , priority 0 [ 61.381783][ T5005] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 61.419652][ T5005] tipc: Resetting bearer [ 61.538779][ T5004] tipc: Disabling bearer [ 61.767969][ T4388] hid (null): nested delimiters [ 61.768881][ T4388] hid (null): bogus close delimiter [ 61.769728][ T4388] hid (null): report_id 0 is invalid [ 61.919781][ T5018] netlink: 32 bytes leftover after parsing attributes in process `syz.1.192'. [ 61.970730][ T7] usb 1-1: USB disconnect, device number 6 [ 62.265185][ T5037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.266648][ T5037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.512414][ T5039] loop0: detected capacity change from 0 to 4096 [ 62.513794][ T5039] EXT4-fs: inline encryption not supported [ 62.552230][ T5039] EXT4-fs (loop0): Test dummy encryption mode enabled [ 62.554960][ T5039] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 62.556532][ T5039] System zones: 0-5 [ 62.559045][ T5039] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.576420][ T5039] fs-verity: sha512 using implementation "sha512-ce" [ 62.599852][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 63.777741][ T5065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.203'. [ 64.479723][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.480970][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.604964][ T111] cfg80211: failed to load regulatory.db [ 72.771303][ T5049] tipc: Enabling of bearer rejected, failed to enable media [ 72.867069][ T5088] loop4: detected capacity change from 0 to 2048 [ 72.882161][ T5088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.934671][ T5099] usb usb1: usbfs: process 5099 (syz.3.211) did not claim interface 0 before use [ 73.151469][ T5107] loop2: detected capacity change from 0 to 256 [ 73.328891][ T5107] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.334345][ T5110] hub 9-0:1.0: USB hub found [ 73.340396][ T5107] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 73.344048][ T5110] hub 9-0:1.0: 8 ports detected [ 73.359979][ T5107] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 73.391108][ T5103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.214'. [ 73.607874][ T5132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.609525][ T5132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.531943][ T5151] loop2: detected capacity change from 0 to 4096 [ 76.535695][ T5151] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.554707][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 77.487220][ T5161] loop2: detected capacity change from 0 to 1024 [ 78.578025][ C0] sched: RT throttling activated [ 78.740670][ T5166] loop2: detected capacity change from 0 to 512 [ 78.749252][ T5166] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 78.750509][ T5166] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 78.751765][ T5166] System zones: 0-1, 15-15, 18-18, 34-34 [ 78.752907][ T5166] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.754548][ T5166] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 78.755989][ T5166] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 78.762804][ T5166] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 78.765706][ T5166] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.229: bg 0: block 40: padding at end of block bitmap is not set [ 78.768785][ T5166] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 78.770428][ T5166] EXT4-fs (loop2): 1 truncate cleaned up [ 78.771297][ T5166] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.794832][ T4330] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 78.800837][ T4330] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 85.403891][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 85.506825][ T5197] loop3: detected capacity change from 0 to 1024 [ 85.514831][ T5197] EXT4-fs: inline encryption not supported [ 85.517973][ T5197] EXT4-fs: Ignoring removed i_version option [ 85.523556][ T5197] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.540090][ T5197] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.546096][ T4333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.548245][ T4333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.554963][ T4333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.557333][ T4333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.564504][ T4333] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.565894][ T4333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.589505][ T5197] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3852: comm syz.3.239: Allocating blocks 497-513 which overlap fs metadata [ 85.593043][ T5197] EXT4-fs (loop3): pa 00000000578a595b: logic 256, phys. 385, len 8 [ 85.594380][ T5197] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 85.642919][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 85.670683][ T5210] loop3: detected capacity change from 0 to 764 [ 85.705438][ T5212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.708384][ T5183] tipc: Enabling of bearer rejected, failed to enable media [ 85.711308][ T5212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.830620][ T5216] loop1: detected capacity change from 0 to 512 [ 85.845899][ T5216] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.847536][ T5216] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 85.855166][ T5216] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 85.856760][ T5216] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 85.865224][ T5216] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 85.866733][ T5216] EXT4-fs (loop1): orphan cleanup on readonly fs [ 85.870017][ T5216] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.243: bg 0: block 34: padding at end of block bitmap is not set [ 85.873501][ T5216] Quota error (device loop1): write_blk: dquota write failed [ 85.874787][ T5216] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 85.876334][ T5216] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.243: Failed to acquire dquot type 1 [ 85.881714][ T5216] EXT4-fs (loop1): 1 truncate cleaned up [ 85.885886][ T5216] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.199878][ T5216] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 86.249838][ T4962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.263474][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 86.310824][ T5225] loop0: detected capacity change from 0 to 128 [ 86.344171][ T5227] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 86.356865][ T4962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.479898][ T4962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.524152][ T5231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.247'. [ 86.526871][ T5237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.249'. [ 86.543994][ T5201] chnl_net:caif_netlink_parms(): no params data found [ 86.572193][ T4962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.690129][ T5245] tipc: Enabled bearer , priority 0 [ 87.029105][ T5245] tipc: Resetting bearer [ 87.051290][ T5259] netlink: 'syz.3.257': attribute type 2 has an invalid length. [ 87.052775][ T5259] netlink: 'syz.3.257': attribute type 1 has an invalid length. [ 87.054193][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 87.101866][ T5264] netlink: 32 bytes leftover after parsing attributes in process `syz.1.259'. [ 87.119398][ T5244] tipc: Disabling bearer [ 87.133394][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.134642][ T5201] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.136058][ T5201] device bridge_slave_0 entered promiscuous mode [ 87.142733][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.143878][ T5201] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.145363][ T5201] device bridge_slave_1 entered promiscuous mode [ 87.154728][ T5201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.157604][ T5201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.188998][ T5201] team0: Port device team_slave_0 added [ 87.191161][ T5201] team0: Port device team_slave_1 added [ 87.211709][ T5201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.212890][ T5201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.233304][ T5201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.241798][ T5268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.261'. [ 87.248308][ T5201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.249461][ T5201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.277122][ T5201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.506695][ T5300] devpts: called with bogus options [ 87.608238][ T4333] Bluetooth: hci4: command 0x0409 tx timeout [ 87.729180][ T5321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.275'. [ 89.678103][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 90.870446][ T5316] tipc: Enabling of bearer rejected, failed to enable media [ 90.920553][ T5201] device hsr_slave_0 entered promiscuous mode [ 91.104904][ T5201] device hsr_slave_1 entered promiscuous mode [ 91.268262][ T5201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.272353][ T5201] Cannot create hsr debugfs directory [ 91.685587][ T5361] loop4: detected capacity change from 0 to 128 [ 91.695929][ T5361] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 91.705077][ T5361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.758409][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 91.941488][ T5367] netlink: 32 bytes leftover after parsing attributes in process `syz.4.285'. [ 91.954113][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 92.412441][ T5201] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.478232][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 92.481725][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.483702][ T22] usb 1-1: config 5 has an invalid interface number: 83 but max is 0 [ 92.485023][ T22] usb 1-1: config 5 has no interface number 0 [ 92.485921][ T22] usb 1-1: config 5 interface 83 has no altsetting 0 [ 92.489408][ T22] usb 1-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=dc.d6 [ 92.490965][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.492201][ T22] usb 1-1: Product: syz [ 92.493606][ T22] usb 1-1: Manufacturer: syz [ 92.494295][ T22] usb 1-1: SerialNumber: syz [ 92.505643][ T5201] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.580492][ T5394] tipc: Enabled bearer , priority 0 [ 92.584439][ T5201] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.671239][ T5386] tipc: Started in network mode [ 92.672056][ T5386] tipc: Node identity 2ede76c3fa9d, cluster identity 4711 [ 92.673321][ T5386] tipc: Enabled bearer , priority 0 [ 92.675890][ T5201] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.709521][ T5392] device syzkaller0 entered promiscuous mode [ 92.721648][ T22] usb 1-1: bad CDC descriptors [ 92.723724][ T22] usb 1-1: bad CDC descriptors [ 92.727762][ T5386] tipc: Resetting bearer [ 92.733764][ T22] usb 1-1: USB disconnect, device number 7 [ 92.734066][ T5388] tipc: Resetting bearer [ 92.783996][ T5385] tipc: Resetting bearer [ 92.828700][ T5385] tipc: Disabling bearer [ 92.939743][ T5387] tipc: Disabling bearer [ 93.046223][ T5201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.057407][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.062415][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.209573][ T5426] netlink: 32 bytes leftover after parsing attributes in process `syz.4.298'. [ 93.275703][ T5438] loop0: detected capacity change from 0 to 512 [ 93.282842][ T5438] EXT4-fs (loop0): 1 truncate cleaned up [ 93.283906][ T5438] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 93.461688][ T5201] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.744001][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.746704][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.748945][ T4576] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.750053][ T4576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.751570][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.753325][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.754703][ T4576] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.755837][ T4576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.757122][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.761765][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.763321][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.769755][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.771589][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.773207][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.775009][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.776619][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.838159][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 94.062897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.065122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.071054][ T5449] tipc: Enabled bearer , priority 0 [ 94.073453][ T5450] device syzkaller0 entered promiscuous mode [ 94.079253][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.083029][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.092931][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.113501][ T5458] loop4: detected capacity change from 0 to 128 [ 94.136647][ T5458] FAT-fs (loop4): Directory bread(block 162) failed [ 94.143422][ T5458] FAT-fs (loop4): Directory bread(block 163) failed [ 94.145840][ T5458] FAT-fs (loop4): Directory bread(block 164) failed [ 94.147588][ T5458] FAT-fs (loop4): Directory bread(block 165) failed [ 94.157344][ T5447] tipc: Resetting bearer [ 94.170770][ T4962] device hsr_slave_0 left promiscuous mode [ 94.173890][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 94.175004][ T5458] FAT-fs (loop4): Directory bread(block 166) failed [ 94.180218][ T5458] FAT-fs (loop4): Directory bread(block 167) failed [ 94.181290][ T5458] FAT-fs (loop4): Directory bread(block 168) failed [ 94.182288][ T5458] FAT-fs (loop4): Directory bread(block 169) failed [ 94.183256][ T5458] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.194827][ T5458] FAT-fs (loop4): Directory bread(block 162) failed [ 94.198661][ T5464] loop0: detected capacity change from 0 to 128 [ 94.201126][ T5458] FAT-fs (loop4): Directory bread(block 163) failed [ 94.202874][ T5458] syz.4.302: attempt to access beyond end of device [ 94.202874][ T5458] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 94.208572][ T4962] device hsr_slave_1 left promiscuous mode [ 94.210331][ T5458] syz.4.302: attempt to access beyond end of device [ 94.210331][ T5458] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 94.259170][ T5464] syz.0.303: attempt to access beyond end of device [ 94.259170][ T5464] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 94.289705][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.292260][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.300443][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.301742][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.303237][ T4962] device bridge_slave_1 left promiscuous mode [ 94.305735][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.340670][ T4962] device bridge_slave_0 left promiscuous mode [ 94.341782][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.459034][ T4962] device veth1_macvtap left promiscuous mode [ 94.460278][ T4962] device veth0_macvtap left promiscuous mode [ 94.461352][ T4962] device veth1_vlan left promiscuous mode [ 94.462423][ T4962] device veth0_vlan left promiscuous mode [ 94.486295][ T5483] netlink: 32 bytes leftover after parsing attributes in process `syz.4.308'. [ 94.537900][ T5492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.544088][ T5492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.015808][ T5506] loop1: detected capacity change from 0 to 164 [ 96.579880][ T4962] team0 (unregistering): Port device team_slave_1 removed [ 96.739413][ T4962] team0 (unregistering): Port device team_slave_0 removed [ 96.908530][ T4962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.110391][ T4962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.629624][ T4962] bond0 (unregistering): Released all slaves [ 98.930585][ T5446] tipc: Resetting bearer [ 98.989035][ T5446] tipc: Disabling bearer [ 99.004295][ T5485] device syzkaller0 entered promiscuous mode [ 99.019252][ T14] tipc: Node number set to 3561191107 [ 99.093795][ T5201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.095225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.096456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.118997][ T5533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.120484][ T5533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.211932][ T5547] loop0: detected capacity change from 0 to 512 [ 99.226244][ T5547] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #15: comm syz.0.322: corrupted inode contents [ 99.231067][ T5547] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 99.232991][ T5547] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #15: comm syz.0.322: corrupted inode contents [ 99.238689][ T5547] EXT4-fs error (device loop0): ext4_evict_inode:327: inode #15: comm syz.0.322: mark_inode_dirty error [ 99.242937][ T5547] EXT4-fs (loop0): 1 orphan inode deleted [ 99.243876][ T5547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.273038][ T5529] netlink: 32 bytes leftover after parsing attributes in process `syz.3.318'. [ 99.282495][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 99.377318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.378891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.386605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.389133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.390763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.394177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.398813][ T5201] device veth0_vlan entered promiscuous mode [ 99.482322][ T5201] device veth1_vlan entered promiscuous mode [ 99.518644][ T5201] device veth0_macvtap entered promiscuous mode [ 99.521491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.523076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.524640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.526193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.527764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.734137][ T5201] device veth1_macvtap entered promiscuous mode [ 99.760437][ T5584] tipc: Enabled bearer , priority 0 [ 99.762048][ T5584] device syzkaller0 entered promiscuous mode [ 99.765246][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.766866][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.769149][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.770802][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.772191][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.773773][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.775311][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.776851][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.781537][ T5201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.784858][ T5584] tipc: Resetting bearer [ 99.785906][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.787343][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.790890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.793549][ T5583] tipc: Resetting bearer [ 99.849734][ T5583] tipc: Disabling bearer [ 99.961114][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.968856][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.975184][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.989558][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.995270][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.996915][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.018167][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.019739][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.022142][ T5201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.025807][ T5601] device syzkaller0 entered promiscuous mode [ 100.738674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.740427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.746487][ T5201] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.781004][ T5201] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.782398][ T5201] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.783656][ T5201] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.808896][ T5622] loop3: detected capacity change from 0 to 8 [ 100.844547][ T5622] SQUASHFS error: zlib decompression failed, data probably corrupt [ 100.845822][ T5622] SQUASHFS error: Failed to read block 0x4de: -5 [ 100.846246][ T5628] loop0: detected capacity change from 0 to 256 [ 100.848821][ T5622] SQUASHFS error: zlib decompression failed, data probably corrupt [ 100.850337][ T5622] SQUASHFS error: Failed to read block 0x4de: -5 [ 100.864030][ T5628] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 100.989706][ T5631] device wlan0 entered promiscuous mode [ 101.238360][ T4442] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 101.412380][ T5645] loop4: detected capacity change from 0 to 512 [ 101.418850][ T5645] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.429802][ T4442] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.431532][ T4442] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 101.434757][ T4442] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 101.436344][ T4442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.437629][ T4442] usb 1-1: Product: syz [ 101.439758][ T4442] usb 1-1: Manufacturer: syz [ 101.440466][ T4442] usb 1-1: SerialNumber: syz [ 101.441473][ T5164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.443089][ T5164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.444556][ T5645] EXT4-fs (loop4): 1 truncate cleaned up [ 101.445419][ T5645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.447421][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.457896][ T4442] usb 1-1: config 0 descriptor?? [ 101.478653][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.480010][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.483233][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.507022][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 101.682404][ T111] usb 1-1: USB disconnect, device number 8 [ 101.802672][ T5690] device syzkaller0 entered promiscuous mode [ 102.323965][ T5706] loop1: detected capacity change from 0 to 512 [ 102.327512][ T5706] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.331087][ T5706] EXT4-fs (loop1): 1 truncate cleaned up [ 102.331953][ T5706] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 102.369885][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 102.422542][ T5715] loop4: detected capacity change from 0 to 128 [ 102.426769][ T5716] loop1: detected capacity change from 0 to 1024 [ 102.436411][ T5716] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 102.448860][ T5716] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.452609][ T5715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.465512][ T5716] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 102.468775][ T5716] EXT4-fs warning (device loop1): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 102.506064][ T5716] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 102.529653][ T5716] EXT4-fs (loop1): 1 truncate cleaned up [ 102.535311][ T5716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 102.573386][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 102.581795][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 102.816566][ T5758] device syzkaller0 entered promiscuous mode [ 102.827093][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.368'. [ 102.841867][ T5761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.862026][ T5767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.863508][ T5767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.899107][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.901789][ T5761] bond1: (slave bond0): Enslaving as an active interface with an up link [ 102.903227][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 102.999279][ T5779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.006300][ T5779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.070353][ T5784] loop5: detected capacity change from 0 to 128 [ 103.085092][ T5784] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 103.145286][ T5789] netlink: 'syz.0.377': attribute type 1 has an invalid length. [ 103.146384][ T5201] EXT4-fs (loop5): unmounting filesystem. [ 103.193396][ T5796] loop0: detected capacity change from 0 to 2048 [ 103.197087][ T5796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.216278][ T5796] Illegal XDP return value 4294967274 on prog (id 30) dev syz_tun, expect packet loss! [ 103.289382][ T5801] 9pnet_fd: Insufficient options for proto=fd [ 103.321150][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'. [ 103.331601][ T5805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.357177][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.358693][ T5810] loop5: detected capacity change from 0 to 512 [ 103.360599][ T5810] EXT4-fs (loop5): Test dummy encryption mode enabled [ 103.361764][ T5810] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 103.365619][ T5805] bond1: (slave bond0): Enslaving as an active interface with an up link [ 103.367055][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 103.374283][ T5810] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.384: bad orphan inode 131083 [ 103.376902][ T5810] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 103.442997][ T5201] EXT4-fs (loop5): unmounting filesystem. [ 103.479481][ T5819] device syzkaller0 entered promiscuous mode [ 103.595797][ T5832] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 103.659275][ T5841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.663275][ T5841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.682912][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 103.699954][ T5838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.709628][ T5843] bond1: (slave bond0): Releasing backup interface [ 103.761576][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.763489][ T5843] bond2: (slave bond0): Enslaving as an active interface with an up link [ 103.764889][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 103.848968][ T22] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 103.851396][ T22] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.073783][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 104.096901][ T5878] netlink: 'syz.1.409': attribute type 1 has an invalid length. [ 104.123937][ T5880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 104.134444][ T5880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.148210][ T1965] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 104.156696][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.164788][ T5880] bond1: (slave bond0): Enslaving as an active interface with an up link [ 104.172446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 104.174096][ T5885] device syzkaller0 entered promiscuous mode [ 104.351292][ T1965] usb 1-1: Using ep0 maxpacket: 32 [ 104.355494][ T1965] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 104.356637][ T1965] usb 1-1: config 0 has no interface number 0 [ 104.357595][ T1965] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 104.365022][ T1965] usb 1-1: config 0 interface 196 has no altsetting 0 [ 104.369861][ T1965] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 104.374682][ T5898] set_capacity_and_notify: 1 callbacks suppressed [ 104.374689][ T5898] loop5: detected capacity change from 0 to 512 [ 104.375571][ T1965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.379258][ T1965] usb 1-1: Product: syz [ 104.379909][ T1965] usb 1-1: Manufacturer: syz [ 104.381097][ T1965] usb 1-1: SerialNumber: syz [ 104.384206][ T1965] usb 1-1: config 0 descriptor?? [ 104.392598][ T5857] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.416335][ T5898] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #15: comm syz.5.418: corrupted inode contents [ 104.438705][ T5898] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 104.445710][ T5898] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #15: comm syz.5.418: corrupted inode contents [ 104.459440][ T5898] EXT4-fs error (device loop5): ext4_evict_inode:327: inode #15: comm syz.5.418: mark_inode_dirty error [ 104.473024][ T5898] EXT4-fs (loop5): 1 orphan inode deleted [ 104.473947][ T5898] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 104.531442][ T5201] EXT4-fs (loop5): unmounting filesystem. [ 104.573217][ T5916] netlink: 'syz.4.421': attribute type 1 has an invalid length. [ 104.614305][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.423'. [ 104.616730][ T5924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.621004][ T5928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.622893][ T5924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.641496][ T5928] bond1: (slave bond0): Releasing backup interface [ 104.653350][ T5932] loop4: detected capacity change from 0 to 4096 [ 104.656075][ T5932] EXT4-fs (loop4): Test dummy encryption mode enabled [ 104.663187][ T5932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 104.671113][ T5932] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 104.672261][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.684522][ T5932] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 104.693271][ T5928] bond2: (slave bond0): Enslaving as an active interface with an up link [ 104.694702][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 104.706594][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 104.809406][ T1965] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 104.813644][ T5949] device syzkaller0 entered promiscuous mode [ 104.837878][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.839656][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.843539][ T5951] Option 'zþ!fD§œ‹' to dns_resolver key: bad/missing value [ 105.052331][ T5963] loop5: detected capacity change from 0 to 1024 [ 105.068579][ T5963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.088814][ T5963] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 105.129878][ T5201] EXT4-fs (loop5): unmounting filesystem. [ 105.160805][ T5975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.162347][ T5975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.189004][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.438'. [ 105.207417][ T5978] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.217715][ T5978] bond2: (slave bond0): Releasing backup interface [ 105.271800][ T5978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.274545][ T5978] bond3: (slave bond0): Enslaving as an active interface with an up link [ 105.285363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 105.483003][ T6004] loop1: detected capacity change from 0 to 4096 [ 105.485737][ T6004] EXT4-fs: inline encryption not supported [ 105.491353][ T6004] EXT4-fs (loop1): Test dummy encryption mode enabled [ 105.494280][ T7] usb 1-1: USB disconnect, device number 9 [ 105.514779][ T6004] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 105.516243][ T6004] System zones: 0-5 [ 105.517517][ T6004] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.592426][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 105.634710][ T6021] device syzkaller0 entered promiscuous mode [ 105.651215][ T7] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 106.120336][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 106.165795][ T6038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.209594][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.232421][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.254336][ T6038] bond1: (slave bond0): Releasing backup interface [ 106.305926][ T6038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.310871][ T6038] bond2: (slave bond0): Enslaving as an active interface with an up link [ 106.314698][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 106.434832][ T7] hid-generic 000E:0007:10000.0005: item fetching failed at offset 0/4 [ 106.436361][ T7] hid-generic: probe of 000E:0007:10000.0005 failed with error -22 [ 106.438744][ T6076] UHID_CREATE from different security context by process 192 (syz.0.455), this is not allowed. [ 106.474719][ T6080] loop3: detected capacity change from 0 to 256 [ 106.484977][ T6080] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 106.562740][ T6086] loop0: detected capacity change from 0 to 256 [ 106.960699][ T6086] exfat: Deprecated parameter 'utf8' [ 106.961539][ T6086] exfat: Deprecated parameter 'utf8' [ 106.990985][ T6086] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 107.042874][ T6096] device syzkaller0 entered promiscuous mode [ 107.088801][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.463'. [ 107.099255][ T6098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.224900][ T6098] bond2: (slave bond0): Releasing backup interface [ 107.256754][ T6098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.260692][ T6098] bond3: (slave bond0): Enslaving as an active interface with an up link [ 107.263540][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 107.304652][ T6114] loop0: detected capacity change from 0 to 512 [ 107.311859][ T6114] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.322676][ T6114] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=a002e018, mo2=0000] [ 107.324263][ T6114] EXT4-fs (loop0): failed to initialize system zone (-117) [ 107.325574][ T6114] EXT4-fs (loop0): mount failed [ 107.388327][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.389817][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.421150][ T6138] loop5: detected capacity change from 0 to 1024 [ 108.429645][ T6138] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.430700][ T6138] EXT4-fs: Ignoring removed oldalloc option [ 108.431577][ T6138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.487156][ T6138] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 108.514441][ T6138] EXT4-fs error (device loop5): __ext4_remount:6644: comm syz.5.474: Abort forced by user [ 108.527849][ T6138] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 108.565876][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 108.584965][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.586500][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.604900][ T5201] EXT4-fs (loop5): unmounting filesystem. [ 108.612808][ T6155] 8021q: adding VLAN 0 to HW filter on device bond4 [ 108.614423][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.477'. [ 108.632450][ T6155] bond3: (slave bond0): Releasing backup interface [ 108.664007][ T6155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.669426][ T6155] bond4: (slave bond0): Enslaving as an active interface with an up link [ 108.671346][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 108.755374][ T6162] device syzkaller0 entered promiscuous mode [ 109.137348][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 109.338199][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 109.346220][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.347922][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.349606][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 109.354831][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.368966][ T22] usb 1-1: config 0 descriptor?? [ 109.373969][ T22] hub 1-1:0.0: USB hub found [ 109.559701][ T6192] loop1: detected capacity change from 0 to 256 [ 109.574888][ T22] hub 1-1:0.0: 1 port detected [ 109.579332][ T6192] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.580949][ T6192] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 109.592483][ T6192] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 109.704816][ T6194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.491'. [ 109.735756][ T6194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.757564][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.761915][ T6194] bond1: (slave bond0): Enslaving as an active interface with an up link [ 109.763566][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 109.986991][ T6209] fuse: Bad value for 'fd' [ 110.047897][ T6212] loop3: detected capacity change from 0 to 256 [ 110.053599][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.055065][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.179529][ T6091] hub 1-1:0.0: activate --> -90 [ 110.210731][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.212652][ T4333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.214212][ T4333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.216357][ T4333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.217772][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.219714][ T4333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.330476][ T4962] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.333987][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.5.502'. [ 110.339377][ T6219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.344893][ T6224] bond1: (slave bond0): Releasing backup interface [ 110.382935][ T7] usb 1-1: USB disconnect, device number 10 [ 110.384741][ T4388] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 110.392924][ T6224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.394687][ T6224] bond2: (slave bond0): Enslaving as an active interface with an up link [ 110.397255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 110.470246][ T4962] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.839728][ T6220] chnl_net:caif_netlink_parms(): no params data found [ 110.870808][ T4962] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.885182][ T6236] device syzkaller0 entered promiscuous mode [ 110.992562][ T4962] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.003884][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.005111][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.006800][ T6220] device bridge_slave_0 entered promiscuous mode [ 111.011658][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.012863][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.014435][ T6220] device bridge_slave_1 entered promiscuous mode [ 111.114731][ T6220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.117385][ T6220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.125908][ T6220] team0: Port device team_slave_0 added [ 111.127859][ T6220] team0: Port device team_slave_1 added [ 111.141082][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.142311][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.148577][ T6220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.153449][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.154537][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.161451][ T6243] loop0: detected capacity change from 0 to 1024 [ 111.164222][ T6220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.175505][ T6243] EXT4-fs: inline encryption not supported [ 111.176451][ T6243] EXT4-fs: Ignoring removed i_version option [ 111.207430][ T6243] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.250962][ T6243] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.270054][ T6220] device hsr_slave_0 entered promiscuous mode [ 111.298690][ T6220] device hsr_slave_1 entered promiscuous mode [ 111.299185][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 111.324623][ T6258] loop0: detected capacity change from 0 to 1024 [ 111.339517][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 111.392679][ T6258] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 111.451875][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 112.050108][ T6220] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 112.080469][ T6220] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 112.213030][ T6287] device syzkaller0 entered promiscuous mode [ 112.214682][ T6220] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 112.238939][ T4333] Bluetooth: hci0: command 0x0409 tx timeout [ 112.241735][ T6220] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 112.469050][ T6301] fuse: Unknown parameter 'grou00000000000000000000' [ 112.600768][ T6312] loop0: detected capacity change from 0 to 512 [ 112.923602][ T6312] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 112.925527][ T6312] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.941050][ T6312] EXT4-fs (loop0): mount failed [ 112.969578][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.986027][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.987606][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.038307][ T6220] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.041743][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.043429][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.045013][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.046168][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.050082][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.054323][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.057736][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.064684][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.065762][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.125011][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.126800][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.128632][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.134631][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.142111][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.144959][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.149014][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.151600][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.153242][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.194292][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.195789][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.203944][ T6220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.214070][ T6338] device syzkaller0 entered promiscuous mode [ 113.243570][ T6346] loop4: detected capacity change from 0 to 1024 [ 113.272764][ T6346] hfsplus: found bad thread record in catalog [ 113.295201][ T4778] hfsplus: b-tree write err: -5, ino 4 [ 113.317650][ T6350] capability: warning: `syz.4.528' uses 32-bit capabilities (legacy support in use) [ 113.358313][ T22] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 113.413764][ T6361] fuse: Unknown parameter 'grou00000000000000000000' [ 113.794907][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.794925][ T22] usb 1-1: config 0 has no interfaces? [ 113.797995][ T22] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 113.798008][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.798160][ T22] usb 1-1: Product: syz [ 113.798167][ T22] usb 1-1: Manufacturer: syz [ 113.798174][ T22] usb 1-1: SerialNumber: syz [ 113.799583][ T22] usb 1-1: config 0 descriptor?? [ 113.886466][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.887908][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.899916][ T6220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.040111][ T4310] usb 1-1: USB disconnect, device number 11 [ 114.076064][ T6411] loop5: detected capacity change from 0 to 512 [ 114.080883][ T6411] EXT4-fs: Ignoring removed i_version option [ 114.081901][ T6411] EXT4-fs: Ignoring removed bh option [ 114.105663][ T6411] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 114.133770][ T5201] EXT4-fs (loop5): unmounting filesystem. [ 114.381867][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 114.533741][ T6387] device syzkaller0 entered promiscuous mode [ 114.656046][ T4962] device hsr_slave_0 left promiscuous mode [ 114.699175][ T4962] device hsr_slave_1 left promiscuous mode [ 114.778346][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.779747][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.781634][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.782952][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.784358][ T4962] device bridge_slave_1 left promiscuous mode [ 114.785497][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.828697][ T4962] device bridge_slave_0 left promiscuous mode [ 114.829849][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.849712][ T6445] fuse: Bad value for 'fd' [ 114.890874][ T6447] fuse: Unknown parameter 'group_i00000000000000000000' [ 114.958574][ T4962] device veth1_macvtap left promiscuous mode [ 114.959893][ T4962] device veth0_macvtap left promiscuous mode [ 114.960905][ T4962] device veth1_vlan left promiscuous mode [ 114.961797][ T4962] device veth0_vlan left promiscuous mode [ 115.007551][ T6453] loop0: detected capacity change from 0 to 2048 [ 115.184535][ T6463] loop5: detected capacity change from 0 to 256 [ 115.192992][ T6463] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 116.039716][ T4962] bond2 (unregistering): (slave bond0): Releasing backup interface [ 116.081877][ T4962] bond2 (unregistering): Released all slaves [ 116.096444][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.097907][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.398103][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 116.635273][ T6474] fuse: Bad value for 'fd' [ 116.662240][ T6476] fuse: Unknown parameter 'group_i00000000000000000000' [ 116.930839][ T4962] bond1 (unregistering): Released all slaves [ 117.568980][ T6484] loop5: detected capacity change from 0 to 256 [ 117.574454][ T6484] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 117.636278][ T6485] exFAT-fs (loop5): hint_cluster is invalid (17) [ 118.478102][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 119.210331][ T4962] team0 (unregistering): Port device team_slave_1 removed [ 119.389830][ T4962] team0 (unregistering): Port device team_slave_0 removed [ 119.598910][ T4962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.808868][ T4962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.558110][ T47] Bluetooth: hci0: command 0x0405 tx timeout [ 121.399371][ T4962] bond0 (unregistering): Released all slaves [ 121.870084][ T6440] device syzkaller0 entered promiscuous mode [ 121.873165][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.874847][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.931757][ T6488] binder: BC_ATTEMPT_ACQUIRE not supported [ 121.932666][ T6488] binder: 6487:6488 ioctl c0306201 20000080 returned -22 [ 122.001607][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.003080][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.005085][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.006450][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.007953][ T6220] device veth0_vlan entered promiscuous mode [ 122.011638][ T6220] device veth1_vlan entered promiscuous mode [ 122.833125][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.834806][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.836287][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.837821][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.853859][ T6220] device veth0_macvtap entered promiscuous mode [ 122.885152][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.887151][ T6220] device veth1_macvtap entered promiscuous mode [ 122.912278][ T6509] fuse: Unknown parameter 'group_i00000000000000000000' [ 122.916471][ T6506] fuse: Bad value for 'fd' [ 122.919999][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.921529][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.926766][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.930935][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.932411][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.934097][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.935494][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.937094][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.949832][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.954911][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.956518][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.957926][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.960461][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.962010][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.963573][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.965277][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.966887][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.969652][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.970982][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.972702][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.974255][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.975842][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.995112][ T6220] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.996593][ T6220] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.997876][ T6220] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.004695][ T6220] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.049256][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.050683][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.055820][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.057909][ T1614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.063903][ T1614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.066643][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.122034][ T6525] loop3: detected capacity change from 0 to 128 [ 123.146543][ T6525] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.155594][ T6523] loop4: detected capacity change from 0 to 1024 [ 123.162379][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.164327][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.168787][ T4381] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 123.180179][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.182462][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.183831][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.185066][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.208734][ T6536] device syzkaller0 entered promiscuous mode [ 123.217544][ T6523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 123.229287][ T6523] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.567: inode has both inline data and extents flags [ 123.234795][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 123.337808][ T6549] loop3: detected capacity change from 0 to 1024 [ 123.341973][ T6549] EXT4-fs: Ignoring removed bh option [ 123.343553][ T6549] EXT4-fs: Ignoring removed nobh option [ 123.344757][ T6549] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.349200][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 123.359730][ T4381] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.361327][ T4381] usb 1-1: config 0 has no interfaces? [ 123.363870][ T4381] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 123.365656][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.366836][ T4381] usb 1-1: Product: syz [ 123.367452][ T4381] usb 1-1: Manufacturer: syz [ 123.369145][ T4381] usb 1-1: SerialNumber: syz [ 123.371297][ T4381] usb 1-1: config 0 descriptor?? [ 123.388123][ T6549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.440019][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 123.803734][ T4442] usb 1-1: USB disconnect, device number 12 [ 124.077944][ T6592] fuse: Bad value for 'fd' [ 124.103037][ T6594] fuse: Unknown parameter 'group_id00000000000000000000' [ 124.127275][ T6596] loop3: detected capacity change from 0 to 256 [ 124.133956][ T6529] chnl_net:caif_netlink_parms(): no params data found [ 124.151831][ T6596] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.200747][ T4962] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.236276][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.237788][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.239898][ T6529] device bridge_slave_0 entered promiscuous mode [ 124.242024][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.243167][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.244664][ T6529] device bridge_slave_1 entered promiscuous mode [ 124.300082][ T4962] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.312755][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.316503][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.357506][ T6623] binder: 6622:6623 tried to acquire reference to desc 0, got 1 instead [ 124.366989][ T6529] team0: Port device team_slave_0 added [ 124.383770][ T22] binder: undelivered TRANSACTION_COMPLETE [ 124.401395][ T4442] binder: undelivered transaction 5, process died. [ 124.419266][ T4962] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.422407][ T6529] team0: Port device team_slave_1 added [ 124.436751][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.442486][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.455413][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.463499][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.469297][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.481677][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.530668][ T4962] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.590003][ T6529] device hsr_slave_0 entered promiscuous mode [ 124.618575][ T6529] device hsr_slave_1 entered promiscuous mode [ 124.638452][ T6529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.639693][ T6529] Cannot create hsr debugfs directory [ 124.750549][ T6667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.753908][ T6667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.784117][ T6529] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 124.809543][ T6529] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 124.826697][ T6673] fuse: Bad value for 'fd' [ 124.866199][ T6529] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 124.872173][ T6676] fuse: Unknown parameter 'group_id00000000000000000000' [ 124.890211][ T6529] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 125.199314][ T4333] Bluetooth: hci4: command 0x0409 tx timeout [ 125.352220][ T6687] loop3: detected capacity change from 0 to 1024 [ 125.353724][ T6687] EXT4-fs: Ignoring removed oldalloc option [ 125.354672][ T6687] EXT4-fs: Ignoring removed bh option [ 125.356987][ T6687] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.383168][ T6687] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.428654][ T6695] binder: 6694:6695 tried to acquire reference to desc 0, got 1 instead [ 125.431051][ T6695] binder: 6694:6695 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 125.433134][ T6695] binder: 6695 RLIMIT_NICE not set [ 125.434287][ T6695] binder: 6695 RLIMIT_NICE not set [ 125.435554][ T6695] binder: release 6694:6695 transaction 23 out, still active [ 125.436743][ T6695] binder: release 6694:6695 transaction 16 in, still active [ 125.437912][ T6695] binder: undelivered TRANSACTION_COMPLETE [ 125.439209][ T6695] binder: 6695 RLIMIT_NICE not set [ 125.448408][ T4379] binder: release 6694:6695 transaction 23 in, still active [ 125.449717][ T4379] binder: release 6694:6695 transaction 16 out, still active [ 125.450814][ T4379] binder: send failed reply for transaction 23, target dead [ 125.452010][ T4379] binder: send failed reply for transaction 16, target dead [ 125.620054][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.642991][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.646126][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.719461][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.740340][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.742905][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.744565][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.745697][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.747729][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.843571][ T6717] loop0: detected capacity change from 0 to 128 [ 125.857718][ T6717] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.868746][ T6712] device syzkaller0 entered promiscuous mode [ 125.874406][ T6529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.876168][ T6529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.918944][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.920006][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.924071][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.925750][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.927566][ T264] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.928880][ T264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.938330][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.942723][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.944422][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.956844][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.968793][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.977687][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.979973][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.988653][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.990715][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.998628][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.004825][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.010912][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.130039][ T6717] syz.0.595: attempt to access beyond end of device [ 126.130039][ T6717] loop0: rw=2049, sector=148, nr_sectors = 89 limit=128 [ 126.376876][ T6732] fuse: Bad value for 'fd' [ 126.380543][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 126.437450][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.463408][ T6746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.491628][ T6746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.496243][ T6747] loop4: detected capacity change from 0 to 2048 [ 126.523452][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.524920][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.574428][ T6747] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 126.669928][ T6747] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.600: Invalid inode table block 4 in block_group 0 [ 126.680639][ T6747] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.600: Invalid inode table block 4 in block_group 0 [ 126.684883][ T6747] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 126.688254][ T6747] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #12: comm syz.4.600: mark_inode_dirty error [ 126.714972][ T5164] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm kworker/u4:13: Invalid inode table block 4 in block_group 0 [ 126.722658][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 127.254410][ T6782] device syzkaller0 entered promiscuous mode [ 127.261896][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.263735][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.278312][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 127.397967][ T6799] fuse: Bad value for 'fd' [ 127.592941][ T6529] device veth0_vlan entered promiscuous mode [ 127.607035][ T6818] loop0: detected capacity change from 0 to 512 [ 127.622964][ T6818] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 127.638218][ T6818] EXT4-fs (loop0): 1 truncate cleaned up [ 127.639146][ T6818] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 127.643846][ T6818] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.615: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 127.649441][ T6818] EXT4-fs (loop0): Remounting filesystem read-only [ 127.662769][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 127.724425][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.726092][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.728006][ T6811] netlink: 48 bytes leftover after parsing attributes in process `syz.3.614'. [ 127.733597][ T6529] device veth1_vlan entered promiscuous mode [ 127.787303][ T4962] device hsr_slave_0 left promiscuous mode [ 127.834770][ T4962] device hsr_slave_1 left promiscuous mode [ 127.846238][ T6838] fuse: Bad value for 'fd' [ 127.918278][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.919591][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.922037][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.923221][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.924628][ T4962] device bridge_slave_1 left promiscuous mode [ 127.925684][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.950900][ T4365] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 127.965414][ T6848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.207742][ T4962] device bridge_slave_0 left promiscuous mode [ 128.209497][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.280500][ T6848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.379392][ T4365] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 128.380958][ T4365] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 128.384759][ T4365] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 128.386145][ T4365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.387369][ T4365] usb 1-1: Product: syz [ 128.387969][ T4365] usb 1-1: Manufacturer: syz [ 128.388990][ T4365] usb 1-1: SerialNumber: syz [ 128.390695][ T4365] usb 1-1: config 0 descriptor?? [ 128.391981][ T6824] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.394092][ T4365] option 1-1:0.0: GSM modem (1-port) converter detected [ 128.398445][ T4962] device veth1_macvtap left promiscuous mode [ 128.399441][ T4962] device veth0_macvtap left promiscuous mode [ 128.400355][ T4962] device veth1_vlan left promiscuous mode [ 128.401242][ T4962] device veth0_vlan left promiscuous mode [ 128.607233][ T4365] usb 1-1: USB disconnect, device number 13 [ 128.608772][ T4365] option 1-1:0.0: device disconnected [ 129.160731][ T6869] loop0: detected capacity change from 0 to 512 [ 129.167694][ T6869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.179786][ T4962] bond2 (unregistering): (slave bond0): Releasing backup interface [ 129.187709][ T6869] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.208142][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 129.209326][ T4962] bond2 (unregistering): Released all slaves [ 129.265216][ T6876] fuse: Bad value for 'fd' [ 129.358248][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 129.930635][ T4962] bond1 (unregistering): Released all slaves [ 131.438500][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 131.990526][ T4962] team0 (unregistering): Port device team_slave_1 removed [ 132.153168][ T4962] team0 (unregistering): Port device team_slave_0 removed [ 132.320450][ T4962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.579118][ T4962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.239664][ T4962] bond0 (unregistering): Released all slaves [ 134.572018][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.573558][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.583642][ T6529] device veth0_macvtap entered promiscuous mode [ 134.585979][ T6529] device veth1_macvtap entered promiscuous mode [ 134.631901][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.633653][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.635057][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.636410][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.649220][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.650807][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.652343][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.653861][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.655335][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.656920][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.664004][ T6885] loop0: detected capacity change from 0 to 128 [ 134.691650][ T6885] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.698097][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.699961][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.714970][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.716529][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.746063][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.749345][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.751035][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.752539][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.754207][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.755700][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.757282][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.759047][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.760512][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.762613][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.767852][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.771349][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.780397][ T6896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.781553][ T6529] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.783025][ T6529] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.783093][ T6896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.784180][ T6529] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.786744][ T6529] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.798905][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 135.194184][ T4583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.194927][ T6903] loop0: detected capacity change from 0 to 2048 [ 135.195723][ T4583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.220331][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.236948][ T6903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.259256][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.260635][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.263629][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.307563][ T6912] fuse: Bad value for 'fd' [ 135.417394][ T6925] loop3: detected capacity change from 0 to 736 [ 135.675191][ T6373] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 135.778391][ T6959] device syzkaller0 entered promiscuous mode [ 135.996599][ T6982] fuse: Bad value for 'fd' [ 135.998136][ T6373] usb 1-1: Using ep0 maxpacket: 8 [ 136.000174][ T6373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.005941][ T6373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.007523][ T6373] usb 1-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 136.016444][ T6373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.021359][ T6373] usb 1-1: config 0 descriptor?? [ 136.104728][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.113114][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.127458][ T6991] loop6: detected capacity change from 0 to 256 [ 136.674328][ T6373] wacom 0003:056A:0059.0006: item fetching failed at offset 10/11 [ 136.677923][ T6373] wacom 0003:056A:0059.0006: parse failed [ 136.679071][ T6373] wacom: probe of 0003:056A:0059.0006 failed with error -22 [ 136.747022][ T7020] loop7: detected capacity change from 0 to 128 [ 136.765846][ T7020] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 137.296594][ T6373] usb 1-1: USB disconnect, device number 14 [ 137.312150][ T7038] loop6: detected capacity change from 0 to 256 [ 137.323996][ T7038] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.328287][ T7038] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 137.336590][ T7038] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 137.365218][ T7042] loop4: detected capacity change from 0 to 2048 [ 137.373872][ T7042] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 137.384148][ T7042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.392979][ T7045] loop3: detected capacity change from 0 to 512 [ 137.427737][ T6950] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 137.475961][ T7053] fuse: Bad value for 'fd' [ 137.522741][ T7057] binder: 7056:7057 ioctl c018620c 20000100 returned -22 [ 137.543669][ T7060] device syzkaller0 entered promiscuous mode [ 137.563182][ T7062] fuse: Bad value for 'user_id' [ 137.580063][ T7065] loop4: detected capacity change from 0 to 1024 [ 137.583256][ T7065] EXT4-fs: Ignoring removed oldalloc option [ 137.584153][ T7065] EXT4-fs: Ignoring removed bh option [ 137.611320][ T7065] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.614473][ T6529] EXT4-fs (loop7): unmounting filesystem. [ 137.658735][ T7065] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.153027][ T7083] loop0: detected capacity change from 0 to 1024 [ 138.412451][ T7101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.445991][ T7101] EXT4-fs error (device loop6): __ext4_fill_super:5423: inode #2: comm syz.6.676: inode has both inline data and extents flags [ 138.471696][ T7101] EXT4-fs (loop6): get root inode failed [ 138.474856][ T7101] EXT4-fs (loop6): mount failed [ 138.529159][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 138.575163][ T7118] netlink: 'syz.6.682': attribute type 11 has an invalid length. [ 138.606616][ T27] audit: type=1326 audit(138.588:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.6.682" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b75928 code=0x0 [ 138.645035][ T7123] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 138.672510][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.674002][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.774170][ T7129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.802127][ T7129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.229833][ T4962] hfsplus: b-tree write err: -5, ino 4 [ 139.465456][ T7165] device syzkaller0 entered promiscuous mode [ 139.911968][ T7170] set_capacity_and_notify: 4 callbacks suppressed [ 139.911979][ T7170] loop4: detected capacity change from 0 to 512 [ 139.947211][ T7170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 140.043213][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 140.115306][ T7187] loop4: detected capacity change from 0 to 1024 [ 140.121165][ T7187] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.124167][ T7187] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.138688][ T7187] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 140.140176][ T7187] System zones: 0-1, 3-36 [ 140.141611][ T7187] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 140.243659][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 140.427908][ T7205] loop4: detected capacity change from 0 to 1024 [ 140.715349][ T4406] hfsplus: b-tree write err: -5, ino 4 [ 140.817151][ T7214] loop4: detected capacity change from 0 to 128 [ 140.834094][ T7214] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.210622][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 141.258774][ T7226] loop4: detected capacity change from 0 to 512 [ 141.280786][ T7226] EXT4-fs error (device loop4): __ext4_fill_super:5423: inode #2: comm syz.4.703: inode has both inline data and extents flags [ 141.283306][ T7226] EXT4-fs (loop4): get root inode failed [ 141.284471][ T7226] EXT4-fs (loop4): mount failed [ 141.386521][ T7236] loop4: detected capacity change from 0 to 8192 [ 141.444803][ T7241] device syzkaller0 entered promiscuous mode [ 142.227956][ T7273] loop6: detected capacity change from 0 to 4096 [ 142.251564][ T7273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.257350][ T7273] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 142.258767][ T7273] System zones: 0-5 [ 142.260373][ T7273] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 142.274418][ T6220] EXT4-fs (loop6): unmounting filesystem. [ 142.505643][ T7314] device syzkaller0 entered promiscuous mode [ 142.539140][ T7318] netlink: 88 bytes leftover after parsing attributes in process `syz.0.720'. [ 142.796322][ T7346] loop6: detected capacity change from 0 to 4096 [ 142.834846][ T7346] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 142.922675][ T6220] EXT4-fs (loop6): unmounting filesystem. [ 143.270091][ T7375] loop6: detected capacity change from 0 to 4096 [ 143.317754][ T7375] EXT4-fs (loop6): Test dummy encryption mode enabled [ 143.489095][ T7375] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 143.646728][ T7387] netlink: 88 bytes leftover after parsing attributes in process `syz.3.733'. [ 143.746484][ T7393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.774397][ T7393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.854102][ T6220] EXT4-fs (loop6): unmounting filesystem. [ 143.995368][ T7402] device syzkaller0 entered promiscuous mode [ 144.298615][ T7419] loop3: detected capacity change from 0 to 4096 [ 144.300211][ T7419] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.310779][ T7419] EXT4-fs (loop3): Test dummy encryption mode enabled [ 144.341948][ T7419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 144.516289][ T7441] netlink: 88 bytes leftover after parsing attributes in process `syz.6.745'. [ 144.556450][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 144.772318][ T7458] device syzkaller0 entered promiscuous mode [ 144.986542][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.758'. [ 145.126569][ T7499] binder: 7497:7499 ioctl c0306201 200003c0 returned -14 [ 145.215940][ T7509] xt_hashlimit: max too large, truncated to 1048576 [ 145.325597][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.771'. [ 145.335795][ T7519] set_capacity_and_notify: 1 callbacks suppressed [ 145.335805][ T7519] loop0: detected capacity change from 0 to 4096 [ 145.342730][ T7521] loop4: detected capacity change from 0 to 128 [ 145.345539][ T7521] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 145.362213][ T7521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.374727][ T7519] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.390828][ T7526] device syzkaller0 entered promiscuous mode [ 145.430024][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 145.531680][ T7539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.533061][ T7539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.976869][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.784'. [ 145.984004][ T7556] loop4: detected capacity change from 0 to 1024 [ 146.035359][ T5185] hfsplus: b-tree write err: -5, ino 4 [ 146.242040][ T7570] xt_socket: unknown flags 0x4c [ 146.529295][ T7577] loop0: detected capacity change from 0 to 128 [ 146.586564][ T4406] kworker/u4:6: attempt to access beyond end of device [ 146.586564][ T4406] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 146.591734][ T7581] loop4: detected capacity change from 0 to 128 [ 146.600586][ T7581] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.611198][ T7581] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.684478][ T7587] loop7: detected capacity change from 0 to 16 [ 146.695948][ T7587] erofs: (device loop7): mounted with root inode @ nid 36. [ 146.706842][ T7587] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 146.712883][ T7587] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 146.715466][ T7587] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 146.889288][ T7608] loop7: detected capacity change from 0 to 256 [ 146.895977][ T7608] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.905485][ T7608] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 146.949933][ T7608] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 146.955256][ T7613] loop3: detected capacity change from 0 to 128 [ 146.959439][ T7613] EXT4-fs (loop3): Test dummy encryption mode enabled [ 146.965227][ T7613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 146.983708][ T7613] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.801: bg 0: bad block bitmap checksum [ 147.062316][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 147.130391][ T7622] binder: 7621:7622 tried to acquire reference to desc 0, got 1 instead [ 147.132086][ T7622] binder: 7621:7622 got transaction with invalid handle, 3 [ 147.133248][ T7622] binder: 7622:7621 translate handle failed [ 147.134240][ T7622] binder: 7621:7622 transaction call to 7621:0 failed 29/29201/-22, size 72-24 line 3393 [ 147.150516][ T6373] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.224322][ T7635] loop3: detected capacity change from 0 to 16 [ 147.233891][ T7635] erofs: (device loop3): mounted with root inode @ nid 36. [ 147.284424][ T7638] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 147.355515][ T7649] loop4: detected capacity change from 0 to 512 [ 147.369891][ T7649] ext4: Unknown parameter 'nouser_xattr' [ 147.415713][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.432908][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.079628][ T7670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.813'. [ 148.318930][ T7682] fuse: Bad value for 'fd' [ 148.967501][ T7700] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 148.969717][ T7700] FAT-fs (loop6): Filesystem has been set read-only [ 148.985969][ T7700] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 149.039896][ T7706] netlink: 24 bytes leftover after parsing attributes in process `syz.7.823'. [ 149.087452][ T7712] EXT4-fs: Ignoring removed i_version option [ 149.093779][ T7712] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 149.099547][ T7712] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 149.103890][ T7712] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 149.106156][ T7712] EXT4-fs (loop7): 1 truncate cleaned up [ 149.107148][ T7712] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 149.192455][ T6529] EXT4-fs (loop7): unmounting filesystem. [ 149.270305][ T7727] fuse: Bad value for 'fd' [ 149.471049][ T7748] netlink: 24 bytes leftover after parsing attributes in process `syz.7.836'. [ 149.592040][ T7755] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.600209][ T7755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 149.601569][ T7755] System zones: 1-12 [ 149.605974][ T7755] EXT4-fs (loop0): 1 truncate cleaned up [ 149.606781][ T7755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 149.638735][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 150.057464][ T7778] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 150.057464][ T7778] The task syz.6.843 (7778) triggered the difference, watch for misbehavior. [ 150.341129][ T7782] fuse: Bad value for 'fd' [ 150.431151][ T7791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.847'. [ 150.640793][ T7815] set_capacity_and_notify: 5 callbacks suppressed [ 150.640803][ T7815] loop0: detected capacity change from 0 to 512 [ 150.653750][ T7815] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.855: inode has both inline data and extents flags [ 150.656313][ T7815] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.855: couldn't read orphan inode 15 (err -117) [ 150.659069][ T7815] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 150.704857][ T7821] loop4: detected capacity change from 0 to 2048 [ 150.712452][ T7821] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.716041][ T7820] fuse: Bad value for 'fd' [ 150.809884][ T7825] netlink: 24 bytes leftover after parsing attributes in process `syz.7.858'. [ 150.822701][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 150.922217][ T7821] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 73728 lbcount: 77824 extent 129+41984 [ 151.958648][ T7859] fuse: Bad value for 'fd' [ 151.978199][ T4365] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 152.033488][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.7.871'. [ 152.181414][ T4365] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.183107][ T4365] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 152.184433][ T4365] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 152.185781][ T4365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.188538][ T4365] usb 1-1: config 0 descriptor?? [ 152.393507][ T7886] loop4: detected capacity change from 0 to 128 [ 152.395756][ T7886] FAT-fs (loop4): Directory bread(block 162) failed [ 152.396805][ T7886] FAT-fs (loop4): Directory bread(block 163) failed [ 152.398257][ T7886] FAT-fs (loop4): Directory bread(block 164) failed [ 152.399335][ T7886] FAT-fs (loop4): Directory bread(block 165) failed [ 152.400631][ T7886] FAT-fs (loop4): Directory bread(block 166) failed [ 152.404841][ T7886] FAT-fs (loop4): Directory bread(block 167) failed [ 152.406101][ T7886] FAT-fs (loop4): Directory bread(block 168) failed [ 152.407105][ T7886] FAT-fs (loop4): Directory bread(block 169) failed [ 152.410978][ T7886] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.415175][ T7886] FAT-fs (loop4): Directory bread(block 162) failed [ 152.416219][ T7886] FAT-fs (loop4): Directory bread(block 163) failed [ 152.417851][ T7886] syz.4.879: attempt to access beyond end of device [ 152.417851][ T7886] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 152.421621][ T7886] syz.4.879: attempt to access beyond end of device [ 152.421621][ T7886] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 152.453061][ T7888] loop4: detected capacity change from 0 to 1024 [ 152.480136][ T5164] hfsplus: b-tree write err: -5, ino 4 [ 152.798301][ T4365] usb 1-1: Direct firmware load for ar3k/ramps_0xa987ce49_0.dfu failed with error -2 [ 152.800008][ T4365] usb 1-1: Falling back to sysfs fallback for: ar3k/ramps_0xa987ce49_0.dfu [ 153.114419][ T7907] netlink: 24 bytes leftover after parsing attributes in process `syz.6.884'. [ 153.409691][ T7918] loop4: detected capacity change from 0 to 8192 [ 153.448655][ T7918] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 153.450564][ T7918] FAT-fs (loop4): Filesystem has been set read-only [ 153.505550][ T7925] netlink: 300 bytes leftover after parsing attributes in process `syz.7.892'. [ 153.507210][ T7925] netlink: 717 bytes leftover after parsing attributes in process `syz.7.892'. [ 153.509320][ T7925] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 153.553391][ T7929] tipc: Enabled bearer , priority 0 [ 153.555460][ T7929] device syzkaller0 entered promiscuous mode [ 153.600987][ T7929] tipc: Resetting bearer [ 153.605067][ T7928] tipc: Resetting bearer [ 153.620945][ T7937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.622437][ T7937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.661646][ T7928] tipc: Disabling bearer [ 153.667790][ T7939] device syzkaller0 entered promiscuous mode [ 153.729903][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'. [ 153.821306][ T7948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.823275][ T7948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.180514][ T7986] loop6: detected capacity change from 0 to 128 [ 154.186566][ T7986] EXT4-fs: Ignoring removed nobh option [ 154.196499][ T7986] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 154.214056][ T7830] udevd[7830]: incorrect ext4 checksum on /dev/loop6 [ 154.216231][ T7986] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.902: No space for directory leaf checksum. Please run e2fsck -D. [ 154.218934][ T7986] EXT4-fs error (device loop6): __ext4_find_entry:1696: inode #2: comm syz.6.902: checksumming directory block 0 [ 154.232379][ T6220] EXT4-fs (loop6): unmounting filesystem. [ 154.266319][ T7994] loop6: detected capacity change from 0 to 256 [ 154.272971][ T7994] exfat: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 154.389587][ T8006] loop4: detected capacity change from 0 to 2048 [ 154.403560][ T8008] loop6: detected capacity change from 0 to 512 [ 154.404972][ T8008] ext4: Unknown parameter 'nouser_xattr' [ 154.409143][ T8006] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.539946][ T8027] tipc: Enabled bearer , priority 0 [ 154.541361][ T8027] device syzkaller0 entered promiscuous mode [ 154.590334][ T8027] tipc: Resetting bearer [ 154.597702][ T8026] tipc: Resetting bearer [ 154.648760][ T8026] tipc: Disabling bearer [ 154.693748][ T8044] device syzkaller0 entered promiscuous mode [ 154.816459][ T8056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.820377][ T8056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.874711][ T8062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.879300][ T8062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.525677][ T8119] device syzkaller0 entered promiscuous mode [ 155.535809][ T8118] device syzkaller0 entered promiscuous mode [ 155.537802][ T8121] tipc: Started in network mode [ 155.541273][ T8121] tipc: Node identity 521abad99788, cluster identity 4711 [ 155.542485][ T8121] tipc: Enabled bearer , priority 0 [ 155.544176][ T8121] device syzkaller0 entered promiscuous mode [ 155.693373][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.694799][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.396928][ T8141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.399961][ T8141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.718092][ T4333] Bluetooth: hci1: command 0x0406 tx timeout [ 158.718108][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 158.718951][ T4333] Bluetooth: hci3: command 0x0406 tx timeout [ 162.871514][ T8182] loop0: detected capacity change from 0 to 512 [ 162.879357][ T8182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 162.880733][ T8182] System zones: 1-12 [ 162.884630][ T8182] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.935: error while reading EA inode 32 err=-116 [ 162.887701][ T8182] EXT4-fs (loop0): Remounting filesystem read-only [ 162.892216][ T8182] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.935: error while reading EA inode 32 err=-116 [ 162.894333][ T8182] EXT4-fs (loop0): Remounting filesystem read-only [ 162.895440][ T8182] EXT4-fs (loop0): 1 orphan inode deleted [ 162.896283][ T8182] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 162.916941][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 163.019609][ T8189] loop0: detected capacity change from 0 to 1024 [ 163.039780][ T8189] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 163.043467][ T8189] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.937: inode has both inline data and extents flags [ 163.046027][ T8189] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.937: inode has both inline data and extents flags [ 163.063771][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 166.897207][ T8134] tipc: Resetting bearer [ 166.906475][ T8120] tipc: Resetting bearer [ 166.969191][ T8120] tipc: Disabling bearer [ 166.970559][ T8205] fuse: Bad value for 'fd' [ 166.976076][ T1965] tipc: Node number set to 3314727641 [ 166.982582][ T4333] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.016300][ T4333] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.019118][ T4333] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.028977][ T4333] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.030474][ T4333] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 167.033975][ T4333] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.090586][ T8216] loop4: detected capacity change from 0 to 512 [ 167.156433][ T8227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.157803][ T8227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.165758][ T8216] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 167.169789][ T8216] fscrypt (loop4, inode 15): Error -61 getting encryption context [ 167.178330][ T8217] loop0: detected capacity change from 0 to 8192 [ 167.202749][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 167.228327][ T7830] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.308177][ T8242] fuse: Bad value for 'fd' [ 167.437884][ T8206] chnl_net:caif_netlink_parms(): no params data found [ 168.034222][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.035879][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.394049][ T8264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.408919][ T8264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.718908][ T8264] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.720344][ T8264] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.721763][ T8264] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.723056][ T8264] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.843895][ T8287] tipc: Enabling of bearer rejected, failed to enable media [ 168.877610][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.890267][ T8316] fuse: Bad value for 'fd' [ 168.908167][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.909704][ T8206] device bridge_slave_0 entered promiscuous mode [ 168.934862][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.936134][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.959996][ T8206] device bridge_slave_1 entered promiscuous mode [ 169.023971][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.026516][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.118137][ T4333] Bluetooth: hci5: command 0x0409 tx timeout [ 169.130658][ T8206] team0: Port device team_slave_0 added [ 169.212573][ T8206] team0: Port device team_slave_1 added [ 169.233000][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.234154][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.261542][ T8206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.273488][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.274539][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.289877][ T8350] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 169.291280][ T8206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.347380][ T4380] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 169.350044][ T4380] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.368560][ T8206] device hsr_slave_0 entered promiscuous mode [ 169.392513][ T8206] device hsr_slave_1 entered promiscuous mode [ 169.395446][ T8364] fuse: Bad value for 'fd' [ 169.434571][ T8367] loop0: detected capacity change from 0 to 1024 [ 169.438158][ T8206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.439482][ T8206] Cannot create hsr debugfs directory [ 169.451329][ T8366] tipc: Started in network mode [ 169.452130][ T8366] tipc: Node identity 86d60d990307, cluster identity 4711 [ 169.453265][ T8366] tipc: Enabled bearer , priority 0 [ 169.476926][ T8366] device syzkaller0 entered promiscuous mode [ 169.544607][ T8366] tipc: Resetting bearer [ 169.551184][ T8365] tipc: Resetting bearer [ 169.619765][ T8365] tipc: Disabling bearer [ 169.643141][ T8384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.649505][ T8384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.695893][ T8206] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 169.729337][ T8206] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 169.746205][ T8206] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 169.789532][ T8206] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 169.863380][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.865181][ T8206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.866670][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.867750][ T8206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.872685][ T8417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.875540][ T8417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.911258][ T8206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.916992][ T4582] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.922433][ T4582] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.925152][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 169.937481][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.939271][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.943998][ T8206] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.948523][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.952572][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.954372][ T4582] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.955443][ T4582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.957066][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.959685][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.961184][ T4582] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.962383][ T4582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.965190][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.973537][ T8206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.975128][ T8206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.981149][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.982741][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.985481][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.987113][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.989742][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.991163][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.992712][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.994286][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.995772][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.997240][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.998841][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.051499][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.052938][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.056551][ T8206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.153744][ T8432] loop4: detected capacity change from 0 to 2048 [ 170.166396][ T8206] device veth0_vlan entered promiscuous mode [ 170.168542][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.170311][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.171816][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.173252][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.185627][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.195600][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.204268][ T8206] device veth1_vlan entered promiscuous mode [ 170.213885][ T8432] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.250986][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.252393][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.311052][ T8438] fuse: Invalid rootmode [ 170.340752][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.342399][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.343737][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.345126][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.359186][ T8206] device veth0_macvtap entered promiscuous mode [ 170.361619][ T8206] device veth1_macvtap entered promiscuous mode [ 170.366543][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.380374][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.381937][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.383437][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.384847][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.386429][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.395617][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.397182][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.402595][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.413697][ T8432] netlink: 'syz.4.977': attribute type 12 has an invalid length. [ 170.415436][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.417059][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.424633][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.426243][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.434275][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.435907][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.437371][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.451660][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.453193][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.454630][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.455985][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.457436][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.464327][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.465585][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.467104][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.476861][ T8206] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.485149][ T8206] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.486581][ T8206] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.487874][ T8206] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.517699][ T8447] tipc: Enabled bearer , priority 0 [ 170.526082][ T8447] device syzkaller0 entered promiscuous mode [ 170.615935][ T5164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.617362][ T5164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.625331][ T8446] tipc: Resetting bearer [ 170.709501][ T8446] tipc: Disabling bearer [ 170.711801][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.719689][ T5185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.720996][ T5185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.724050][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.823242][ T8458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.829070][ T8458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.048532][ T8466] loop0: detected capacity change from 0 to 512 [ 171.083904][ T7830] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.191816][ T8472] fuse: Invalid rootmode [ 171.198947][ T4327] Bluetooth: hci5: command 0x041b tx timeout [ 171.233356][ T8474] loop4: detected capacity change from 0 to 128 [ 171.246870][ T8474] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 171.252261][ T8474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.343556][ T8478] tipc: Enabled bearer , priority 0 [ 171.345415][ T8478] device syzkaller0 entered promiscuous mode [ 171.557172][ T8482] device wlan0 entered promiscuous mode [ 171.622496][ T8498] loop6: detected capacity change from 0 to 1024 [ 171.628854][ T8500] fuse: Invalid rootmode [ 171.642124][ T8477] tipc: Resetting bearer [ 171.716231][ T8508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.717735][ T8508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.729689][ T8477] tipc: Disabling bearer [ 172.263772][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.271543][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.841522][ T8544] loop6: detected capacity change from 0 to 8 [ 172.848479][ T8547] fuse: Bad value for 'rootmode' [ 172.858857][ T8544] SQUASHFS error: lzo decompression failed, data probably corrupt [ 172.860632][ T8544] SQUASHFS error: Failed to read block 0x91: -5 [ 172.861582][ T8544] SQUASHFS error: Unable to read metadata cache entry [8f] [ 172.862693][ T8544] SQUASHFS error: Unable to read inode 0x11f [ 173.288176][ T4333] Bluetooth: hci5: command 0x040f tx timeout [ 175.358100][ T4333] Bluetooth: hci5: command 0x0419 tx timeout [ 182.765982][ T8553] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1015'. [ 182.771324][ T8559] tipc: Enabling of bearer rejected, failed to enable media [ 182.939007][ T8592] fuse: Bad value for 'fd' [ 182.970643][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.972334][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.063002][ T8601] fuse: Bad value for 'rootmode' [ 183.543210][ T8607] loop6: detected capacity change from 0 to 16 [ 183.555574][ T8607] erofs: (device loop6): mounted with root inode @ nid 36. [ 183.563733][ T8607] syz.6.1026: attempt to access beyond end of device [ 183.563733][ T8607] loop6: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 183.565884][ T8607] syz.6.1026: attempt to access beyond end of device [ 183.565884][ T8607] loop6: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 183.571873][ T8607] ================================================================== [ 183.573157][ T8607] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a4/0x490 [ 183.574350][ T8607] Read of size 4096 at addr ffff0000fdc69000 by task syz.6.1026/8607 [ 183.575490][ T8607] [ 183.575843][ T8607] CPU: 1 PID: 8607 Comm: syz.6.1026 Not tainted syzkaller #0 [ 183.576994][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 183.578436][ T8607] Call trace: [ 183.578901][ T8607] dump_backtrace+0x1c0/0x1ec [ 183.579609][ T8607] show_stack+0x2c/0x3c [ 183.580253][ T8607] __dump_stack+0x30/0x40 [ 183.580933][ T8607] dump_stack_lvl+0xf4/0x15c [ 183.581652][ T8607] print_address_description+0x88/0x218 [ 183.582492][ T8607] print_report+0x50/0x68 [ 183.583156][ T8607] kasan_report+0xa8/0xfc [ 183.583843][ T8607] kasan_check_range+0x258/0x290 [ 183.584574][ T8607] memcpy+0x48/0x90 [ 183.585148][ T8607] z_erofs_transform_plain+0x3a4/0x490 [ 183.586011][ T8607] z_erofs_decompress+0x9c/0xd4 [ 183.586712][ T8607] z_erofs_decompress_queue+0x100c/0x1b40 [ 183.587521][ T8607] z_erofs_runqueue+0x1510/0x1694 [ 183.588188][ T8607] z_erofs_read_folio+0x2d8/0x5c8 [ 183.588949][ T8607] filemap_read_folio+0x134/0x384 [ 183.589667][ T8607] filemap_fault+0x98c/0xe98 [ 183.590359][ T8607] __do_fault+0x11c/0x3d8 [ 183.591033][ T8607] handle_mm_fault+0x1cac/0x2fb0 [ 183.591818][ T8607] do_page_fault+0x310/0x98c [ 183.592567][ T8607] do_translation_fault+0x94/0xc8 [ 183.593326][ T8607] do_mem_abort+0x70/0x194 [ 183.593998][ T8607] el1_abort+0x3c/0x5c [ 183.594639][ T8607] el1h_64_sync_handler+0x50/0xac [ 183.595372][ T8607] el1h_64_sync+0x64/0x68 [ 183.595999][ T8607] __arch_copy_from_user+0x100/0x230 [ 183.596703][ T8607] __sys_bind+0x158/0x2a4 [ 183.597386][ T8607] __arm64_sys_bind+0x7c/0x94 [ 183.598125][ T8607] invoke_syscall+0x98/0x2b4 [ 183.598841][ T8607] el0_svc_common+0x138/0x258 [ 183.599596][ T8607] do_el0_svc+0x58/0x130 [ 183.600329][ T8607] el0_svc+0x58/0x128 [ 183.600915][ T8607] el0t_64_sync_handler+0x84/0xf0 [ 183.601685][ T8607] el0t_64_sync+0x18c/0x190 [ 183.602301][ T8607] [ 183.602636][ T8607] The buggy address belongs to the physical page: [ 183.603551][ T8607] page:00000000a4ce2281 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13dc69 [ 183.605022][ T8607] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 183.606091][ T8607] raw: 05ffc00000000000 fffffc0003d52888 ffff00019f58fe50 0000000000000000 [ 183.607360][ T8607] raw: 0000000000000000 fffffc0003f71a00 00000000ffffffff 0000000000000000 [ 183.608581][ T8607] page dumped because: kasan: bad access detected [ 183.609497][ T8607] [ 183.609849][ T8607] Memory state around the buggy address: [ 183.610621][ T8607] ffff0000fdc68f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 183.611868][ T8607] ffff0000fdc68f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 183.612997][ T8607] >ffff0000fdc69000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 183.614163][ T8607] ^ [ 183.614770][ T8607] ffff0000fdc69080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 183.615862][ T8607] ffff0000fdc69100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 183.616980][ T8607] ================================================================== [ 183.622282][ T8607] Disabling lock debugging due to kernel taint [ 187.358489][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.359525][ T2062] ieee802154 phy1 wpan1: encryption failed: -22