last executing test programs: 21m13.539044611s ago: executing program 32 (id=81): memfd_create(0x0, 0x7) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)='\x00', 0x0}, 0x50) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@overlay={0x8, 0x3, 0x4, 0x100000, 0x5, {0x77359400}, {0x4, 0x1, 0x2b, 0x80, 0x7, 0x9, "9544ac23"}, 0x1, 0x3, {}, 0x236b}) 20m38.836266817s ago: executing program 33 (id=118): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) mkdir(0x0, 0x8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket(0x25, 0x800, 0xf) syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r0], 0x7) 14m52.861845707s ago: executing program 2 (id=720): socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 14m50.070676341s ago: executing program 2 (id=730): ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0xf248, 0x1, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) getrlimit(0x7, &(0x7f0000000040)) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x1f83, 0x5}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) 14m47.418611341s ago: executing program 2 (id=735): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 14m45.778782802s ago: executing program 2 (id=741): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x30, 0x0, &(0x7f0000000040)) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000001900)='./file2\x00', 0x14090, &(0x7f0000001800)=ANY=[], 0xfd, 0x1512, &(0x7f0000005080)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@enum64={0x7, 0x0, 0x0, 0x13, 0x1, 0x2}]}, {0x0, [0x61, 0x5f, 0x61, 0x5f, 0x0, 0x61, 0x2e, 0x61, 0x60]}}, 0x0, 0x2f, 0x0, 0x1, 0xac22}, 0x28) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x62) mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x2c4b032, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x2) open(&(0x7f0000000100)='./file1\x00', 0x6000, 0x0) 14m43.070926301s ago: executing program 2 (id=749): ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0xf248, 0x1, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 14m38.317560093s ago: executing program 2 (id=754): ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 14m20.301577916s ago: executing program 34 (id=754): ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 13m15.077298461s ago: executing program 0 (id=873): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x3af2, 0x5000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket(0x1, 0x5, 0x0) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r5, 0x1) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000500)={0x6000000d}) 13m10.053180389s ago: executing program 0 (id=879): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000000100)) 13m9.356816863s ago: executing program 0 (id=881): syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x4fbe, 0xc00, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) unshare(0x24060400) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x32100, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f0000000240)={0x2, 0x0, [{0x80000000, 0x1, 0x2, 0x0, 0x0, 0x1, 0x10001}, {0xd, 0x8, 0x2, 0x1, 0xc7, 0x7f, 0x2}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m8.2346994s ago: executing program 0 (id=885): r0 = socket(0xa, 0x4, 0x3a) io_uring_setup(0x40002237, &(0x7f0000000880)={0x0, 0xfffffffd, 0x3018, 0x4, 0x35f}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000040)=0x1, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r3 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r4, 0x200000000000f, 0x1) 13m3.714553614s ago: executing program 0 (id=889): ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000001cc0)={0x9}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x6, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0xfffffffb, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffc0003, 0x5, 0x4, 0x8, 0x101, 0x90, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffe, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xff7f], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x1, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0xf0c1, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x800014c, 0x3, 0x6, 0x10006, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x100001, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x1ff, 0x7fffffff, 0x12]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 12m53.115087405s ago: executing program 0 (id=893): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket(0x27, 0x80000, 0xf) setsockopt$inet_tcp_int(r2, 0x6, 0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x1a, &(0x7f0000000140), 0x4) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r3 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x100) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)='=', 0x1}], 0x1, 0x2000, 0x0, 0x3) sendfile(r3, r3, 0x0, 0x1000200201005) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000740)="bb", 0x1}], 0x1}, 0x40840) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}}, 0x20040840) syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201180141baa5108c10680163a50102030109022400016905c0040904530c02fec600650905090800000799050905891010000940cee1cfc276d4f458aca509404ff9515fc052ae9075f3dced3fe0edd8e7807ce8fc01078a568593e25c81967a2995ede59a4aaba165bdaf07810267129aac90935f33348c06ccc58a92159df6b369cfd15c95ef64c04fae0d5b811e81b84195a8b34202c4ec341397f48ae3a07ec45b78b11ca988361ac56a5783422f6ab6b2e5b82c5b75da23a1b2e7178dca49bdcb9e73c94124d79387050000003e805b39c9"], 0x0) 12m37.232159382s ago: executing program 35 (id=893): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket(0x27, 0x80000, 0xf) setsockopt$inet_tcp_int(r2, 0x6, 0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x1a, &(0x7f0000000140), 0x4) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r3 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x100) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)='=', 0x1}], 0x1, 0x2000, 0x0, 0x3) sendfile(r3, r3, 0x0, 0x1000200201005) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000740)="bb", 0x1}], 0x1}, 0x40840) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}}, 0x20040840) syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201180141baa5108c10680163a50102030109022400016905c0040904530c02fec600650905090800000799050905891010000940cee1cfc276d4f458aca509404ff9515fc052ae9075f3dced3fe0edd8e7807ce8fc01078a568593e25c81967a2995ede59a4aaba165bdaf07810267129aac90935f33348c06ccc58a92159df6b369cfd15c95ef64c04fae0d5b811e81b84195a8b34202c4ec341397f48ae3a07ec45b78b11ca988361ac56a5783422f6ab6b2e5b82c5b75da23a1b2e7178dca49bdcb9e73c94124d79387050000003e805b39c9"], 0x0) 11m17.587812108s ago: executing program 3 (id=989): syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x4fbe, 0xc00, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x32100, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f0000000240)={0x2, 0x0, [{0x80000000, 0x1, 0x2, 0x0, 0x0, 0x1, 0x10001}, {0xd, 0x8, 0x2, 0x1, 0xc7, 0x7f, 0x2}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m16.094580366s ago: executing program 3 (id=992): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r5}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000001400)={&(0x7f0000001380)=[{0x1, 0x8000, 0x0, 0x0}], 0x1}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r9) sendmsg$NFC_CMD_DEP_LINK_UP(r9, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000ffdbdf2504000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r12, 0x300, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x4, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 11m11.948007066s ago: executing program 3 (id=997): r0 = socket(0xa, 0x4, 0x3a) io_uring_setup(0x40002237, &(0x7f0000000880)={0x0, 0xfffffffd, 0x3018, 0x4, 0x35f}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000040)=0x1, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r3 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)='-', 0x1}, 0x68) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r4, 0x200000000000f, 0x1) 11m9.051115223s ago: executing program 3 (id=1001): ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) 11m5.100011022s ago: executing program 3 (id=1003): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x208400, &(0x7f0000005740)={[{}, {@uid}, {@codepage={'codepage', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}]}, 0x23, 0x318, &(0x7f0000000480)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0], 0x0, 0xb1, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001980)=0x0, &(0x7f00000019c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a80)={'ip6tnl0\x00', &(0x7f0000001a00)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x6, 0x5, 0x8, @remote, @mcast1, 0x8, 0x700, 0x3ff, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002400)={'ip_vti0\x00', &(0x7f0000002340)={'sit0\x00', 0x0, 0x1, 0x700, 0xc, 0x7fff, {{0x1b, 0x4, 0x2, 0x6, 0x6c, 0x66, 0x0, 0xff, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@timestamp={0x44, 0x1c, 0xf3, 0x0, 0x9, [0x1, 0x1, 0x0, 0x7, 0x7, 0x6]}, @lsrr={0x83, 0x17, 0x43, [@empty, @empty, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @noop, @timestamp={0x44, 0x20, 0x52, 0x0, 0x0, [0x4, 0x6, 0x1, 0xffff, 0xffff8001, 0x1, 0x7]}]}}}}}) sendmmsg$inet6(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="ed7dde014ca330942d2a4acaae9d1bcfd82efb08f9d5735cf790c722a98c0a1c043f941a589e308d3fa079d9a82d8d778b2f95fd14fefd211f47387f917a9ae662422b94d752b2336499b665301f1f32f46358201eaabcbc7a43e73a5432c2628e03cd44db0ecd3a45288aa3afaf6ad70860ff1868f5ad8a957ef50db37f6092d4299465fb7cc5369edc04291c17a8ea765c5d9030e10d1b15", 0x99}, {&(0x7f0000000400)="c25233655c9f8731cdb12ec1589af0120cd96dad8f821d6bb94a34226ebf50b225742e43698d", 0x26}], 0x2}}, {{&(0x7f00000007c0)={0xa, 0x4e22, 0x2, @loopback, 0x8}, 0x1c, &(0x7f0000000800)=[{0xfffffffffffffffd}], 0x1, &(0x7f0000000a00)=[@dstopts_2292={{0x38, 0x29, 0x4, {0x3a, 0x4, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @jumbo={0xc2, 0x4, 0x5}]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x5c, 0x4, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x6, 0x1, [0x7, 0x5]}}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0xff, 0xa, 0x1, 0x9, 0x0, [@private1, @loopback, @mcast2, @private1, @dev={0xfe, 0x80, '\x00', 0x1a}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffc}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x1d, 0x12, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @generic={0x7, 0x2f, "43ed9cc0cf46fd095cfa7cf0bdd5ba1f433128020cebcf8ce74ea9d55196a3b0d0b02f9ede7a66923009a3cf365198"}, @jumbo={0xc2, 0x4, 0x357}, @calipso={0x7, 0x50, {0x2, 0x12, 0x8, 0x7, [0x7, 0x387d, 0x3, 0x6, 0x7, 0x2, 0x8000, 0x690000000000, 0x324cb55a]}}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x31}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8001}}], 0x1c0}}, {{&(0x7f0000000bc0)={0xa, 0x4e20, 0x2, @loopback, 0x2000}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="539e883d4d76bdfb323171e57e81c7a43f1773189279dc2c", 0x18}, {&(0x7f0000000c40)="3502cf10b709d50706a082b0307d30ff153cee7ed69f7b2c82281aeef981267adf92fe861ef02470c158320ac89afbb88543bd00cf36c78cc3b1e1efcf3c550bf2b787dca0ba66a654e3baed1a8c3b7d63e378d207266039100b1574ebac82d1a2dbb4195c04737d3fd26694a1d1f0f8681d6ff40178934cce630da44a4fe26bcda08cb9c997627b5c276ea36547436f0efc10c7e5a785f690d15e45c7305f02b097db9579", 0xa5}, {&(0x7f0000000d00)="a15949ba10188c073efa2e3aa9154c167938fd360d3497b4a50d50e8b3fda17d11be0c0dfd2933084f8cb53b4e2850d4796e808da3bc7be554b72bbaf578", 0x3e}, {&(0x7f0000000d40)="c7ed12e5f4b6e0fb448328655bbc2c038dba93a6c4dbe07714a11a058ba908999f1ff4a94047bb064438ea0ce2b0f560f010f4035c5f822450d3e9117cac7ab8290c457e68d29b1294881401f256fa55761ffcfdf7264286427c4fcc103af658", 0x60}], 0x4, &(0x7f0000001180)=[@dstopts_2292={{0x88, 0x29, 0x4, {0x1d, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x80}, @calipso={0x7, 0x38, {0x2, 0xc, 0xf0, 0x6b6, [0x5, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x40, 0x81]}}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x5}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x2, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}]}}}, @dstopts={{0x100, 0x29, 0x37, {0x8, 0x1c, '\x00', [@pad1, @generic={0x3, 0xcb, "d119b4e04bd20f3fb8b556cc01a8cd0a6897d62850f5c5e4affa3340ebde57af6876a77de36f113ac6c71dd31aae7c252a7b096e3da35bb58d06a052408f2dbed4b88b7f65bf14491fb445263ed8e5c68e2d13f1b7adaeef5ffbde41d4eea93c650a174ec104a105d89dc72abe07ae80dade8d9f1364f9c6cca0679f7a9347cc331b2e2e690cc1080a208ee3835288d1d7d56780b8b9a3bf254cf5940da4f2d6be63c7e38faf27d7e2d10991b8d750d9f5847c77c7c9fabb18496f6eb95a7d8b99aae297f46cf847e0e642"}, @hao={0xc9, 0x10, @loopback}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x3b, 0x10, 0x2, 0x5, 0x0, [@local, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x23}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r1}}}], 0x270}}, {{&(0x7f0000001400)={0xa, 0x4e22, 0x7, @empty, 0xc}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000001440)="ad232f164d5c29c908c7923316bbccbfcd1636c61fcf9c93c0d344800fa87cef31fc24cc7e20015fd9df", 0x2a}], 0x1, &(0x7f00000014c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x3b, 0x14, 0x0, 0x8, 0x0, [@mcast2, @empty, @private1, @private0, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}}}], 0xd0}}, {{&(0x7f00000015c0)={0xa, 0x4e22, 0x2e78, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x408}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000001600)="8d6841ff0c05159eeaf53e69dab23043905f617c739641e1a2820f3b4761669124991241c43ef783d39dda9420c31cd6b4eaf0ce74c52feae23b347d2a00688e306e554d0757caa1f505bf6bfcdbbf5c34fe4a5bebd308b4869944a9c338f5434a851a899fb48e705a008aaab5a73cbfeae95e5dee0f0d6efdc5a07086aa0245508293dda131e5", 0x87}, {&(0x7f00000016c0)="179d2f11e7dbc5368290843cb4f93df5baeb5944c8232a41176836ea11d2e480d5d972cd5deaae5ed78973039433a9fb0de210822b07bad798881e0cbdbaf2db3cac1200b40ca12a2337b9b659afdb03b7b6c40a159b83ba9425907bce15c6f373633b9d2f64e62469ae3cd972f21212b807f8087433908db22acf446dfdb1309040a38cde6e42a6b2b16ec65f9229839f2000cf1f288a7046a31210b736a5ad53015c7e4bed5d0d6042f0ac83197a358605b6f10a038cdceb31528dfab1b2bcb35e89f4fba650e531c13d4cb2de97c2a38ae7b58c08b1e1618359eb5b880ef5b5ad3f0f5069df43076842e7125dad07ce69c34d072e95967e", 0xf9}], 0x2}}, {{&(0x7f0000001800)={0xa, 0x4e21, 0xcb, @loopback, 0x6}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000001840)="66b56d9e7decf77c2432d8a70d8d4f95895d14ca4ed93ba9c4b80c2c206cd3974dd80bfbb88a51f15d7304d4744498e7d479a5aebee42b8d56869c0ff0920f5c89915c1f5b85357ab13bdd97c0d3eb37fea6ca405e7d99c0bd8c748912775b2d4090569955c64708f4dcd4792e5ebc742e518100e1dbb56e5bcfa37d90b5663df112c0ee77", 0x85}, {&(0x7f0000001900)="2fb11a4129db4acf9c211c3e209f05d3d4a16738771da54b0a16b42c10f0e8d66eba4bffc9c3aab6e4ad1a78c7ff6535", 0x30}], 0x2, &(0x7f0000001ac0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfff}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x32, 0x8, 0x1, 0x5c, 0x0, [@dev={0xfe, 0x80, '\x00', 0x44}, @empty, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x33, 0xc, 0x1, 0x8, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r2}}}, @hopopts_2292={{0x280, 0x29, 0x36, {0x29, 0x4c, '\x00', [@generic={0x5, 0x70, "876e23cb20d76ed4930c21e05c107f72706c2637dc88f71678160e002b704f7d409266e7566f61098b1819ca9ceafaf00302bee4fc5a66764cc6daa00c9e95a84a977bb67d44c2076715497aa5d186b033e668de4b3f77cd893147adb9eeb5cbc64804a2d5a6828b7074c5f10683e2fb"}, @generic={0x81, 0x43, "97d8eabc34fd17664eb78b04526cbf30c144530426e5142073f62c4d5d40838dafb770e5d1d272ab5e1f8d7a5a93fe83633475782952e51b818c52e037e3b09904b6b7"}, @generic={0x1, 0xb7, "f9154285e554a949ac16d810eca5965277e713fbb3a2e5346944cd0db073cb161aab316cb0dc220c289b903af79d77b8260fdb8bc154ffac4d2096841d41ad445b90bd81bb0a2b37bef9cd913095bc1a5671ad5cd48901aa9ecc548da3a4491434c42b1e80738ce05dda661914354dbe86542a07afe29713d255eddb576307d6332994423bf0f1749985382cec2ee6a76b498da14b99c335a500da4b38eb117e28b2377675745372a62a53af72583bd1161a31d4c31cc6"}, @calipso={0x7, 0x10, {0x3, 0x2, 0xd8, 0x9, [0x1cd0]}}, @generic={0x8a, 0x2a, "d95614c63ab42008972cdca5aaedd710eba5a613139796ab20a59d14379044666100c09f668156158aee"}, @generic={0xff, 0xb5, "3912242bf691cb947739e711ff0175e3c1d1148f8fe03063c600bb4f0512cb18cea4c824bf4ba76fa261eeb2610676357f3966e5073298a447b9f3719330037d75b1cd8b3b242bfa4379f55cf04eaf83f725eda149736ee085995a1b246ed2a30c7fe5f43794c4392459405f3a24fcc363980e92e380e8895b19921e994d3b9254479255abb27eaba34838543daca8b35b51b2c843b8613557baa392b57f4dbca412485ab1aa4eee8c82549d1679d0ef05be232786"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc01}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r3}}}, @hopopts={{0x78, 0x29, 0x36, {0x62, 0xb, '\x00', [@hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7, 0x7, [0xc, 0x9, 0x5dd8, 0x8000000000000000, 0x8, 0x4]}}, @ra={0x5, 0x2, 0xe674}, @ra={0x5, 0x2, 0x41}]}}}], 0x460}}, {{&(0x7f0000001f40)={0xa, 0x4e20, 0x1247, @mcast1, 0xa}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000001f80)}, {&(0x7f0000002080)="26a445a05b3082dcef741c993b1cbf1d6e6f413d890767b2b41d6a7c3f98a323122d6e89d7da063221cedd3d6f75a82376a08deb36015970e64223f206b9460c85d02bc17b6cdf2e04308d063dc34477518e2a1ef7ef08e697e109a296b0caca328d442cf15ffeebdd844749d398ce0ad72f4e0cbaa8c16a31d8ea769c7957cc38d6f4d909819281fa75380ea7c02ed0", 0x90}, {&(0x7f0000002140)="c8dc20f5e1e4532034a588514d4e483150f7f9f163ac560de466d039de930ec023ec0777b8c58ef9ddd10bd805f919ac0a67ff54818bc67e988b0d85dc6324f05e62621c3dc8dc748bf93963a0d10bb342e5257b285a28402c404e58a074995681b98b9e250eaae4fc252eda2cb6e5a8ed11810908b1b54aede938475adbcd13e8024ae3e3e366aa9cd2a202c650061388f77c79fae2b89ae02e0c23df473e27b102cd37f681d051d5635c16f197e5801384911d7edeb8e62f72ebad7da14a094f1bbccc195300f3f19e4b5628f73a178637890ea134d3735ee92905767db038e7752ab33c988538a39a866011c33964a6", 0xf1}, {&(0x7f0000002240)="77ea7e958e88e5d4097686c5815c5e1fa9fbca653ecccbe7b54cd971cdfe6ecafb9322e2f9cb47259d568a471cb65d9e49bec743fd46271ac6e1", 0x3a}, {&(0x7f0000002280)="3f575d046a4f19f40ceb0c38855ecfbbf6bfa61b4742326db0417ac20a0f3a03388bf9e48625c55ceda3c2f8ac963d1479845e", 0x33}], 0x5, &(0x7f0000002440)=[@flowinfo={{0x14, 0x29, 0xb, 0x3bc5}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r4}}}, @rthdrdstopts={{0x10a8, 0x29, 0x37, {0x62, 0x211, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @pad1, @generic={0x4, 0x12, "18d3fcd717232e6cdd38a6596ae53ef01141"}, @calipso={0x7, 0x40, {0x2, 0xe, 0xb, 0x1, [0x4, 0x80, 0xe2, 0x730, 0x7, 0x6, 0x2]}}, @generic={0x9, 0x1000, "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"}, @calipso={0x7, 0x20, {0x3, 0x6, 0xd3, 0x86, [0x9, 0x1, 0x9]}}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x6c, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0xa33}, @jumbo={0xc2, 0x4, 0xba51}, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0xff, 0x3, [0xfffffffffffffff9, 0x81]}}, @ra={0x5, 0x2, 0x2}, @generic={0x8, 0x28, "3ecc8750a78fdba5487d7029486b9faeb67d20d5093de67b115bc05171f608864a51ca5b94769fb0"}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x6, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x8}]}}}], 0x1190}}, {{&(0x7f0000003600)={0xa, 0x4e20, 0x4, @remote, 0x3}, 0x1c, &(0x7f00000038c0)=[{&(0x7f0000003640)="4891b4a99323c630f0ac4447a131b5dec2babc420323a6ee3638fa9cbaf2d5843f38ab1ae4d2a028b17603a5e9185192f39a1d209190472d92bc979454869196b466e58cb5452e56823fd94b18bc9a69b51c9276dbe53cf9fa07467f6223cf80eba3613b51e2d02b702990f910f38f72794cf05d5193ed86c6d4643fc9775a8fdcfc031fb3841fbc8023ce0aefbcb2fb4b9de6d9353cc5b2f3214a1286fe4efc5d1bca53285414f2560b", 0xaa}, {&(0x7f0000003700)="0fc80228ed83a03520de8326e60be892628095bfe55f8ebb884d721a563f6c843a6eaa2371bd97d1b03dce9f1166f47ad1acd69a8315e0aa5f121960ba1ca9890851e3d601e4be26746e1d882eb052bd71a48bdb1b707da0a35b29dc05ef4a8b93b4013b3e0deed6dba039", 0x6b}, {&(0x7f0000003780)="c86c3bb32368c7e735a7badd3435e079367a37c6f1bba95c3faa8304d5ed76585d606069fc29cbac8c7956eb680165f1c875ca53", 0x34}, {&(0x7f00000037c0)="c43fe1e53ba19634033e82ea0d735c24b284cb0f9875947f4c33c150fdf1d78600d8a91dc28318113e058e4ef2fc5b15faeeeaa20c75207594c2134b11db3835c34208d8ba549670d5c0b5dc04950681f26e5b728307f33a886f5492c0e1c3c2ef219db7eb6de2cd8a0a", 0x6a}, {&(0x7f0000003840)="bb5bfa32573c08461a0c3a03b977fc7932f5854204c8ddef0a8aed8a1ea1911605054ae7b7f2405e68bfb4d8436ffb0294b434b32805d4de693831c61cf0fbc65e9d29543813f2a7517e6af25d68bb9ae357626c170c", 0x56}], 0x5, &(0x7f0000003940)=[@dstopts={{0x20, 0x29, 0x37, {0x73, 0x1, '\x00', [@padn, @jumbo={0xc2, 0x4, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1000}}, @dstopts={{0x20, 0x29, 0x37, {0x1d, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x9}]}}}], 0x58}}], 0x8, 0x4000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x8020}, 0x8040) capset(0x0, &(0x7f0000000080)={0xfffffffe, 0x0, 0x815, 0x13, 0xffffffff, 0x4}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'lo\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5], 0x70}}, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000)=0x7, 0x35000001) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 11m1.692744734s ago: executing program 3 (id=1007): ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0xf248, 0x1, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) getrlimit(0x7, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 10m42.93849156s ago: executing program 36 (id=1007): ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0xf248, 0x1, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) getrlimit(0x7, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 10m25.161876033s ago: executing program 6 (id=1028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(&(0x7f0000000140)=@nullb, 0x0, 0x0, 0x2208004, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x300, 0x40) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10m21.697659408s ago: executing program 5 (id=1029): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x89, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0xf020000, 0x9, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa10902, 0x7e, '\x00', @p_u8=0x0}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r2 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f00000000c0)=""/162) setresgid(0x0, 0xee00, 0x0) r3 = semget$private(0x0, 0x4, 0x29b) semop(r3, &(0x7f0000000180)=[{0x1, 0xfffd}], 0x1) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x10, 0x2d49}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x101}) semtimedop(r3, &(0x7f0000000000)=[{0x3, 0x0, 0x1800}], 0x1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x1}, 0x8) r4 = dup(r1) write$eventfd(r4, &(0x7f0000000040)=0x6, 0x8) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000040)=0xc4a5) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0xb2, 0x5, 0x1ff, 0x90e8, 0x6, 0x0, 0x8, {0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x7ff, 0xbee, 0x10000, 0xc3d, 0x3}}, &(0x7f00000003c0)=0xb0) 10m21.644680878s ago: executing program 6 (id=1030): r0 = socket(0xa, 0x4, 0x3a) io_uring_setup(0x40002237, &(0x7f0000000880)={0x0, 0xfffffffd, 0x3018, 0x4, 0x35f}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000040)=0x1, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r3 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)='-~', 0x2}, 0x68) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r4, 0x200000000000f, 0x1) 10m20.480780846s ago: executing program 5 (id=1031): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) shutdown(r2, 0x1) r3 = socket(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r5}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000001400)={&(0x7f0000001380)=[{0x1, 0x8000, 0x0, 0x0}], 0x1}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r9) sendmsg$NFC_CMD_DEP_LINK_UP(r9, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000ffdbdf2504000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r12, 0x300, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x4, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 10m18.681426682s ago: executing program 6 (id=1032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x19}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x37}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000140)={0x0, 0xc21f, [0x6, 0x5, 0x8, 0x0, 0x68b5]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={0x0, 0x7fffffffffffffff, 0x1, [0x2, 0x7, 0x9, 0x9, 0xde], [0x9, 0xb329, 0x1000, 0x7, 0x5, 0xa, 0x4, 0xe970, 0x771, 0x9f, 0xcdc0, 0x9, 0x1, 0x10001, 0xefcf, 0xb13, 0x54, 0x3, 0xffff, 0x7fff, 0x9673, 0x6, 0xffffffffffffa59b, 0x7, 0x3, 0x8, 0x0, 0xd6f9, 0x4, 0x100000000, 0x0, 0x6, 0xbe40, 0x501, 0x7fffffffffffffff, 0x0, 0x5, 0x38, 0xe, 0xfe8, 0x101, 0x0, 0x6, 0xcbad, 0x0, 0x4, 0xe4e0, 0x2, 0x60000000, 0x2, 0x100000000, 0x98a, 0x6, 0x1, 0x7, 0x3, 0x1, 0x8001, 0x200, 0xa71, 0xe, 0x3, 0xfffffffeffffffff, 0xffff, 0x9, 0x5, 0x6, 0x8000, 0x83, 0x0, 0x9, 0x29, 0x4, 0x8000000000000001, 0x84a, 0x80000001, 0x8, 0x200, 0x8, 0x9, 0x4, 0x1ff, 0x9, 0x3, 0x8, 0x8fc0, 0x9, 0xffffffffffffffff, 0x0, 0x7f, 0x8, 0x53, 0x1, 0x8000000000000001, 0xfffffffffffffffc, 0x4, 0xfffffffffffffff9, 0x2, 0x6, 0x3, 0xfffffffffffffffb, 0x2, 0x9, 0x7ff, 0xffffffff, 0x1, 0x8000000000000001, 0xfffffffffffffffd, 0x1, 0x5, 0x1, 0xe, 0x3, 0x5, 0x2, 0x7, 0x5, 0x1, 0x6, 0x28f201bf, 0x5]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001640)={'team0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000017c0)={{{@in=@multicast1, @in=@multicast1, 0x4e24, 0x0, 0x4e21, 0xff0, 0xa, 0x80, 0x80, 0x11, r1}, {0x8001, 0x962, 0x101, 0x7, 0x9, 0x81, 0x5, 0x7}, {0x1, 0x800, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x5, 0x6e6bbd, 0x2, 0x0, 0x3, 0x2}, {{@in6=@empty, 0x4d6, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x3505, 0x0, 0x3, 0x1, 0x76f, 0x8001}}, 0xe8) connect$netlink(r0, &(0x7f00000018c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001ac0)={{0xffffffffffffffff, &(0x7f0000001900)='team0\x00', 0x411441, &(0x7f0000001940)={@_ha_fsid={[0x1, 0x2]}, {0x1, 0x1, 0x7b, 0x2d}}, 0xc, &(0x7f0000001980), &(0x7f00000019c0)=0x8}, 0x0, &(0x7f0000001a80)}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000002240)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x4, 0x0, 0x5}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x3c, 0x12, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x8}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x28, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_TTL={0x5, 0x6, 0x3}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_TUNNEL_KEY_DPORT={0x6, 0x8, 0x1, 0x0, 0x4e23}, @NFTA_TUNNEL_KEY_IP6={0x4}, @NFTA_TUNNEL_KEY_SPORT={0x6, 0x7, 0x1, 0x0, 0x4e22}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}, 0x1, 0x0, 0x0, 0xc011}, 0x20000000) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "431600", 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback}}}}}}, 0x0) 10m18.016276422s ago: executing program 5 (id=1033): ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0xf248, 0x1, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) getrlimit(0x7, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 10m17.775437976s ago: executing program 6 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x82, &(0x7f00000001c0)={0x0, 0x10000001, 0x20}, 0xc) 10m14.432595707s ago: executing program 6 (id=1035): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) r4 = socket(0x1, 0x5, 0x0) close(r4) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) 10m9.344667099s ago: executing program 6 (id=1036): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0xf248, 0x1, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 10m7.152444974s ago: executing program 5 (id=1037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x19}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x37}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000140)={0x0, 0xc21f, [0x6, 0x5, 0x8, 0x0, 0x68b5]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={0x0, 0x7fffffffffffffff, 0x1, [0x2, 0x7, 0x9, 0x9, 0xde], [0x9, 0xb329, 0x1000, 0x7, 0x5, 0xa, 0x4, 0xe970, 0x771, 0x9f, 0xcdc0, 0x9, 0x1, 0x10001, 0xefcf, 0xb13, 0x54, 0x3, 0xffff, 0x7fff, 0x9673, 0x6, 0xffffffffffffa59b, 0x7, 0x3, 0x8, 0x0, 0xd6f9, 0x4, 0x100000000, 0x0, 0x6, 0xbe40, 0x501, 0x7fffffffffffffff, 0x0, 0x5, 0x38, 0xe, 0xfe8, 0x101, 0x0, 0x6, 0xcbad, 0x0, 0x4, 0xe4e0, 0x2, 0x60000000, 0x2, 0x100000000, 0x98a, 0x6, 0x1, 0x7, 0x3, 0x1, 0x8001, 0x200, 0xa71, 0xe, 0x3, 0xfffffffeffffffff, 0xffff, 0x9, 0x5, 0x6, 0x8000, 0x83, 0x0, 0x9, 0x29, 0x4, 0x8000000000000001, 0x84a, 0x80000001, 0x8, 0x200, 0x8, 0x9, 0x4, 0x1ff, 0x9, 0x3, 0x8, 0x8fc0, 0x9, 0xffffffffffffffff, 0x0, 0x7f, 0x8, 0x53, 0x1, 0x8000000000000001, 0xfffffffffffffffc, 0x4, 0xfffffffffffffff9, 0x2, 0x6, 0x3, 0xfffffffffffffffb, 0x2, 0x9, 0x7ff, 0xffffffff, 0x1, 0x8000000000000001, 0xfffffffffffffffd, 0x1, 0x5, 0x1, 0xe, 0x3, 0x5, 0x2, 0x7, 0x5, 0x1, 0x6, 0x28f201bf, 0x5]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001640)={'team0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000017c0)={{{@in=@multicast1, @in=@multicast1, 0x4e24, 0x0, 0x4e21, 0xff0, 0xa, 0x80, 0x80, 0x11, r1}, {0x8001, 0x962, 0x101, 0x7, 0x9, 0x81, 0x5, 0x7}, {0x1, 0x800, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x5, 0x6e6bbd, 0x2, 0x0, 0x3, 0x2}, {{@in6=@empty, 0x4d6, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x3505, 0x0, 0x3, 0x1, 0x76f, 0x8001}}, 0xe8) connect$netlink(r0, &(0x7f00000018c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001ac0)={{0xffffffffffffffff, &(0x7f0000001900)='team0\x00', 0x411441, &(0x7f0000001940)={@_ha_fsid={[0x1, 0x2]}, {0x1, 0x1, 0x7b, 0x2d}}, 0xc, &(0x7f0000001980), &(0x7f00000019c0)=0x8}, 0x0, &(0x7f0000001a80)}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000002240)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x4, 0x0, 0x5}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x3c, 0x12, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x8}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x28, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_TTL={0x5, 0x6, 0x3}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_TUNNEL_KEY_DPORT={0x6, 0x8, 0x1, 0x0, 0x4e23}, @NFTA_TUNNEL_KEY_IP6={0x4}, @NFTA_TUNNEL_KEY_SPORT={0x6, 0x7, 0x1, 0x0, 0x4e22}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}, 0x1, 0x0, 0x0, 0xc011}, 0x20000000) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "431600", 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback}}}}}}, 0x0) 10m6.178670604s ago: executing program 5 (id=1038): ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) 10m4.702458039s ago: executing program 5 (id=1039): ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0xf248, 0x1, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) getrlimit(0x7, &(0x7f0000000040)) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x1f83, 0x5}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 9m51.815760828s ago: executing program 37 (id=1036): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0xf248, 0x1, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 9m49.084171393s ago: executing program 38 (id=1039): ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0xf248, 0x1, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) getrlimit(0x7, &(0x7f0000000040)) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x1f83, 0x5}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 17.838733827s ago: executing program 8 (id=1784): syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e131d"], 0x16) 12.046579467s ago: executing program 8 (id=1797): syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000280)=0x47) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$eJzs3MtvVNUfAPDvvZ2WlscPfogPCGgVjMRHS8tDFiZGowkLjUZdYFzVaSFIAQM1EUIUXWCMC0Pi3rg08S9wpRujrkx0iXtDQgwb0NWYO/fePoaZtkMHpjCfT3KZc+6Dc75z7rk999zbBtCzhrN/koj1EXE5IjZGRKVxh+H848a189V/rp2vJlGrvfl3kh0W16+drxb/RX3JrMtX1GpFfk2Tci++EzExPT11usiPzpx4f/TM2XPPHDsxcXTq6NTJ8YMH9+3dMXBgfH9H4sziur7to1Pbtx56+9Kr1cOX3v3lu6y+64vtZRydNJx/u0093unCumzDvHRS6WJFaEvWbv3FcjlqfX0xNLttY7z8aVcrB9xulWY/nwsXasA9LBuoA72o/EGf3f+Wy1LjhQ6OPbru6gt5RFncN4ol31KJtNinv+H+tpMGI+LwhX+/zpa4TfMQAADz/ZCNf55uNv5L44F5+/2veIayKSL+HxGbI+K+iNgSEfdH1Pd9MCIearP8xickN49/0isLsrW+NktYXDb+e654trVw/FeO/mJTX5HbUI+/PzlybHpqT/Gd7I7+NVl+bMEhC/340u9fNq77ophmH543/suWrPyFEaZXGifoJidmJlYeee7qJxHbKs3iT2YH+klEbI2IbbdYxrEnv93ealuz+Mux8JI6cCdS+ybiibz9L0RD/KWk5fPJsWcPjO8fHYzpqT2j5Vlxs19/u/h6q/JXFH8HZO2/tun5n8ef3SMmgxFnzp47Xn9ee+YWCvnzs2rSYtOWIv7+lvHffP5Xd0UMJG/V0wPlXsXnQPJK9jFUrv9wYmbm9PjcsWW+/jmWx79751z8EzHX/zfnt2eR/PHG7PE7IuLhiHikaLtHI+KxiNi5SPg/v7jrvVbbWrf/IrPyHZTFP7lI+2eXvCw11/7tJ/qO//R9q/JrS57/Wfvvq6d2F2uWc/1bbgVX8t0BAADA3SKtvwOfpCOz6TQdGcnf4d8Sa9NKRDx15NQHJyfzd+U3RX9aznRtnDcfOlbMDZf58Yb83mLe+Ku+oXp+pHpqerLbwUOPW9ei/2f+6uyjFmA1uqfe6APaov9D79L/oXfp/9C7nu92BYDuGGi++uM7XQ+gK9of/w/elnoAd577f+hd+j/0Lv0felLL341PV/Qr/3drorI6qtE0MbQ6qlEmIl1yn3SVVHV5idc+z7vEaqlPmags+49Z3GJiTdNNTS8Xh9bf2csTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiv0XAAD//1ub24E=") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6}, 0x20) shutdown(r1, 0x1) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) write$tcp_congestion(r0, &(0x7f0000000040)='hybla\x00', 0x6) 9.670955104s ago: executing program 8 (id=1807): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) syz_clone(0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x8200d380, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}]}}, &(0x7f0000000fc0)=""/140, 0x3e, 0x8c, 0x1}, 0x28) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 9.227697725s ago: executing program 1 (id=1809): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) mprotect(&(0x7f0000729000/0x3000)=nil, 0x3000, 0x2000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setfsuid(0x0) 6.188672323s ago: executing program 1 (id=1812): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) chroot(&(0x7f0000000100)='./file0\x00') 5.307674778s ago: executing program 9 (id=1813): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) 4.913730475s ago: executing program 1 (id=1814): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0xfffffffffffffffa, 0x109a00) syz_usb_disconnect(0xffffffffffffffff) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) 4.362145717s ago: executing program 8 (id=1816): syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000280)=0x47) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6}, 0x20) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) pwrite64(r0, &(0x7f0000000200)='a', 0x1, 0x80000000e0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) write$tcp_congestion(r0, &(0x7f0000000040)='hybla\x00', 0x6) 3.586761834s ago: executing program 1 (id=1819): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000000c0)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ecb403236035", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 3.208085078s ago: executing program 9 (id=1820): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x30, r2, 0x801, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000804}, 0x20000010) 2.905903669s ago: executing program 4 (id=1821): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 2.779495071s ago: executing program 1 (id=1822): creat(0x0, 0x166) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') creat(&(0x7f0000000140)='./file0\x00', 0x49) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f00000001c0)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.428907258s ago: executing program 9 (id=1823): setregid(0xee00, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x100}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0xb, 0x80000000003}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x2}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 2.428677795s ago: executing program 4 (id=1824): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x8}}}}}, 0x0) 2.158813488s ago: executing program 1 (id=1825): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) syz_clone(0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x8200d380, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}]}}, &(0x7f0000000fc0)=""/140, 0x3e, 0x8c, 0x1}, 0x28) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.910457972s ago: executing program 4 (id=1826): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.806056967s ago: executing program 9 (id=1827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="5987f20f", @ANYRES16=r2], &(0x7f0000000040)='syzkaller\x00', 0x597, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.641677004s ago: executing program 8 (id=1828): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c050) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000032c0)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x0) 1.235763474s ago: executing program 4 (id=1829): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 913.002007ms ago: executing program 4 (id=1830): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4008090) 789.232877ms ago: executing program 9 (id=1831): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) 181.301216ms ago: executing program 8 (id=1832): sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc894) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x20008004) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) shutdown(r1, 0x1) 24.592318ms ago: executing program 4 (id=1833): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000600)="974501000000000001848cc5ffff", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) 0s ago: executing program 9 (id=1834): creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x166) link(0x0, &(0x7f0000000380)='./file0\x00') creat(&(0x7f0000000140)='./file0\x00', 0x49) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f00000001c0)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): 00007f49d4a15fa0 R15: 00007fffca7ef568 [ 1175.528346][T11709] [ 1177.514785][ T5580] Bluetooth: hci2: command tx timeout [ 1178.972451][ T5230] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1178.991195][T11716] netlink: 'syz.8.1182': attribute type 2 has an invalid length. [ 1180.445076][ T5943] bridge_slave_1: left allmulticast mode [ 1180.472896][ T5943] bridge_slave_1: left promiscuous mode [ 1180.511022][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.545817][ T5943] bridge_slave_0: left allmulticast mode [ 1180.557148][ T5943] bridge_slave_0: left promiscuous mode [ 1180.560623][T11731] loop1: detected capacity change from 0 to 1024 [ 1180.577053][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.674914][T11563] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1180.881610][T11563] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.913659][T11563] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1180.949233][T11563] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 1180.995255][T11563] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1181.020380][T11563] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1181.069695][T11563] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1181.100777][T11563] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1181.128028][T11563] usb 9-1: Manufacturer: syz [ 1181.168104][T11563] usb 9-1: config 0 descriptor?? [ 1181.439035][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1181.472114][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1181.496881][ T5943] bond0 (unregistering): Released all slaves [ 1182.074962][ T5943] hsr_slave_0: left promiscuous mode [ 1182.099125][ T5943] hsr_slave_1: left promiscuous mode [ 1182.148694][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.178199][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1182.218553][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'. [ 1182.235219][T11563] usb 9-1: USB disconnect, device number 16 [ 1182.388467][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.396702][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.609568][T11744] loop1: detected capacity change from 0 to 2048 [ 1182.691187][T11744] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1182.945804][ T29] audit: type=1326 audit(1780622595.678:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1187" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d479ce59 code=0x7ffc0000 [ 1183.019174][ T29] audit: type=1326 audit(1780622595.708:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1187" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d479ce59 code=0x7ffc0000 [ 1183.101150][ T29] audit: type=1326 audit(1780622595.708:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1187" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d479ce59 code=0x7ffc0000 [ 1183.207279][ T29] audit: type=1326 audit(1780622595.708:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1187" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d479ce59 code=0x7ffc0000 [ 1183.303536][ T29] audit: type=1326 audit(1780622595.708:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1187" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49d479caeb code=0x7ffc0000 [ 1183.346771][ T29] audit: type=1326 audit(1780622595.708:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1187" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d479ce59 code=0x7ffc0000 [ 1183.381916][ T29] audit: type=1326 audit(1780622595.708:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1187" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d479ce59 code=0x7ffc0000 [ 1183.418973][ T29] audit: type=1326 audit(1780622595.708:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1187" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d479ce59 code=0x7ffc0000 [ 1183.454341][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 1183.462082][ T29] audit: type=1326 audit(1780622595.708:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1187" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49d479ce59 code=0x7ffc0000 [ 1183.498113][ T29] audit: type=1326 audit(1780622595.708:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz.1.1187" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d479ce59 code=0x7ffc0000 [ 1183.550148][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 1183.998620][T11742] ip6tnl1: entered allmulticast mode [ 1193.956079][T11775] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1193.991166][ T5580] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1194.002724][ T5580] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1194.016235][ T5580] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1194.038268][ T5580] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1194.065217][ T5580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1194.146404][T11775] loop8: detected capacity change from 0 to 128 [ 1194.659372][T11791] loop1: detected capacity change from 0 to 16 [ 1194.861292][ T9588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1194.873347][ T9588] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1194.887218][ T9588] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1194.922850][ T9588] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1194.940587][ T9588] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1195.868257][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1195.881579][T11666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.926609][T11666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.978912][T11666] bridge_slave_0: entered allmulticast mode [ 1196.013553][T11666] bridge_slave_0: entered promiscuous mode [ 1196.078652][T11666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.085362][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 1196.120137][T11666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.127395][ T24] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1196.127555][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.146763][ T5580] Bluetooth: hci4: command tx timeout [ 1196.200629][T11791] erofs (device loop1): mounted with root inode @ nid 36. [ 1196.227205][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1196.253868][ T24] pvrusb2: ********** [ 1196.274304][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1196.330238][T11666] bridge_slave_1: entered allmulticast mode [ 1196.331912][ T24] pvrusb2: Important functionality might not be entirely working. [ 1196.390676][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1196.396261][T11666] bridge_slave_1: entered promiscuous mode [ 1196.441929][ T24] pvrusb2: ********** [ 1196.474759][ T2351] pvrusb2: Invalid write control endpoint [ 1196.739031][T11803] pvrusb2: Invalid write control endpoint [ 1196.854437][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1192'. [ 1196.927640][ T24] kernel read not supported for file / (pid: 24 comm: kworker/1:0) [ 1197.004408][ T2351] pvrusb2: Invalid write control endpoint [ 1197.015046][ T5580] Bluetooth: hci6: command tx timeout [ 1197.062432][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1197.132645][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1197.167671][T11666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.202376][T11574] usb 9-1: USB disconnect, device number 17 [ 1197.225995][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1197.300967][ T2351] pvrusb2: Device being rendered inoperable [ 1197.351680][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1197.381863][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1197.413686][T11666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.426442][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1197.461329][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1197.519895][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1197.808289][ T5230] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1197.903659][T11666] team0: Port device team_slave_0 added [ 1198.087847][T11666] team0: Port device team_slave_1 added [ 1198.216745][ T5580] Bluetooth: hci4: command tx timeout [ 1198.643523][T11666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.682044][T11666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.757681][T11666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.814424][T11666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.861462][T11666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.934885][T11666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.102255][ T5580] Bluetooth: hci6: command tx timeout [ 1199.665282][T11563] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1199.875235][T11563] usb 9-1: Using ep0 maxpacket: 8 [ 1199.910262][T11563] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1199.930984][T11563] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.057264][T11563] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1200.089907][T11563] pvrusb2: ********** [ 1200.103687][T11563] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1200.109085][T11666] hsr_slave_0: entered promiscuous mode [ 1200.137294][T11563] pvrusb2: Important functionality might not be entirely working. [ 1200.172007][T11563] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1200.195866][T11840] loop1: detected capacity change from 0 to 16 [ 1200.200485][T11666] hsr_slave_1: entered promiscuous mode [ 1200.212068][T11563] pvrusb2: ********** [ 1200.255372][ T2351] pvrusb2: Invalid write control endpoint [ 1200.296796][ T5580] Bluetooth: hci4: command tx timeout [ 1200.557840][T11833] pvrusb2: Invalid write control endpoint [ 1200.733083][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1195'. [ 1200.768146][ T2351] pvrusb2: Invalid write control endpoint [ 1200.821151][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1200.888254][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1200.916873][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1200.984208][ T2351] pvrusb2: Device being rendered inoperable [ 1200.991140][T11840] erofs (device loop1): mounted with root inode @ nid 36. [ 1201.008143][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1201.039205][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1201.079454][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1201.112210][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1201.166990][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1201.170796][T11563] usb 9-1: USB disconnect, device number 18 [ 1201.186138][ T5580] Bluetooth: hci6: command tx timeout [ 1201.322181][ T5943] bridge_slave_1: left allmulticast mode [ 1201.342691][ T5943] bridge_slave_1: left promiscuous mode [ 1201.349612][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.391357][ T5943] bridge_slave_0: left allmulticast mode [ 1201.397612][ T5943] bridge_slave_0: left promiscuous mode [ 1201.406305][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.723041][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.766156][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.803524][ T5943] bond0 (unregistering): Released all slaves [ 1201.864984][ T5230] 8021q: adding VLAN 0 to HW filter on device eth29 [ 1202.095074][ T5943] hsr_slave_0: left promiscuous mode [ 1202.121848][ T5943] hsr_slave_1: left promiscuous mode [ 1202.144322][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1202.198845][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1202.376588][ T5580] Bluetooth: hci4: command tx timeout [ 1203.060561][T11863] loop1: detected capacity change from 0 to 1024 [ 1203.072672][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 1203.104215][T11863] EXT4-fs: Ignoring removed nobh option [ 1203.142696][T11863] EXT4-fs: inline encryption not supported [ 1203.162556][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 1203.165065][T11563] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1203.204785][T11863] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1203.257956][ T5580] Bluetooth: hci6: command tx timeout [ 1203.288536][T11863] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 1: comm syz.1.1196: lblock 1 mapped to illegal pblock 1 (length 1) [ 1203.315449][T11863] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1203.317585][T11863] EXT4-fs (loop1): Remounting filesystem read-only [ 1203.327071][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1203.327166][ C1] EXT4-fs (loop1): initial error at time 1780622616: ext4_map_blocks:833: inode 3: block 1 [ 1203.327361][ C1] EXT4-fs (loop1): last error at time 1780622616: ext4_map_blocks:833: inode 3: block 1 [ 1203.457800][T11563] usb 9-1: config 86 has no interfaces? [ 1203.464865][T11863] __quota_error: 34 callbacks suppressed [ 1203.465007][T11863] Quota error (device loop1): write_blk: dquota write failed [ 1203.481396][T11863] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1203.517183][T11563] usb 9-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 1203.527217][T11563] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.542095][T11863] EXT4-fs (loop1): 1 orphan inode deleted [ 1203.564796][T11563] usb 9-1: Product: syz [ 1203.574212][T11563] usb 9-1: Manufacturer: syz [ 1203.590961][T11863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1203.625892][T11563] usb 9-1: SerialNumber: syz [ 1204.002529][T11563] usb 9-1: USB disconnect, device number 19 [ 1205.008431][T10291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.029155][ T5230] 8021q: adding VLAN 0 to HW filter on device eth30 [ 1205.242987][ T34] bridge_slave_1: left allmulticast mode [ 1205.280728][ T34] bridge_slave_1: left promiscuous mode [ 1205.297640][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.339873][ T34] bridge_slave_0: left allmulticast mode [ 1205.360484][ T34] bridge_slave_0: left promiscuous mode [ 1205.384068][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.848393][T11887] FAULT_INJECTION: forcing a failure. [ 1205.848393][T11887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.908672][T11887] CPU: 0 UID: 0 PID: 11887 Comm: syz.1.1200 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1205.908844][T11887] Tainted: [L]=SOFTLOCKUP [ 1205.908894][T11887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1205.908976][T11887] Call Trace: [ 1205.909025][T11887] [ 1205.909076][T11887] __dump_stack+0x26/0x30 [ 1205.909224][T11887] dump_stack_lvl+0x14c/0x1c0 [ 1205.909372][T11887] dump_stack+0x1e/0x25 [ 1205.909498][T11887] should_fail_ex+0x7e2/0x8c0 [ 1205.909654][T11887] should_fail+0x2a/0x40 [ 1205.909781][T11887] should_fail_usercopy+0x2e/0x40 [ 1205.909951][T11887] _copy_from_user+0x33/0x100 [ 1205.910086][T11887] do_sock_getsockopt+0x203/0xc30 [ 1205.910261][T11887] ? __rcu_read_unlock+0x6c/0xd0 [ 1205.910383][T11887] ? __fget_files+0x3b4/0x4a0 [ 1205.910514][T11887] ? __fget_files+0x3b9/0x4a0 [ 1205.910663][T11887] __x64_sys_getsockopt+0x32d/0x520 [ 1205.910838][T11887] ? kmsan_internal_set_shadow_origin+0x20/0x110 [ 1205.911026][T11887] ? kmsan_internal_set_shadow_origin+0x20/0x110 [ 1205.911200][T11887] x64_sys_call+0x3ab8/0x3ea0 [ 1205.911360][T11887] do_syscall_64+0x15d/0x3c0 [ 1205.911535][T11887] ? clear_bhb_loop+0x50/0xa0 [ 1205.911678][T11887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.911816][T11887] RIP: 0033:0x7f49d479ce59 [ 1205.911923][T11887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.912036][T11887] RSP: 002b:00007f49d565a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1205.912161][T11887] RAX: ffffffffffffffda RBX: 00007f49d4a15fa0 RCX: 00007f49d479ce59 [ 1205.912253][T11887] RDX: 0000000000000486 RSI: 0000000000000000 RDI: 0000000000000003 [ 1205.912333][T11887] RBP: 00007f49d565a090 R08: 0000200000000100 R09: 0000000000000000 [ 1205.912420][T11887] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1205.912502][T11887] R13: 00007f49d4a16038 R14: 00007f49d4a15fa0 R15: 00007fffca7ef568 [ 1205.912630][T11887] [ 1206.393643][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.490399][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.518185][ T34] bond0 (unregistering): Released all slaves [ 1206.768500][ T34] hsr_slave_0: left promiscuous mode [ 1206.779891][ T34] hsr_slave_1: left promiscuous mode [ 1206.794385][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.868727][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.278467][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1207.338007][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1208.202614][ T5230] 8021q: adding VLAN 0 to HW filter on device eth31 [ 1209.201291][T11666] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1209.239737][T11666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1209.360813][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.381726][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.391846][T11793] bridge_slave_0: entered allmulticast mode [ 1209.405196][T11793] bridge_slave_0: entered promiscuous mode [ 1209.433644][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.441488][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.450542][T11793] bridge_slave_1: entered allmulticast mode [ 1209.460855][T11793] bridge_slave_1: entered promiscuous mode [ 1209.481930][T11666] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1209.519220][T11666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1209.529115][T11784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.553516][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.572634][T11784] bridge_slave_0: entered allmulticast mode [ 1209.594506][T11784] bridge_slave_0: entered promiscuous mode [ 1209.663606][T11666] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1209.719380][T11666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1209.748664][T11784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.760630][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.774066][T11784] bridge_slave_1: entered allmulticast mode [ 1209.810535][T11784] bridge_slave_1: entered promiscuous mode [ 1210.001494][T11666] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1210.057978][T11666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1210.180132][T11793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.232841][T11793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.282852][T11784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.339533][T11784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.536442][ T5230] 8021q: adding VLAN 0 to HW filter on device eth32 [ 1210.671662][T11793] team0: Port device team_slave_0 added [ 1210.722333][T11784] team0: Port device team_slave_0 added [ 1210.777911][T11793] team0: Port device team_slave_1 added [ 1210.922818][T11784] team0: Port device team_slave_1 added [ 1211.219252][T11793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.226900][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.253495][T11793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.305874][T11784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.313266][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.344027][T11784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.378769][T11793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.393338][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.431936][T11793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.493280][T11784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.500573][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.531334][T11784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.839926][T11784] hsr_slave_0: entered promiscuous mode [ 1211.849559][T11784] hsr_slave_1: entered promiscuous mode [ 1211.859441][T11784] debugfs: 'hsr0' already exists in 'hsr' [ 1211.890461][T11784] Cannot create hsr debugfs directory [ 1211.940121][T11793] hsr_slave_0: entered promiscuous mode [ 1211.950118][T11793] hsr_slave_1: entered promiscuous mode [ 1211.969788][T11793] debugfs: 'hsr0' already exists in 'hsr' [ 1211.978159][T11793] Cannot create hsr debugfs directory [ 1212.014908][T11938] loop8: detected capacity change from 0 to 128 [ 1212.321147][T11936] loop1: detected capacity change from 0 to 512 [ 1212.491643][T11936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1212.512272][T11936] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.053588][T10291] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 1213.133943][T10291] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 1213.153228][T11946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.212098][T11946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.347359][ T9370] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1213.373935][T11946] loop8: detected capacity change from 0 to 1024 [ 1213.509512][ T9370] usb 9-1: Using ep0 maxpacket: 8 [ 1213.533323][ T9370] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1213.556856][T11946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1213.571207][ T9370] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1213.582370][ T9370] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1213.592773][ T9370] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1213.601615][T11946] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.603583][ T9370] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.627180][ T9370] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1213.636738][ T9370] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.673311][T11939] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.770965][T11946] EXT4-fs (loop8): shut down requested (2) [ 1214.008319][T11939] syz_tun (unregistering): left allmulticast mode [ 1214.020986][ T9370] usb 9-1: usb_control_msg returned -71 [ 1214.048786][ T9370] usbtmc 9-1:16.0: can't read capabilities [ 1214.070148][T10431] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1214.118344][ T9370] usb 9-1: USB disconnect, device number 20 [ 1214.302005][T11666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.365726][ T5964] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.640547][ T5964] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.722061][T11793] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1214.998050][T11793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1215.129222][T11954] Cannot find set identified by id 0 to match [ 1215.646790][ T5964] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.783525][T11793] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1215.894323][T11793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1215.918289][T11793] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1216.004321][T11793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1216.039012][T11793] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1216.083144][T11793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1216.124299][ T5964] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.253307][T11666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.416898][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.424387][ T5725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.653502][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.661094][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.185869][ T5964] bridge_slave_1: left allmulticast mode [ 1217.206541][ T5964] bridge_slave_1: left promiscuous mode [ 1217.220445][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.250876][ T5964] bridge_slave_0: left allmulticast mode [ 1217.262714][ T5964] bridge_slave_0: left promiscuous mode [ 1217.269523][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.286273][ T5964] pimreg: left allmulticast mode [ 1217.753387][ T5964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.773809][ T5964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.798690][ T5964] bond0 (unregistering): Released all slaves [ 1218.061090][T11784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1218.091011][T11784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1218.143992][T11784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1218.185425][T11784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1218.283060][T11784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1218.352994][T11784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1218.413561][T11784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1218.463601][T11784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1218.523633][ T5964] hsr_slave_0: left promiscuous mode [ 1218.542250][ T5964] hsr_slave_1: left promiscuous mode [ 1218.564503][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1218.577755][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.595227][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1218.604373][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.624305][ T5964] veth1_macvtap: left promiscuous mode [ 1218.632160][ T5964] veth0_macvtap: left promiscuous mode [ 1218.638810][ T5964] veth1_vlan: left promiscuous mode [ 1218.644305][ T5964] veth0_vlan: left promiscuous mode [ 1219.078501][ T5964] team0 (unregistering): Port device team_slave_1 removed [ 1219.111387][ T5964] team0 (unregistering): Port device team_slave_0 removed [ 1219.752206][T11793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.961652][T11793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.029999][ T9645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.037566][ T9645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.111558][ T9645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.119128][ T9645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.301592][T11784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.463582][T11784] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.540524][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.548096][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.654665][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.662169][ T7406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.506269][T11666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.183241][T11793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.549485][T11666] veth0_vlan: entered promiscuous mode [ 1223.642983][T11666] veth1_vlan: entered promiscuous mode [ 1223.909134][T11784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.942972][T11666] veth0_macvtap: entered promiscuous mode [ 1224.020161][T11666] veth1_macvtap: entered promiscuous mode [ 1224.143752][T11666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.294532][T11666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.395406][ T9645] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.442162][ T5725] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.489610][ T5725] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.530241][ T5725] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.905153][T11793] veth0_vlan: entered promiscuous mode [ 1224.998515][T11793] veth1_vlan: entered promiscuous mode [ 1225.327621][T11793] veth0_macvtap: entered promiscuous mode [ 1225.399521][T11793] veth1_macvtap: entered promiscuous mode [ 1225.574502][T11793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.782722][T11793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.892315][ T1158] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.923693][ T1158] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.043106][ T95] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.062451][ T95] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.236844][ T9588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1226.255272][ T9588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1226.270243][ T9588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1226.288923][ T9588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1226.301029][ T9588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1226.646574][T11784] veth0_vlan: entered promiscuous mode [ 1226.802285][ T5964] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.910880][T12038] loop8: detected capacity change from 0 to 1024 [ 1226.934107][T11784] veth1_vlan: entered promiscuous mode [ 1227.062214][ T5964] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.383647][ T5964] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.521385][ T5580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1227.533419][ T5580] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1227.549640][ T5580] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1227.584777][ T5580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1227.617798][ T5580] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1227.754156][ T5964] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.180937][T12055] loop8: detected capacity change from 0 to 1024 [ 1228.252627][T11784] veth0_macvtap: entered promiscuous mode [ 1228.345890][T12055] bpf: Bad value for 'uid' [ 1228.374996][ T5580] Bluetooth: hci1: command tx timeout [ 1228.435150][T11784] veth1_macvtap: entered promiscuous mode [ 1228.668355][T11784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1228.842700][T11784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.066695][ T95] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.110250][ T95] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.362689][ T95] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.438400][ T95] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.655092][ T5580] Bluetooth: hci2: command tx timeout [ 1229.801583][ T5964] bridge_slave_1: left allmulticast mode [ 1229.827078][ T5964] bridge_slave_1: left promiscuous mode [ 1229.866189][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.960844][ T5964] bridge_slave_0: left allmulticast mode [ 1229.983905][ T5964] bridge_slave_0: left promiscuous mode [ 1230.014849][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.246103][T11544] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1230.436577][T11544] usb 9-1: Using ep0 maxpacket: 8 [ 1230.456252][ T5580] Bluetooth: hci1: command tx timeout [ 1230.471057][T11544] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1230.490572][T11544] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.523293][T11544] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1230.530672][T11544] pvrusb2: ********** [ 1230.538848][T11544] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1230.550023][T11544] pvrusb2: Important functionality might not be entirely working. [ 1230.563241][T11544] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1230.579983][T11544] pvrusb2: ********** [ 1230.671640][ T5964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.689188][ T5964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.718271][ T5964] bond0 (unregistering): Released all slaves [ 1230.728598][ T2351] pvrusb2: Invalid write control endpoint [ 1230.808375][ T5230] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1230.977804][T12078] pvrusb2: Invalid write control endpoint [ 1231.033602][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1210'. [ 1231.152302][ T2351] pvrusb2: Invalid write control endpoint [ 1231.189633][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1231.245988][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1231.285064][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1231.333479][ T5964] hsr_slave_0: left promiscuous mode [ 1231.345575][ T2351] pvrusb2: Device being rendered inoperable [ 1231.369741][ T5964] hsr_slave_1: left promiscuous mode [ 1231.379635][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1231.407382][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1231.411012][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1231.454514][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.467966][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1231.489896][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.504011][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1231.517832][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.535920][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1231.578866][ T5964] veth1_macvtap: left promiscuous mode [ 1231.586809][ T5964] veth0_macvtap: left promiscuous mode [ 1231.598936][ T5964] veth1_vlan: left promiscuous mode [ 1231.606806][ T5964] veth0_vlan: left promiscuous mode [ 1231.741306][ T5580] Bluetooth: hci2: command tx timeout [ 1232.422670][ T5964] team0 (unregistering): Port device team_slave_1 removed [ 1232.472387][ T5964] team0 (unregistering): Port device team_slave_0 removed [ 1232.537669][ T5580] Bluetooth: hci1: command tx timeout [ 1232.905285][T11563] usb 9-1: USB disconnect, device number 21 [ 1233.620694][ T5230] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1233.642758][T12110] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1233.815287][ T5580] Bluetooth: hci2: command tx timeout [ 1234.621418][ T5580] Bluetooth: hci1: command tx timeout [ 1234.715470][T12136] loop8: detected capacity change from 0 to 16 [ 1235.192488][T12136] erofs (device loop8): mounted with root inode @ nid 36. [ 1235.358672][ T5964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.394384][ T5964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.631670][ T807] kernel read not supported for file / (pid: 807 comm: kworker/1:2) [ 1235.833550][ T5964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.868027][ T5964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.896504][ T5580] Bluetooth: hci2: command tx timeout [ 1237.149561][T12028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.173400][T12028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.207211][T12028] bridge_slave_0: entered allmulticast mode [ 1237.240813][T12028] bridge_slave_0: entered promiscuous mode [ 1237.288096][T12028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.339040][T12028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.379416][T12028] bridge_slave_1: entered allmulticast mode [ 1237.437159][T12028] bridge_slave_1: entered promiscuous mode [ 1237.644267][T12165] loop9: detected capacity change from 0 to 1024 [ 1237.781455][T12165] bpf: Bad value for 'uid' [ 1238.101508][T12047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.120474][T12047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.157850][T12047] bridge_slave_0: entered allmulticast mode [ 1238.187650][T12047] bridge_slave_0: entered promiscuous mode [ 1238.310619][T12028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.334093][T12047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.398711][T12047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.418954][T12047] bridge_slave_1: entered allmulticast mode [ 1238.429965][T12047] bridge_slave_1: entered promiscuous mode [ 1238.580507][T12028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.597160][ T807] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1238.673876][ T5964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.693692][ T5964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.767868][T12047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.796448][ T807] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 1238.825046][ T807] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.863898][ T807] usb 10-1: config 0 has no interface number 0 [ 1238.892980][ T807] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1238.916903][T12028] team0: Port device team_slave_0 added [ 1238.934862][ T807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.956646][ T807] usb 10-1: Product: syz [ 1238.962912][ T807] usb 10-1: Manufacturer: syz [ 1239.000896][ T807] usb 10-1: SerialNumber: syz [ 1239.048698][ T807] usb 10-1: config 0 descriptor?? [ 1239.050500][T12047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.107977][ T807] uvcvideo 10-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1239.142088][ T807] uvcvideo 10-1:0.64: No valid video chain found. [ 1239.190399][T12028] team0: Port device team_slave_1 added [ 1239.315981][T12172] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 1239.336934][T12172] binder: 12170:12172 ioctl 4018620d 200000004a80 returned -1 [ 1239.370335][ T7747] usb 10-1: USB disconnect, device number 2 [ 1239.435888][T11563] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1239.574249][T12047] team0: Port device team_slave_0 added [ 1239.600479][T12028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.608390][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.620779][T11563] usb 9-1: Using ep0 maxpacket: 32 [ 1239.637550][T12028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.674068][T12047] team0: Port device team_slave_1 added [ 1239.674862][T11563] usb 9-1: config index 0 descriptor too short (expected 539, got 27) [ 1239.690813][ T783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.697019][T12028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.706635][ T783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.713373][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.724986][T11563] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1239.760543][T12028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.804918][T11563] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1239.831884][T11563] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1239.888762][T11563] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1239.924974][T11563] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.934008][T11563] usb 9-1: Product: syz [ 1239.944215][T11563] usb 9-1: Manufacturer: syz [ 1239.953488][T11563] usb 9-1: SerialNumber: syz [ 1239.985435][T11563] usb 9-1: config 0 descriptor?? [ 1239.990482][T12047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.990553][T12047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.990688][T12047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.059930][T12181] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1240.079892][T11563] hub 9-1:0.0: bad descriptor, ignoring hub [ 1240.095587][T11563] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1240.120708][T11563] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input6 [ 1240.211525][T12047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.259967][T12047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.390449][ C0] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1240.402447][T11563] usb 9-1: USB disconnect, device number 22 [ 1240.427731][T12047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.710480][T12189] binder: Bad value for 'stats' [ 1240.755724][T12194] loop9: detected capacity change from 0 to 128 [ 1240.894198][T12028] hsr_slave_0: entered promiscuous mode [ 1240.928589][T12028] hsr_slave_1: entered promiscuous mode [ 1241.145372][T11563] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1241.361848][T11563] usb 10-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1241.388616][T11563] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.449145][T11563] usb 10-1: config 0 descriptor?? [ 1241.541769][T11563] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1241.780104][T12047] hsr_slave_0: entered promiscuous mode [ 1241.807864][T12047] hsr_slave_1: entered promiscuous mode [ 1241.823993][T12047] debugfs: 'hsr0' already exists in 'hsr' [ 1241.845963][T12047] Cannot create hsr debugfs directory [ 1242.141774][T11563] gspca_sunplus: reg_w_riv err -71 [ 1242.162344][T11563] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1242.194773][T12210] warning: `syz.8.1221' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1242.198883][T11563] usb 10-1: USB disconnect, device number 3 [ 1242.276677][T12211] loop8: detected capacity change from 0 to 16 [ 1242.388309][T12210] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1242.507003][T12210] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1221'. [ 1243.395481][T12221] loop9: detected capacity change from 0 to 1024 [ 1243.545570][T12221] bpf: Bad value for 'uid' [ 1243.805632][ T807] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1243.836940][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.844488][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.043965][ T807] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1244.082191][ T807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.129714][ T807] usb 5-1: config 0 has no interface number 0 [ 1244.170161][ T807] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1244.203496][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.215814][ T807] usb 5-1: Product: syz [ 1244.221072][ T807] usb 5-1: Manufacturer: syz [ 1244.251235][ T807] usb 5-1: SerialNumber: syz [ 1244.295880][ T807] usb 5-1: config 0 descriptor?? [ 1244.366398][ T807] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1244.399989][ T807] uvcvideo 5-1:0.64: No valid video chain found. [ 1244.592514][T12224] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 1244.639968][T12224] binder: 12223:12224 ioctl 4018620d 200000004a80 returned -1 [ 1244.664465][ T807] usb 5-1: USB disconnect, device number 4 [ 1244.683550][T12236] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1228'. [ 1244.979006][T12237] loop8: detected capacity change from 0 to 2048 [ 1245.033252][T12237] EXT4-fs (loop8): invalid inodes per group: 393248 [ 1245.033252][T12237] [ 1245.437658][ T9] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1245.683157][ T9] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1245.727020][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.775549][ T9] usb 9-1: Product: ꦋ妥嗠姹佞⢸鵨筋퀊駰꼃쓱秃뷻佬ã»ì”µéŸœï³¥æ©½á˜¬ä¥…蔫爴ﶮî™í“žã—撓ݑ廸딚璌ä¸ê©½Ë¡é°¢â´•è€¸î¢¸å¸»å«¸î¿§î©¦å‘䥺쫔䂥몧æ–μⴎᑲ殕듇刳硟战䷛ꄠ뢶áƒêž‚ᑜ⌽≲⪑Ḯ뺡憱횬äªèŽƒîžãŒá¯•ä¤–너∭퇬蚣ꉷ꟰餽⭿瞞䘪뷃 [ 1245.889604][ T9] usb 9-1: Manufacturer: ä Š [ 1245.912318][ T9] usb 9-1: SerialNumber: syz [ 1246.006779][ T9] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1246.325625][T12028] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1246.368096][T12252] loop9: detected capacity change from 0 to 65 [ 1246.446369][T12028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1246.489576][T12028] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1246.588169][ T9] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1246.612883][T12028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1246.658564][T12028] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1246.744291][ T9] usb 9-1: USB disconnect, device number 23 [ 1246.782012][T12028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1246.977027][T12028] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1247.066184][T12028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1247.131972][T12035] udevd[12035]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1247.372330][T12261] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1232'. [ 1247.486594][T12255] loop9: detected capacity change from 0 to 1024 [ 1247.573382][T12047] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1247.601544][T12263] loop8: detected capacity change from 0 to 64 [ 1247.687520][T12047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1247.756765][T12047] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1247.852871][T12047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1247.882779][T12047] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1247.947391][T12047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1248.006354][T12047] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1248.226366][T12047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1248.720932][T12266] loop4: detected capacity change from 0 to 32768 [ 1248.866274][T12266] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1250.467663][ T29] audit: type=1800 audit(1780622662.648:232): pid=12278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1234" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 1252.259307][T11784] ocfs2: Unmounting device (7,4) on (node local) [ 1252.384432][T12028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.417669][ T807] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1252.650590][ T807] usb 10-1: Using ep0 maxpacket: 16 [ 1252.688089][ T807] usb 10-1: too many configurations: 64, using maximum allowed: 8 [ 1252.736155][ T807] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1252.763462][ T807] usb 10-1: can't read configurations, error -61 [ 1252.803270][T12047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.880763][T12028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.955316][ T807] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1252.989848][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.997474][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.148955][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.156594][ T7406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.170836][ T807] usb 10-1: Using ep0 maxpacket: 16 [ 1253.192932][ T807] usb 10-1: too many configurations: 64, using maximum allowed: 8 [ 1253.242763][ T807] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1253.259214][ T807] usb 10-1: can't read configurations, error -61 [ 1253.293544][ T807] usb usb10-port1: attempt power cycle [ 1253.378901][T12047] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.523484][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.531043][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.687231][ T807] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1253.741245][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.748841][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.755457][T12296] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1253.778024][ T807] usb 10-1: Using ep0 maxpacket: 16 [ 1253.789981][ T807] usb 10-1: too many configurations: 64, using maximum allowed: 8 [ 1253.835935][ T807] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1253.863705][ T807] usb 10-1: can't read configurations, error -61 [ 1254.026475][ T807] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1254.101232][ T807] usb 10-1: Using ep0 maxpacket: 16 [ 1254.131493][ T807] usb 10-1: too many configurations: 64, using maximum allowed: 8 [ 1254.190757][ T807] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1254.236286][ T807] usb 10-1: can't read configurations, error -61 [ 1254.258371][ T807] usb usb10-port1: unable to enumerate USB device [ 1254.549086][T12301] loop8: detected capacity change from 0 to 1024 [ 1254.634596][T12299] loop4: detected capacity change from 0 to 4096 [ 1256.447805][T11555] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1256.650864][T11555] usb 9-1: Using ep0 maxpacket: 8 [ 1256.703803][T11555] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1256.758706][T11555] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.881456][T11555] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1256.919583][T11555] pvrusb2: ********** [ 1256.945756][T11555] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1256.997791][T11555] pvrusb2: Important functionality might not be entirely working. [ 1257.051007][T11555] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1257.094489][T12330] loop9: detected capacity change from 0 to 1024 [ 1257.104446][T11555] pvrusb2: ********** [ 1257.147721][ T2351] pvrusb2: Invalid write control endpoint [ 1257.200915][T12329] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1257.286129][T12330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1257.394351][T12315] pvrusb2: Invalid write control endpoint [ 1257.493954][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1243'. [ 1257.718456][ T2351] pvrusb2: Invalid write control endpoint [ 1257.756259][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1257.833815][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1257.904891][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1257.926517][T11563] usb 9-1: USB disconnect, device number 24 [ 1258.021166][ T2351] pvrusb2: Device being rendered inoperable [ 1258.068042][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1258.124354][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1258.180426][ T2351] pvrusb2: Attached sub-driver cx25840 [ 1258.211502][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1258.263195][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1259.119473][T12353] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1260.786224][T12028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1261.859850][T12047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.175518][T12373] FAULT_INJECTION: forcing a failure. [ 1262.175518][T12373] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.252042][T12373] CPU: 1 UID: 0 PID: 12373 Comm: syz.9.1253 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1262.252204][T12373] Tainted: [L]=SOFTLOCKUP [ 1262.252253][T12373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1262.252333][T12373] Call Trace: [ 1262.252383][T12373] [ 1262.252430][T12373] __dump_stack+0x26/0x30 [ 1262.252584][T12373] dump_stack_lvl+0x14c/0x1c0 [ 1262.252726][T12373] dump_stack+0x1e/0x25 [ 1262.252858][T12373] should_fail_ex+0x7e2/0x8c0 [ 1262.253032][T12373] should_failslab+0x158/0x200 [ 1262.253211][T12373] kmem_cache_alloc_noprof+0x146/0x1250 [ 1262.253400][T12373] ? security_file_alloc+0x7a/0x6c0 [ 1262.253545][T12373] ? kmem_cache_alloc_noprof+0x428/0x1250 [ 1262.253725][T12373] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1262.253913][T12373] security_file_alloc+0x7a/0x6c0 [ 1262.254062][T12373] alloc_empty_file+0x1ba/0x8e0 [ 1262.254224][T12373] alloc_file_pseudo+0x1dd/0x400 [ 1262.254381][T12373] __shmem_file_setup+0x4eb/0x660 [ 1262.254579][T12373] shmem_file_setup+0x7f/0xb0 [ 1262.254754][T12373] memfd_alloc_file+0x94/0x990 [ 1262.254915][T12373] __se_sys_memfd_create+0x855/0xb00 [ 1262.255075][T12373] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1262.255259][T12373] __x64_sys_memfd_create+0x78/0xb0 [ 1262.255410][T12373] x64_sys_call+0x256c/0x3ea0 [ 1262.255569][T12373] do_syscall_64+0x15d/0x3c0 [ 1262.255749][T12373] ? clear_bhb_loop+0x50/0xa0 [ 1262.255886][T12373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.256033][T12373] RIP: 0033:0x7f9ecb39ce59 [ 1262.256132][T12373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.256247][T12373] RSP: 002b:00007f9ecc1cee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1262.256362][T12373] RAX: ffffffffffffffda RBX: 00000000000002f7 RCX: 00007f9ecb39ce59 [ 1262.256453][T12373] RDX: 00007f9ecc1ceee0 RSI: 0000000000000000 RDI: 00007f9ecb432f4f [ 1262.256539][T12373] RBP: 00002000000003c0 R08: 00000000ffffffff R09: 0000000000000000 [ 1262.256626][T12373] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000340 [ 1262.256707][T12373] R13: 00007f9ecc1ceee0 R14: 00007f9ecc1ceea0 R15: 0000200000000380 [ 1262.256831][T12373] [ 1262.295906][T12374] loop8: detected capacity change from 0 to 256 [ 1262.881880][T12047] veth0_vlan: entered promiscuous mode [ 1262.988747][T12381] loop8: detected capacity change from 0 to 512 [ 1263.072959][T12047] veth1_vlan: entered promiscuous mode [ 1263.080399][T12381] EXT4-fs: Ignoring removed oldalloc option [ 1263.163178][T12381] EXT4-fs (loop8): 1 truncate cleaned up [ 1263.196778][T12381] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1263.237264][T12380] loop4: detected capacity change from 0 to 1024 [ 1263.250408][T12387] syz.9.1257 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1263.521686][ T29] audit: type=1804 audit(1780622676.248:233): pid=12381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1256" name="/newroot/110/file1/file1" dev="loop8" ino=15 res=1 errno=0 [ 1263.573261][T12381] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1256'. [ 1263.628716][T12381] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1256'. [ 1263.663039][T12047] veth0_macvtap: entered promiscuous mode [ 1263.844209][T12047] veth1_macvtap: entered promiscuous mode [ 1264.172844][T12047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.470178][T12047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.863951][T12028] veth0_vlan: entered promiscuous mode [ 1265.009516][T12028] veth1_vlan: entered promiscuous mode [ 1265.940122][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.980897][T10431] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.258997][ T5964] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.663329][ T5725] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.760257][ T5725] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.783690][T12028] veth0_macvtap: entered promiscuous mode [ 1267.866428][T12415] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1267.928998][T12028] veth1_macvtap: entered promiscuous mode [ 1268.319123][T12028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1268.546849][T12028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.741080][ T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.792487][ T7747] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1268.822507][ T56] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.886690][ T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.922539][ T56] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.049912][ T7747] usb 9-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1269.095754][ T7747] usb 9-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1269.139953][ T7747] usb 9-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1269.201510][ T7747] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1269.228237][ T7747] usb 9-1: New USB device found, idVendor=056a, idProduct=ed23, bcdDevice= 0.ff [ 1269.270555][ T7747] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.344292][ T7747] usb 9-1: config 0 descriptor?? [ 1269.928778][ T7747] wacom 0003:056A:ED23.0003: unknown main item tag 0x3 [ 1269.961757][ T7747] wacom 0003:056A:ED23.0003: unbalanced collection at end of report description [ 1270.042352][ T7747] wacom 0003:056A:ED23.0003: parse failed [ 1270.075944][ T7747] wacom 0003:056A:ED23.0003: probe with driver wacom failed with error -22 [ 1270.181126][ T7747] usb 9-1: USB disconnect, device number 25 [ 1271.586512][T12458] loop9: detected capacity change from 0 to 1024 [ 1272.396997][T12458] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1273.992912][T11793] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.935192][ T29] audit: type=1107 audit(1780622690.658:234): pid=12510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='øæÕ' [ 1278.271053][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.323712][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.542444][ T6376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.598822][ T6376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.027651][T12522] loop4: detected capacity change from 0 to 1024 [ 1279.173479][T12525] Illegal XDP return value 4294967274 on prog (id 155) dev syz_tun, expect packet loss! [ 1279.182713][T12522] hfsplus: failed to load extents file [ 1281.772015][T12531] loop9: detected capacity change from 0 to 1024 [ 1282.095628][T12531] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1282.429297][T12531] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1282.607016][T12531] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 1282.756311][T12531] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1282.756311][T12531] [ 1282.846732][T12531] EXT4-fs (loop9): Total free blocks count 0 [ 1282.852988][T12531] EXT4-fs (loop9): Free/Dirty block details [ 1282.947342][T12531] EXT4-fs (loop9): free_blocks=68451041280 [ 1282.975965][T12531] EXT4-fs (loop9): dirty_blocks=64 [ 1283.014231][T12531] EXT4-fs (loop9): Block reservation details [ 1283.075190][T12531] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 1283.149253][T12547] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1283.260684][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1289'. [ 1283.559875][T11793] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1287.140771][T12583] loop4: detected capacity change from 0 to 512 [ 1287.171643][T12586] loop9: detected capacity change from 0 to 256 [ 1287.209243][T12583] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1287.254135][T12586] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1287.326246][T12583] EXT4-fs (loop4): 1 truncate cleaned up [ 1287.338984][T12586] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1287.381815][T12583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1287.571552][T12586] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 1287.681886][T12586] exFAT-fs (loop9): failed to load alloc-bitmap [ 1287.742589][T12586] exFAT-fs (loop9): failed to recognize exfat type [ 1288.363177][ T9588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1288.379467][ T9588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1288.390425][ T9588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1288.411765][ T9588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1288.434618][ T9588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1288.621370][T11784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.303647][T12606] loop1: detected capacity change from 0 to 1024 [ 1289.367428][T12606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1289.512898][T12606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1289.734038][ T14] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.919797][ T14] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.125535][ T9588] Bluetooth: hci3: command tx timeout [ 1292.682405][ T14] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.128489][ T14] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.169457][T12047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.186930][ T9588] Bluetooth: hci3: command tx timeout [ 1294.096567][ T14] bridge_slave_1: left allmulticast mode [ 1294.133113][ T14] bridge_slave_1: left promiscuous mode [ 1294.171900][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.269130][ T14] bridge_slave_0: left allmulticast mode [ 1294.307030][ T14] bridge_slave_0: left promiscuous mode [ 1294.330896][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.354497][T12648] loop9: detected capacity change from 0 to 512 [ 1294.402521][T12648] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1294.448982][T12648] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.1309: inode has both inline data and extents flags [ 1294.477417][T12648] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1294.478344][T12648] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.1309: couldn't read orphan inode 15 (err -117) [ 1294.488078][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1294.488228][ C0] EXT4-fs (loop9): initial error at time 1780622707: ext4_orphan_get:1397: inode 15 [ 1294.488378][ C0] EXT4-fs (loop9): last error at time 1780622707: ext4_orphan_get:1397: inode 15 [ 1294.621084][T12648] loop9: lost filesystem error report for type 5 error -117 [ 1294.694163][T12648] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1294.744776][T12653] loop4: detected capacity change from 0 to 1024 [ 1294.781710][T12653] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1294.824558][T12653] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1294.841197][T12653] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1294.984552][T12653] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1295.063912][T12653] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1295.125191][T12653] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1311: Failed to acquire dquot type 0 [ 1295.243685][T12653] loop4: lost filesystem error report for type 5 error -117 [ 1295.244798][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1295.255363][ T9588] Bluetooth: hci3: command tx timeout [ 1295.259092][ C1] EXT4-fs (loop4): initial error at time 1780622707: ext4_acquire_dquot:7034 [ 1295.273348][ C1] EXT4-fs (loop4): last error at time 1780622707: ext4_acquire_dquot:7034 [ 1295.321158][T12653] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1295.346380][T12653] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1295.420814][T12653] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1311: Failed to acquire dquot type 0 [ 1295.530991][T12653] loop4: lost filesystem error report for type 5 error -117 [ 1295.535602][T12653] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.1311: Freeing blocks not in datazone - block = 0, count = 4096 [ 1295.663680][T12653] loop4: lost filesystem error report for type 5 error -117 [ 1295.674630][T12653] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1295.786909][T12653] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1295.887387][T12648] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))" [ 1295.890457][T12653] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1311: Failed to acquire dquot type 0 [ 1295.934057][T12672] loop8: detected capacity change from 0 to 128 [ 1296.049006][T12653] loop4: lost filesystem error report for type 5 error -117 [ 1296.066224][T12653] EXT4-fs (loop4): 1 orphan inode deleted [ 1296.171232][T12653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1296.436799][T12653] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.1311: iget: bad extended attribute block 6 [ 1296.457885][T12648] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1296.492416][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.536853][T12659] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1296.730354][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.874002][ T14] bond0 (unregistering): Released all slaves [ 1297.102219][T11784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.172378][T11793] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.335577][ T9588] Bluetooth: hci3: command tx timeout [ 1297.935199][ T14] hsr_slave_0: left promiscuous mode [ 1298.015933][ T14] hsr_slave_1: left promiscuous mode [ 1298.072764][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1298.125050][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1298.195230][T12700] loop9: detected capacity change from 0 to 1024 [ 1298.203891][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1298.266783][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1298.333277][T12700] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1298.493148][T12709] loop4: detected capacity change from 0 to 512 [ 1298.520543][ T14] veth1_macvtap: left promiscuous mode [ 1298.523773][ T29] audit: type=1800 audit(1780622711.248:235): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1318" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 1298.563625][T12709] EXT4-fs: Ignoring removed mblk_io_submit option [ 1298.587878][ T14] veth0_macvtap: left promiscuous mode [ 1298.637858][ T14] veth1_vlan: left promiscuous mode [ 1298.651189][T12709] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.1322: corrupted in-inode xattr: e_name out of bounds [ 1298.698022][ T14] veth0_vlan: left promiscuous mode [ 1298.737594][T12709] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1298.739088][T12709] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1322: couldn't read orphan inode 15 (err -117) [ 1298.748720][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1298.748811][ C1] EXT4-fs (loop4): initial error at time 1780622711: ext4_iget_extra_inode:5128: inode 15 [ 1298.748970][ C1] EXT4-fs (loop4): last error at time 1780622711: ext4_iget_extra_inode:5128: inode 15 [ 1298.785439][T12712] loop1: detected capacity change from 0 to 128 [ 1298.813235][T12709] loop4: lost filesystem error report for type 5 error -117 [ 1298.817029][T12709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1298.876486][T11793] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.882089][T12712] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1298.923241][T12709] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.1322: lblock 0 mapped to illegal pblock 3 (length 1) [ 1299.020902][T12709] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.1322: error -117 reading directory block [ 1299.190929][T12716] loop8: detected capacity change from 0 to 256 [ 1299.325478][T12716] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 1299.402997][T11784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.031511][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1303.164020][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1303.935666][ T7747] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1304.129623][ T7747] usb 2-1: Using ep0 maxpacket: 8 [ 1304.157547][ T7747] usb 2-1: no configurations [ 1304.188068][ T7747] usb 2-1: can't read configurations, error -22 [ 1304.366247][ T7747] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1304.537895][ T7747] usb 2-1: Using ep0 maxpacket: 8 [ 1304.564029][ T7747] usb 2-1: no configurations [ 1304.581688][ T7747] usb 2-1: can't read configurations, error -22 [ 1304.610295][ T7747] usb usb2-port1: attempt power cycle [ 1304.621584][T12756] loop9: detected capacity change from 0 to 1764 [ 1304.966224][ T7747] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1305.009170][ T7747] usb 2-1: Using ep0 maxpacket: 8 [ 1305.028147][ T7747] usb 2-1: no configurations [ 1305.044217][ T7747] usb 2-1: can't read configurations, error -22 [ 1305.195276][ T7747] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1305.239511][ T7747] usb 2-1: Using ep0 maxpacket: 8 [ 1305.251220][ T7747] usb 2-1: no configurations [ 1305.269149][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.275960][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.301553][ T7747] usb 2-1: can't read configurations, error -22 [ 1305.309471][ T7747] usb usb2-port1: unable to enumerate USB device [ 1305.538726][T12766] loop9: detected capacity change from 0 to 2048 [ 1305.587747][T12766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1305.658612][ T29] audit: type=1800 audit(1780622718.388:236): pid=12766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1334" name="file1" dev="loop9" ino=1415 res=0 errno=0 [ 1306.492094][T12776] syz_tun: entered allmulticast mode [ 1306.631077][T12775] syz_tun: left allmulticast mode [ 1306.748769][T12779] loop4: detected capacity change from 0 to 512 [ 1306.891268][T12779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1308.335694][T12796] loop8: detected capacity change from 0 to 512 [ 1308.505610][T12796] EXT4-fs error (device loop8): __ext4_fill_super:5596: inode #2: comm syz.8.1341: inode has both inline data and extents flags [ 1308.630888][T12796] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1308.634835][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1308.650852][ C0] EXT4-fs (loop8): initial error at time 1780622721: __ext4_fill_super:5596: inode 2 [ 1308.660668][ C0] EXT4-fs (loop8): last error at time 1780622721: __ext4_fill_super:5596: inode 2 [ 1308.694011][T12796] EXT4-fs (loop8): get root inode failed [ 1308.751244][T12796] EXT4-fs (loop8): mount failed [ 1308.890378][T12799] loop9: detected capacity change from 0 to 2048 [ 1308.914080][T12803] Bluetooth: MGMT ver 1.23 [ 1309.069282][T12799] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1309.666616][T11784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.831145][T12812] netlink: 'syz.1.1345': attribute type 49 has an invalid length. [ 1311.111783][T12601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.223006][T12601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.323505][T12601] bridge_slave_0: entered allmulticast mode [ 1311.440084][T12601] bridge_slave_0: entered promiscuous mode [ 1311.627322][T12601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.772112][T12601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.880348][T12601] bridge_slave_1: entered allmulticast mode [ 1311.997751][T12601] bridge_slave_1: entered promiscuous mode [ 1312.258895][T12823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1347'. [ 1312.313390][ T7747] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1312.498279][T12601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.535109][T12829] raw_sendmsg: syz.8.1349 forgot to set AF_INET. Fix it! [ 1312.553599][ T7747] usb 10-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1312.602536][T12601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.630096][ T7747] usb 10-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1312.655233][ T7747] usb 10-1: Product: syz [ 1312.699356][ T7747] usb 10-1: config 0 descriptor?? [ 1312.793371][ T7747] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1312.836870][ T7747] usb 10-1: Detected FT232H [ 1313.002397][ T7747] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1313.129509][T12601] team0: Port device team_slave_0 added [ 1313.339747][T12601] team0: Port device team_slave_1 added [ 1313.584269][ T7747] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1313.787338][T12838] loop1: detected capacity change from 0 to 1024 [ 1314.038572][T12838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1314.271361][ T7747] usb 10-1: USB disconnect, device number 8 [ 1314.456194][ T7747] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1314.542408][ T7747] ftdi_sio 10-1:0.0: device disconnected [ 1315.118177][T12601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.242060][T12601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.622540][T12601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.680146][T12601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.695993][T12601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.743656][T12601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.819728][T12047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.377347][T12601] hsr_slave_0: entered promiscuous mode [ 1316.417130][T12601] hsr_slave_1: entered promiscuous mode [ 1317.656802][T12847] Bluetooth: hci4: command 0x0406 tx timeout [ 1317.663635][T12847] Bluetooth: hci6: command 0x0406 tx timeout [ 1318.059772][T12870] loop4: detected capacity change from 0 to 512 [ 1318.253338][T12872] syz.9.1359 uses obsolete (PF_INET,SOCK_PACKET) [ 1318.301678][T12870] EXT4-fs error (device loop4): __ext4_fill_super:5596: inode #2: comm syz.4.1358: inode has both inline data and extents flags [ 1318.395255][T12870] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1318.404903][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1318.420933][ C0] EXT4-fs (loop4): initial error at time 1780622731: __ext4_fill_super:5596: inode 2 [ 1318.430765][ C0] EXT4-fs (loop4): last error at time 1780622731: __ext4_fill_super:5596: inode 2 [ 1318.466021][T12870] EXT4-fs (loop4): get root inode failed [ 1318.515659][T12870] EXT4-fs (loop4): mount failed [ 1320.224263][T11544] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 1320.502978][T11544] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1320.636580][T11544] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1320.735364][T11544] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1320.797737][T11544] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.929768][T11544] hub 9-1:4.0: USB hub found [ 1321.157691][T11544] hub 9-1:4.0: 2 ports detected [ 1321.177639][T11544] usb 9-1: selecting invalid altsetting 1 [ 1321.219174][T11544] hub 9-1:4.0: Using single TT (err -22) [ 1321.644082][T11544] usb 9-1: USB disconnect, device number 26 [ 1321.714586][T12894] Cannot find add_set index 0 as target [ 1322.800530][T12601] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1322.909357][T12908] loop4: detected capacity change from 0 to 8 [ 1322.909562][T12601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1322.927133][T12909] loop8: detected capacity change from 0 to 8 [ 1322.953341][T12909] squashfs: Unknown parameter '1844674407370955161501777777777777777777777' [ 1322.966790][T12908] squashfs: Unknown parameter '1844674407370955161501777777777777777777777' [ 1322.976623][T12601] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1323.093025][T12601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1323.141189][T12601] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1323.147151][T12912] loop1: detected capacity change from 0 to 128 [ 1323.198386][T12912] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1323.223595][T12601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1323.249210][T12601] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1323.266204][T12912] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1323.339370][T12601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1323.725782][T12920] loop4: detected capacity change from 0 to 128 [ 1323.878331][T12920] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1323.975640][T12920] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1324.172243][T12931] loop9: detected capacity change from 0 to 128 [ 1324.297448][T12931] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1324.416829][T12931] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1324.561802][T12601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.842596][T11784] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1325.373499][T11793] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1326.067027][T12601] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.178091][T12538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.178438][T12538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.210746][T12952] loop4: detected capacity change from 0 to 512 [ 1326.342863][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.343177][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.417725][T12952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1326.418114][T12952] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1326.877762][T12601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1327.231513][T11784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.459477][T12981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.468795][T12981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.573167][T12981] bridge0: entered allmulticast mode [ 1328.630403][T12982] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1328.822568][T12982] bridge_slave_1: left allmulticast mode [ 1328.883983][T12982] bridge_slave_1: left promiscuous mode [ 1328.935817][T12982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.029604][T12982] bridge_slave_0: left allmulticast mode [ 1329.055773][T12982] bridge_slave_0: left promiscuous mode [ 1329.089699][T12982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.007722][T13027] loop4: detected capacity change from 0 to 128 [ 1334.239881][T13027] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1334.387326][T13027] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1335.309755][T11784] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1336.498361][T12601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.060647][T13070] loop8: detected capacity change from 0 to 8192 [ 1340.654183][T12601] veth0_vlan: entered promiscuous mode [ 1340.808740][T12601] veth1_vlan: entered promiscuous mode [ 1341.339358][T12601] veth0_macvtap: entered promiscuous mode [ 1341.467538][T12601] veth1_macvtap: entered promiscuous mode [ 1341.753931][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1427'. [ 1341.803904][T12601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1341.944558][T12601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.039257][ T7850] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1342.085283][ T14] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.125802][ T14] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.178715][ T14] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.222681][ T14] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.295752][ T7850] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.364306][ T7850] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1342.432721][ T7850] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1342.484502][ T7850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.539978][ T7850] usb 10-1: config 0 descriptor?? [ 1342.617703][ T7850] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1342.711725][T13109] loop8: detected capacity change from 0 to 2048 [ 1342.839773][T13109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1342.862064][T13109] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1342.930477][T11544] usb 10-1: USB disconnect, device number 9 [ 1343.517295][T10431] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1344.157463][T13135] loop9: detected capacity change from 0 to 164 [ 1344.188258][T13135] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 1345.463987][T13150] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 1346.619899][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1447'. [ 1346.671153][T13167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.953671][T13167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.081466][T13174] loop9: detected capacity change from 0 to 1024 [ 1347.150634][T13174] hfsplus: failed to load extents file [ 1351.828060][T13210] xt_socket: unknown flags 0x4c [ 1354.034685][ T5580] Bluetooth: hci2: command 0x0406 tx timeout [ 1355.328011][ T7850] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1358.523670][ T7850] usb 9-1: device not accepting address 27, error -71 [ 1358.815045][ T5580] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1358.830381][ T5580] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1358.844171][ T5580] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1358.880550][ T5580] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1358.901099][ T5580] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1359.410785][T13222] loop9: detected capacity change from 0 to 512 [ 1359.462678][T13222] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1359.529477][T13222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1359.552809][T13222] System zones: 1-12 [ 1359.672895][T13222] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1359.788578][T13222] EXT4-fs (loop9): 1 truncate cleaned up [ 1359.843869][T13222] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1360.635406][ T40] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1360.778519][T11793] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.879757][ T40] usb 9-1: Using ep0 maxpacket: 8 [ 1361.026206][ T9588] Bluetooth: hci1: command tx timeout [ 1361.164986][ T40] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1361.228778][ T40] usb 9-1: config 179 has no interface number 0 [ 1361.310550][ T40] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 66, changing to 10 [ 1361.412715][ T40] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 41473, setting to 1024 [ 1361.519962][ T40] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1361.647528][ T40] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1361.739894][ T40] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1361.889672][ T40] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1361.957810][ T40] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.488306][ T807] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input7 [ 1362.657594][T13241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.780525][T13241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.935839][ T5943] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.095889][ T9588] Bluetooth: hci1: command tx timeout [ 1363.111284][ T40] usb 9-1: USB disconnect, device number 29 [ 1363.117616][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1363.117816][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1363.338866][ T5943] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.576093][ T5943] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.864210][ T5943] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.678422][ T5943] bridge_slave_1: left allmulticast mode [ 1364.703901][ T5943] bridge_slave_1: left promiscuous mode [ 1364.721897][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.818245][ T5943] bridge_slave_0: left allmulticast mode [ 1364.855853][ T5943] bridge_slave_0: left promiscuous mode [ 1364.893990][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.175355][ T9588] Bluetooth: hci1: command tx timeout [ 1365.446449][T13282] loop4: detected capacity change from 0 to 128 [ 1365.529816][T13282] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1365.617950][ T29] audit: type=1800 audit(1780622778.338:237): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1474" name="file1" dev="ramfs" ino=48858 res=0 errno=0 [ 1365.700253][T13282] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1365.938130][T13288] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1478'. [ 1366.172963][ T5702] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1366.319681][T13282] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1366.610362][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1366.713658][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.722771][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.750494][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.803649][ T5943] bond0 (unregistering): Released all slaves [ 1367.060538][T13305] cgroup: Unknown subsys name 'cpuset' [ 1367.255874][ T9588] Bluetooth: hci1: command tx timeout [ 1367.386705][ T5943] hsr_slave_0: left promiscuous mode [ 1367.425101][ T5943] hsr_slave_1: left promiscuous mode [ 1367.464132][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1367.513142][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.613095][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1367.621388][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.765825][ T5943] veth1_macvtap: left promiscuous mode [ 1367.793826][ T5943] veth0_macvtap: left promiscuous mode [ 1367.822581][ T5943] veth1_vlan: left promiscuous mode [ 1367.857136][ T5943] veth0_vlan: left promiscuous mode [ 1368.945321][T13333] loop8: detected capacity change from 0 to 128 [ 1369.095856][T13333] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1369.283630][T13333] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.088295][T10431] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1370.104270][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 1370.252360][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 1371.059669][T13353] netlink: 232 bytes leftover after parsing attributes in process `syz.9.1497'. [ 1371.730883][T13359] fuse: Bad value for 'fd' [ 1373.687692][T13376] loop8: detected capacity change from 0 to 512 [ 1373.708725][T13376] EXT4-fs: Ignoring removed bh option [ 1373.727659][T13376] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.1504: corrupted in-inode xattr: e_value size too large [ 1373.743025][T13376] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1373.744503][T13376] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1504: couldn't read orphan inode 15 (err -117) [ 1373.744863][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1373.744946][ C1] EXT4-fs (loop8): initial error at time 1780622786: ext4_iget_extra_inode:5128: inode 15 [ 1373.745100][ C1] EXT4-fs (loop8): last error at time 1780622786: ext4_iget_extra_inode:5128: inode 15 [ 1373.796142][T13376] loop8: lost filesystem error report for type 5 error -117 [ 1373.889384][T13376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1374.425763][T13376] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1504: Unrecognised inode hash code 4 [ 1374.545576][T13376] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1504: Corrupt directory, running e2fsck is recommended [ 1374.677283][T13376] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1504: Unrecognised inode hash code 4 [ 1374.690051][T13376] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1504: Corrupt directory, running e2fsck is recommended [ 1375.087286][T10431] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.915132][T13431] loop8: detected capacity change from 0 to 128 [ 1380.931196][T13433] netlink: 'syz.1.1518': attribute type 2 has an invalid length. [ 1380.953660][T13431] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1380.973452][T13433] netlink: 'syz.1.1518': attribute type 1 has an invalid length. [ 1380.975720][T13430] syzkaller1: tun_chr_ioctl cmd 35108 [ 1381.138679][T13431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1381.290433][T13218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.358639][T13218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.465835][T13218] bridge_slave_0: entered allmulticast mode [ 1381.579917][T13218] bridge_slave_0: entered promiscuous mode [ 1381.596098][T13218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.608463][T13218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.616391][T13218] bridge_slave_1: entered allmulticast mode [ 1381.625650][T13218] bridge_slave_1: entered promiscuous mode [ 1382.384572][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'. [ 1382.905718][T13218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.150713][T13218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.241352][T13445] loop9: detected capacity change from 0 to 2048 [ 1383.592550][T13445] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1383.827973][T13218] team0: Port device team_slave_0 added [ 1383.871634][T13218] team0: Port device team_slave_1 added [ 1384.030560][ T5943] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1384.097297][ T5943] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 1384.126792][ T5943] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1384.126792][ T5943] [ 1384.157634][ T5943] EXT4-fs (loop9): Total free blocks count 0 [ 1384.172211][ T5943] EXT4-fs (loop9): Free/Dirty block details [ 1384.204337][ T5943] EXT4-fs (loop9): free_blocks=2415919504 [ 1384.247289][T13459] loop8: detected capacity change from 0 to 512 [ 1384.249113][ T5943] EXT4-fs (loop9): dirty_blocks=16 [ 1384.270395][T13218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1384.274978][ T5943] EXT4-fs (loop9): Block reservation details [ 1384.278265][T13218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.296893][ T5943] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 1384.373225][T11793] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1384.422845][T11793] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1384.445726][T13218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1384.556092][T13218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.595162][T13218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.749870][T13218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1386.268284][T13218] hsr_slave_0: entered promiscuous mode [ 1386.419507][T13218] hsr_slave_1: entered promiscuous mode [ 1387.002737][T13480] loop8: detected capacity change from 0 to 256 [ 1387.039136][T13476] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1530'. [ 1387.078345][T13476] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1530'. [ 1387.648467][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1533'. [ 1387.791859][T13490] loop8: detected capacity change from 0 to 512 [ 1387.811150][T13490] EXT4-fs: Ignoring removed orlov option [ 1387.862291][T13490] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1387.913042][T13490] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 1387.962199][T13490] EXT4-fs (loop8): group descriptors corrupted! [ 1391.044069][T13218] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1391.151552][T13218] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1391.211717][T13218] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1391.308568][T13218] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1391.323176][T13218] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1391.406059][T13218] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1391.432233][T13218] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1391.499133][T13514] loop8: detected capacity change from 0 to 1024 [ 1391.532891][T13218] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1393.042827][T13218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.292312][T13218] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.415559][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.423121][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.550609][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.558314][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.683966][T13558] loop9: detected capacity change from 0 to 736 [ 1395.179069][T13564] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1395.341243][T13564] loop8: detected capacity change from 0 to 1024 [ 1395.424401][T13564] syz.8.1560: attempt to access beyond end of device [ 1395.424401][T13564] loop8: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 1396.288852][T13572] bridge0: port 3(veth0_to_team) entered blocking state [ 1396.296546][T13572] bridge0: port 3(veth0_to_team) entered disabled state [ 1396.305619][T13572] veth0_to_team: entered allmulticast mode [ 1396.326297][T13572] veth0_to_team: entered promiscuous mode [ 1396.339237][T13572] bridge0: port 3(veth0_to_team) entered blocking state [ 1396.346695][T13572] bridge0: port 3(veth0_to_team) entered forwarding state [ 1396.959590][ T29] audit: type=1326 audit(1780622809.688:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.4.1562" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71eb59ce59 code=0x0 [ 1398.575161][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1567'. [ 1398.584698][T13593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1402.732515][T13593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.282954][T13218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.020344][T13645] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1582'. [ 1413.986623][T13689] loop8: detected capacity change from 0 to 8 [ 1414.008989][T13685] loop9: detected capacity change from 0 to 2048 [ 1414.110906][T13685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1414.214648][ T5580] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1414.230520][ T5580] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1414.245137][ T5580] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1414.265600][ T5580] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1414.277478][ T5580] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1415.259911][T13698] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1595'. [ 1416.377464][ T5580] Bluetooth: hci1: command tx timeout [ 1417.175390][ T783] bridge_slave_1: left allmulticast mode [ 1417.222790][ T783] bridge_slave_1: left promiscuous mode [ 1417.254378][ T783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.386045][ T783] bridge_slave_0: left allmulticast mode [ 1417.409902][ T783] bridge_slave_0: left promiscuous mode [ 1417.454993][ T783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.456990][ T5580] Bluetooth: hci1: command tx timeout [ 1420.536889][ T5580] Bluetooth: hci1: command tx timeout [ 1422.627481][ T5580] Bluetooth: hci1: command tx timeout [ 1423.363839][ T783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1423.543450][ T783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1423.623763][ T29] audit: type=1326 audit(1780622835.638:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.9.1605" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ecb39ce59 code=0x0 [ 1423.743188][ T783] bond0 (unregistering): Released all slaves [ 1424.662568][ T783] hsr_slave_0: left promiscuous mode [ 1424.797581][ T783] hsr_slave_1: left promiscuous mode [ 1424.862511][ T783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.980180][ T783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.132118][T13752] loop9: detected capacity change from 0 to 8 [ 1425.705012][T13752] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1425.753979][T13752] SQUASHFS error: Failed to read block 0x9b: -5 [ 1425.812160][T13752] SQUASHFS error: Unable to read metadata cache entry [99] [ 1425.855191][T13752] SQUASHFS error: Unable to read inode 0x127 [ 1428.222617][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.229398][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.120213][ T783] team0 (unregistering): Port device team_slave_1 removed [ 1429.200238][ T783] team0 (unregistering): Port device team_slave_0 removed [ 1433.627134][T13795] fuse: fd is not a fuse device [ 1439.159179][T13865] loop9: detected capacity change from 0 to 512 [ 1440.940623][T13865] EXT4-fs error (device loop9): __ext4_fill_super:5596: inode #2: comm syz.9.1639: inode has both inline data and extents flags [ 1441.103510][T13865] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1441.104910][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1441.120930][ C0] EXT4-fs (loop9): initial error at time 1780622853: __ext4_fill_super:5596: inode 2 [ 1441.130761][ C0] EXT4-fs (loop9): last error at time 1780622853: __ext4_fill_super:5596: inode 2 [ 1441.165736][T13865] EXT4-fs (loop9): get root inode failed [ 1441.221330][T13865] EXT4-fs (loop9): mount failed [ 1441.774978][T13690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.840668][T13690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.924244][T13690] bridge_slave_0: entered allmulticast mode [ 1442.004036][T13690] bridge_slave_0: entered promiscuous mode [ 1442.144218][T13690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.121149][T13690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.145446][T13690] bridge_slave_1: entered allmulticast mode [ 1443.154618][T13690] bridge_slave_1: entered promiscuous mode [ 1443.671052][T13690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.797566][T13690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.369216][T13690] team0: Port device team_slave_0 added [ 1444.457939][T13690] team0: Port device team_slave_1 added [ 1444.860374][T13690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.891165][T13690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.053300][T13690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.116116][T13690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.142460][T13690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.241409][T13690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1451.104456][T13690] hsr_slave_0: entered promiscuous mode [ 1451.185368][T13690] hsr_slave_1: entered promiscuous mode [ 1456.727703][T13964] 9pnet_virtio: no channels available for device syz [ 1457.065989][T13690] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1457.209310][T13690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1457.228217][ T5580] Bluetooth: hci2: unexpected event for opcode 0x080b [ 1457.261401][T13690] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1457.381263][T13690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1457.431576][T13690] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1457.615422][T13690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1457.660435][T13690] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1457.779950][T13690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1458.976425][T13998] syz_tun: entered allmulticast mode [ 1459.664707][T13996] syz_tun: left allmulticast mode [ 1459.746927][T13690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.256413][ T5580] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1461.265974][ T5580] Bluetooth: hci2: Injecting HCI hardware error event [ 1461.280792][ T5580] Bluetooth: hci2: hardware error 0x00 [ 1462.225882][T13690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.415803][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.423398][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.863532][T14025] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1462.895332][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.902812][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.416444][ T5580] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1463.698893][T14037] fuse: Bad value for 'fd' [ 1464.368946][T14046] overlayfs: failed to clone upperpath [ 1465.797961][ T5677] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1469.267245][ T5677] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1469.305361][ T5677] usb 9-1: can't read configurations, error -71 [ 1469.749717][T14082] tipc: Started in network mode [ 1469.789035][T14082] tipc: Node identity 5a1fe6355974, cluster identity 4711 [ 1469.826630][T14082] tipc: Enabled bearer , priority 0 [ 1469.884894][T14083] syzkaller0: entered promiscuous mode [ 1469.912896][T14083] syzkaller0: entered allmulticast mode [ 1470.010848][T14082] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1470.112893][T14082] tipc: Resetting bearer [ 1470.131635][T14081] tipc: Resetting bearer [ 1470.173884][T14081] tipc: Disabling bearer [ 1471.487812][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1700'. [ 1471.550167][T14106] netlink: 'syz.1.1700': attribute type 7 has an invalid length. [ 1471.556541][ T5580] Bluetooth: hci4: connection err: -111 [ 1471.592217][T14106] netlink: 'syz.1.1700': attribute type 8 has an invalid length. [ 1471.649809][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'. [ 1473.925356][ T40] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1475.271795][T12538] bridge_slave_1: left allmulticast mode [ 1475.323887][ T40] usb 10-1: Using ep0 maxpacket: 8 [ 1475.465167][T12538] bridge_slave_1: left promiscuous mode [ 1475.922517][T12538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.064568][ T9588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1476.074032][T11544] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 1476.077339][T12538] bridge_slave_0: left allmulticast mode [ 1476.082896][ T9588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1476.115330][ T9588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1476.124950][T12538] bridge_slave_0: left promiscuous mode [ 1476.154584][ T9588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1476.168863][ T9588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1476.195782][T12538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.521582][ T40] usb 10-1: device descriptor read/all, error -71 [ 1476.529682][T11544] usb 9-1: unable to read config index 0 descriptor/all [ 1476.542207][T11544] usb 9-1: can't read configurations, error -71 [ 1477.852126][T12538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1477.923490][T12538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1477.970040][T12538] bond0 (unregistering): Released all slaves [ 1478.296165][ T5580] Bluetooth: hci1: command tx timeout [ 1478.950115][T12538] hsr_slave_0: left promiscuous mode [ 1478.963664][T12538] hsr_slave_1: left promiscuous mode [ 1479.659602][T12538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1480.582600][ T5580] Bluetooth: hci1: command tx timeout [ 1480.628380][T12538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.615253][ T5580] Bluetooth: hci1: command tx timeout [ 1483.046624][T14199] netlink: 'syz.4.1722': attribute type 10 has an invalid length. [ 1484.134485][T12538] team0 (unregistering): Port device team_slave_1 removed [ 1484.235567][T12538] team0 (unregistering): Port device team_slave_0 removed [ 1484.695201][ T5580] Bluetooth: hci1: command tx timeout [ 1485.664708][T14213] fuse: fd is not a fuse device [ 1489.792979][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.799694][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.662486][ T5678] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 1491.301947][ T5678] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1491.617904][ T5678] usb 9-1: language id specifier not provided by device, defaulting to English [ 1492.330817][ T5678] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 1492.447972][ T5678] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.560013][ T5678] usb 9-1: Product: syz [ 1492.679824][ T5678] usb 9-1: can't set config #1, error -71 [ 1492.746816][ T5678] usb 9-1: USB disconnect, device number 34 [ 1495.751567][T14268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1496.756677][T14282] syzkaller1: entered promiscuous mode [ 1496.785288][T14282] syzkaller1: entered allmulticast mode [ 1501.119244][T14129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.187036][T14129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.214406][T14129] bridge_slave_0: entered allmulticast mode [ 1501.232513][T14129] bridge_slave_0: entered promiscuous mode [ 1501.266195][T14129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.320861][T14129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.346280][T14129] bridge_slave_1: entered allmulticast mode [ 1501.373689][T14129] bridge_slave_1: entered promiscuous mode [ 1501.610531][T14129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.689012][T14129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.426428][T14129] team0: Port device team_slave_0 added [ 1502.475332][T14129] team0: Port device team_slave_1 added [ 1502.841149][ T7850] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1503.085216][ T7850] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 1503.530316][T14129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.676373][T14129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.067426][ T7850] usb 9-1: config 0 has no interface number 0 [ 1504.073799][ T7850] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1504.102629][ T7850] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1504.106291][T14129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.541386][T14129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.689645][T14129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.068266][ T7850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.076672][ T7850] usb 9-1: Product: syz [ 1505.081041][ T7850] usb 9-1: Manufacturer: syz [ 1505.094429][T14129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.106734][ T7850] usb 9-1: SerialNumber: syz [ 1505.684377][ T7850] usb 9-1: config 0 descriptor?? [ 1505.701468][ T7850] usb 9-1: can't set config #0, error -71 [ 1505.725352][ T7850] usb 9-1: USB disconnect, device number 35 [ 1505.987677][T14129] hsr_slave_0: entered promiscuous mode [ 1506.027909][T14129] hsr_slave_1: entered promiscuous mode [ 1506.037244][T14357] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1762'. [ 1507.768572][ T5580] Bluetooth: hci0: unknown advertising packet type: 0x82 [ 1507.768709][ T5580] Bluetooth: hci0: Dropping invalid advertising data [ 1507.783157][ T5580] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1508.463623][T14390] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1775'. [ 1508.806269][ T5580] Bluetooth: hci6: Malformed LE Event: 0x1b [ 1508.950889][T14129] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1509.206812][T14129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1509.290150][T14129] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1509.335555][ T5580] Bluetooth: hci6: command 0x0406 tx timeout [ 1509.439071][T14129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1509.489926][T14129] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1509.606227][T14129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1509.737598][T14409] loop9: detected capacity change from 0 to 512 [ 1509.979253][T14412] fuse: fd is not a fuse device [ 1510.229909][T14129] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1510.255828][T14409] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1510.487009][T14409] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 1510.524841][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1510.531478][ C0] EXT4-fs (loop9): initial error at time 1780622923: ext4_mb_generate_buddy:1317 [ 1510.540993][ C0] EXT4-fs (loop9): last error at time 1780622923: ext4_mb_generate_buddy:1317 [ 1510.567342][T14129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1510.636297][T14409] EXT4-fs (loop9): 1 truncate cleaned up [ 1510.675494][ T5580] Bluetooth: hci0: command tx timeout [ 1511.247276][T14409] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1512.228902][T11793] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.766623][T14129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1512.979247][T14129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1513.107159][T12538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.114732][T12538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1513.539009][T14129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1513.550848][T14129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1513.634326][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.641893][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.378423][T14467] loop8: detected capacity change from 0 to 2048 [ 1517.471978][T14467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1517.534587][T14475] IPv6: NLM_F_CREATE should be specified when creating new route [ 1517.585000][T14475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1517.592575][T14475] IPv6: NLM_F_CREATE should be set when creating new route [ 1518.565924][T14494] fuse: fd is not a fuse device [ 1521.158928][T14129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.749714][T14545] loop8: detected capacity change from 0 to 2048 [ 1524.901611][T14545] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1525.972677][T14129] veth0_vlan: entered promiscuous mode [ 1526.127369][T14129] veth1_vlan: entered promiscuous mode [ 1526.528220][T14129] veth0_macvtap: entered promiscuous mode [ 1526.638400][T14129] veth1_macvtap: entered promiscuous mode [ 1526.905731][T14129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.051812][T14129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1527.284899][ T6376] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.340041][ T6376] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.373245][ T5693] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.458555][ T5693] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.515287][T14587] loop8: detected capacity change from 0 to 512 [ 1527.601036][T14587] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1527.730949][T14587] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 1527.754845][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1527.761534][ C0] EXT4-fs (loop8): initial error at time 1780622940: ext4_mb_generate_buddy:1317 [ 1527.770934][ C0] EXT4-fs (loop8): last error at time 1780622940: ext4_mb_generate_buddy:1317 [ 1527.836844][T14587] EXT4-fs (loop8): 1 truncate cleaned up [ 1527.867009][T14587] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1528.398454][T10431] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1528.727121][ C1] ===================================================== [ 1528.734345][ C1] BUG: KMSAN: uninit-value in eth_type_trans+0x840/0xae0 [ 1528.741696][ C1] eth_type_trans+0x840/0xae0 [ 1528.746643][ C1] ip_tunnel_rcv+0x215f/0x29c0 [ 1528.751649][ C1] gre_rcv+0x1c9f/0x20e0 [ 1528.756212][ C1] gre_rcv+0x2af/0x3e0 [ 1528.760460][ C1] ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 1528.766236][ C1] ip_local_deliver_finish+0x409/0x720 [ 1528.771837][ C1] ip_local_deliver+0x228/0x4a0 [ 1528.776907][ C1] ip_rcv_finish+0x4d7/0x560 [ 1528.781653][ C1] ip_rcv+0xcb/0x370 [ 1528.785758][ C1] process_backlog+0x8d7/0x1500 [ 1528.790751][ C1] __napi_poll+0xdc/0x910 [ 1528.795288][ C1] net_rx_action+0xa5b/0x1c70 [ 1528.800102][ C1] handle_softirqs+0x171/0x7b0 [ 1528.805128][ C1] __do_softirq+0x14/0x1b [ 1528.809626][ C1] do_softirq+0x58/0x90 [ 1528.813942][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 1528.819235][ C1] __dev_queue_xmit+0x3c88/0x5a00 [ 1528.824538][ C1] neigh_resolve_output+0x9c3/0xaf0 [ 1528.829994][ C1] ip_finish_output2+0x1afd/0x1e00 [ 1528.835363][ C1] ip_finish_output+0x288/0x860 [ 1528.840360][ C1] ip_mc_output+0x58a/0x8c0 [ 1528.845093][ C1] NF_HOOK+0x16b/0x340 [ 1528.849281][ C1] raw_send_hdrinc+0x1885/0x1f40 [ 1528.854349][ C1] raw_sendmsg+0x2280/0x27f0 [ 1528.859157][ C1] inet_sendmsg+0x25e/0x290 [ 1528.863784][ C1] ____sys_sendmsg+0xd27/0xfd0 [ 1528.868907][ C1] ___sys_sendmsg+0x271/0x3b0 [ 1528.873759][ C1] __x64_sys_sendmsg+0x211/0x3e0 [ 1528.878971][ C1] x64_sys_call+0x1e20/0x3ea0 [ 1528.883813][ C1] do_syscall_64+0x15d/0x3c0 [ 1528.888689][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.894731][ C1] [ 1528.897215][ C1] Uninit was stored to memory at: [ 1528.902505][ C1] pskb_expand_head+0x497/0x1a40 [ 1528.907727][ C1] erspan_xmit+0x97a/0x1dc0 [ 1528.912377][ C1] dev_hard_start_xmit+0x22f/0xa80 [ 1528.917754][ C1] sch_direct_xmit+0x3b2/0xcf0 [ 1528.922686][ C1] __dev_queue_xmit+0x3592/0x5a00 [ 1528.927972][ C1] neigh_resolve_output+0x9c3/0xaf0 [ 1528.933308][ C1] ip_finish_output2+0x1afd/0x1e00 [ 1528.938670][ C1] ip_finish_output+0x288/0x860 [ 1528.943680][ C1] ip_mc_output+0x58a/0x8c0 [ 1528.948418][ C1] NF_HOOK+0x16b/0x340 [ 1528.952611][ C1] raw_send_hdrinc+0x1885/0x1f40 [ 1528.957782][ C1] raw_sendmsg+0x2280/0x27f0 [ 1528.962493][ C1] inet_sendmsg+0x25e/0x290 [ 1528.967214][ C1] ____sys_sendmsg+0xd27/0xfd0 [ 1528.972160][ C1] ___sys_sendmsg+0x271/0x3b0 [ 1528.977108][ C1] __x64_sys_sendmsg+0x211/0x3e0 [ 1528.982208][ C1] x64_sys_call+0x1e20/0x3ea0 [ 1528.987141][ C1] do_syscall_64+0x15d/0x3c0 [ 1528.991913][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.998076][ C1] [ 1529.000456][ C1] Uninit was created at: [ 1529.005014][ C1] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 1529.011185][ C1] __alloc_skb+0x855/0x1190 [ 1529.015937][ C1] alloc_skb_with_frags+0xc5/0x990 [ 1529.021296][ C1] sock_alloc_send_pskb+0xacb/0xc60 [ 1529.026773][ C1] raw_send_hdrinc+0x34c/0x1f40 [ 1529.031765][ C1] raw_sendmsg+0x2280/0x27f0 [ 1529.036600][ C1] inet_sendmsg+0x25e/0x290 [ 1529.041228][ C1] ____sys_sendmsg+0xd27/0xfd0 [ 1529.046259][ C1] ___sys_sendmsg+0x271/0x3b0 [ 1529.051116][ C1] __x64_sys_sendmsg+0x211/0x3e0 [ 1529.056373][ C1] x64_sys_call+0x1e20/0x3ea0 [ 1529.061214][ C1] do_syscall_64+0x15d/0x3c0 [ 1529.066122][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.072166][ C1] [ 1529.074581][ C1] CPU: 1 UID: 0 PID: 14604 Comm: syz.4.1833 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1529.085845][ C1] Tainted: [L]=SOFTLOCKUP [ 1529.090248][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1529.100572][ C1] ===================================================== [ 1529.107689][ C1] Disabling lock debugging due to kernel taint [ 1529.113926][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 1529.120446][ C1] CPU: 1 UID: 0 PID: 14604 Comm: syz.4.1833 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 1529.131561][ C1] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1529.137190][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1529.147356][ C1] Call Trace: [ 1529.150717][ C1] [ 1529.153642][ C1] __dump_stack+0x26/0x30 [ 1529.158135][ C1] dump_stack_lvl+0x50/0x1c0 [ 1529.162883][ C1] ? dump_stack+0x12/0x25 [ 1529.167370][ C1] dump_stack+0x1e/0x25 [ 1529.171677][ C1] vpanic+0x7b4/0x1430 [ 1529.175931][ C1] panic+0x15d/0x160 [ 1529.180031][ C1] kmsan_report+0x31a/0x320 [ 1529.184721][ C1] ? __msan_warning+0x1b/0x30 [ 1529.189570][ C1] ? eth_type_trans+0x840/0xae0 [ 1529.194578][ C1] ? ip_tunnel_rcv+0x215f/0x29c0 [ 1529.199683][ C1] ? gre_rcv+0x1c9f/0x20e0 [ 1529.204246][ C1] ? gre_rcv+0x2af/0x3e0 [ 1529.208615][ C1] ? ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 1529.214490][ C1] ? ip_local_deliver_finish+0x409/0x720 [ 1529.220263][ C1] ? ip_local_deliver+0x228/0x4a0 [ 1529.225420][ C1] ? ip_rcv_finish+0x4d7/0x560 [ 1529.230314][ C1] ? ip_rcv+0xcb/0x370 [ 1529.234507][ C1] ? process_backlog+0x8d7/0x1500 [ 1529.239684][ C1] ? __napi_poll+0xdc/0x910 [ 1529.244314][ C1] ? net_rx_action+0xa5b/0x1c70 [ 1529.249303][ C1] ? handle_softirqs+0x171/0x7b0 [ 1529.254417][ C1] ? __do_softirq+0x14/0x1b [ 1529.259092][ C1] ? do_softirq+0x58/0x90 [ 1529.263585][ C1] ? __local_bh_enable_ip+0xa1/0xb0 [ 1529.268967][ C1] ? __dev_queue_xmit+0x3c88/0x5a00 [ 1529.274351][ C1] ? neigh_resolve_output+0x9c3/0xaf0 [ 1529.279866][ C1] ? ip_finish_output2+0x1afd/0x1e00 [ 1529.285322][ C1] ? ip_finish_output+0x288/0x860 [ 1529.290502][ C1] ? ip_mc_output+0x58a/0x8c0 [ 1529.295349][ C1] ? NF_HOOK+0x16b/0x340 [ 1529.299726][ C1] ? raw_send_hdrinc+0x1885/0x1f40 [ 1529.304973][ C1] ? raw_sendmsg+0x2280/0x27f0 [ 1529.309865][ C1] ? inet_sendmsg+0x25e/0x290 [ 1529.314667][ C1] ? ____sys_sendmsg+0xd27/0xfd0 [ 1529.319782][ C1] ? ___sys_sendmsg+0x271/0x3b0 [ 1529.324814][ C1] ? __x64_sys_sendmsg+0x211/0x3e0 [ 1529.330106][ C1] ? x64_sys_call+0x1e20/0x3ea0 [ 1529.335111][ C1] ? do_syscall_64+0x15d/0x3c0 [ 1529.340037][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.346246][ C1] ? filter_irq_stacks+0x49/0x190 [ 1529.351391][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1529.356677][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1529.361953][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1529.368441][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1529.373729][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1529.379008][ C1] __msan_warning+0x1b/0x30 [ 1529.383654][ C1] eth_type_trans+0x840/0xae0 [ 1529.388482][ C1] ip_tunnel_rcv+0x215f/0x29c0 [ 1529.393431][ C1] gre_rcv+0x1c9f/0x20e0 [ 1529.397806][ C1] ? __rcu_read_unlock+0x46/0xd0 [ 1529.402860][ C1] ? raw_local_deliver+0x368/0x15b0 [ 1529.408310][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1529.414309][ C1] ? __pfx_gre_rcv+0x10/0x10 [ 1529.419030][ C1] gre_rcv+0x2af/0x3e0 [ 1529.423217][ C1] ? __pfx_gre_rcv+0x10/0x10 [ 1529.427923][ C1] ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 1529.433627][ C1] ip_local_deliver_finish+0x409/0x720 [ 1529.439226][ C1] ip_local_deliver+0x228/0x4a0 [ 1529.444206][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1529.450323][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 1529.455814][ C1] ip_rcv_finish+0x4d7/0x560 [ 1529.460532][ C1] ip_rcv+0xcb/0x370 [ 1529.464541][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1529.469779][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1529.474393][ C1] process_backlog+0x8d7/0x1500 [ 1529.479370][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1529.485362][ C1] ? filter_irq_stacks+0x49/0x190 [ 1529.490521][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1529.495944][ C1] __napi_poll+0xdc/0x910 [ 1529.500392][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1529.506382][ C1] net_rx_action+0xa5b/0x1c70 [ 1529.511176][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1529.517158][ C1] ? __run_timer_base+0x41/0xdb0 [ 1529.522264][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1529.527500][ C1] handle_softirqs+0x171/0x7b0 [ 1529.532450][ C1] __do_softirq+0x14/0x1b [ 1529.536935][ C1] do_softirq+0x58/0x90 [ 1529.541235][ C1] [ 1529.544222][ C1] [ 1529.547216][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 1529.552401][ C1] __dev_queue_xmit+0x3c88/0x5a00 [ 1529.557580][ C1] ? __local_bh_enable_ip+0x75/0xb0 [ 1529.562940][ C1] ? _raw_spin_unlock_bh+0x2d/0x40 [ 1529.568203][ C1] ? ___neigh_create+0x34d7/0x3b90 [ 1529.573430][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1529.578721][ C1] ? __dev_queue_xmit+0x2d4/0x5a00 [ 1529.584022][ C1] neigh_resolve_output+0x9c3/0xaf0 [ 1529.589371][ C1] ? __pfx_neigh_resolve_output+0x10/0x10 [ 1529.595221][ C1] ip_finish_output2+0x1afd/0x1e00 [ 1529.600534][ C1] ip_finish_output+0x288/0x860 [ 1529.605520][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1529.611526][ C1] ip_mc_output+0x58a/0x8c0 [ 1529.616169][ C1] ? __pfx_ip_finish_output+0x10/0x10 [ 1529.621689][ C1] ? __pfx_ip_mc_output+0x10/0x10 [ 1529.626843][ C1] NF_HOOK+0x16b/0x340 [ 1529.631027][ C1] ? __pfx_dst_output+0x10/0x10 [ 1529.636004][ C1] raw_send_hdrinc+0x1885/0x1f40 [ 1529.641104][ C1] raw_sendmsg+0x2280/0x27f0 [ 1529.645817][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1529.652364][ C1] ? __pfx_raw_sendmsg+0x10/0x10 [ 1529.657415][ C1] inet_sendmsg+0x25e/0x290 [ 1529.662037][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 1529.667169][ C1] ____sys_sendmsg+0xd27/0xfd0 [ 1529.672129][ C1] ___sys_sendmsg+0x271/0x3b0 [ 1529.676962][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1529.682261][ C1] ? __rcu_read_unlock+0x6c/0xd0 [ 1529.687314][ C1] ? __fget_files+0x3b4/0x4a0 [ 1529.692116][ C1] ? __fget_files+0x3b9/0x4a0 [ 1529.697009][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1529.702284][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1529.708267][ C1] __x64_sys_sendmsg+0x211/0x3e0 [ 1529.713385][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1529.718671][ C1] x64_sys_call+0x1e20/0x3ea0 [ 1529.723504][ C1] do_syscall_64+0x15d/0x3c0 [ 1529.728265][ C1] ? clear_bhb_loop+0x50/0xa0 [ 1529.733077][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.739102][ C1] RIP: 0033:0x7f71eb59ce59 [ 1529.743612][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1529.763343][ C1] RSP: 002b:00007f71ec38f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1529.771882][ C1] RAX: ffffffffffffffda RBX: 00007f71eb815fa0 RCX: 00007f71eb59ce59 [ 1529.779960][ C1] RDX: 000000000400c804 RSI: 0000200000000900 RDI: 0000000000000004 [ 1529.788025][ C1] RBP: 00007f71eb632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1529.796093][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1529.804151][ C1] R13: 00007f71eb816038 R14: 00007f71eb815fa0 R15: 00007ffcfa4bbae8 [ 1529.812258][ C1] [ 1529.815694][ C1] Kernel Offset: disabled [ 1529.820069][ C1] Rebooting in 86400 seconds..