last executing test programs: 11.882319882s ago: executing program 0 (id=463): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000240)=ANY=[], 0x0}, 0x90) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4ed}) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x4000}, 0x2}) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000019700)=""/102380, 0x18fec, 0x100008) close(r0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x35315842}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000300)={r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x2}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000640)="17001e000200010000ffbe8c5ee17688a20033000202000a0000b1bfcf0f6f605440a335c2c78b02a257fc5ad90200bb62000000000001000024000200df01800a000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003905000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000affc0840024f0298e9e90539062a80e605007f7117", 0xad) 10.740199798s ago: executing program 0 (id=466): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0xc}}}, &(0x7f0000000240)='GPL\x00', 0x7, 0x414, &(0x7f0000000080)=""/253}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x34, r3, 0xab2bf658e72548f3, 0x0, 0x0, {0x12}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x34}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900), 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@delchain={0x78, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x44, 0xa, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x8, 0x289}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7f}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x101}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x57}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x20}]}]}]}}]}, 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r3, @ANYBLOB="000128bd7000ffdbdf250c000000f4010380a8000500d00797d6c987f9cb68ed0159f4b7f0fa04765f15e046a51304161b653ea19bb3ad7118dacae44905eaff4023be49bd1d30ed8c845cf9fbafc73dbafeed624cc3bcbad83b9a6a6e078e1c498d3eb0a68b89a1d5e3b08190badb789235cf3d029bc8cc8a0cfe2b22651495f321b7a3185e9c8529383ebd2a34286257776c47a32fbecf120fd2184ba96e75ae1cb5c6692eb1cdc94cd8afef091006414456a0d5f0bc36eec308000200ff0300009500040082905cb48bbdf67647dc9fff0136f8b03d02ea926104f4b460b8767d93affa4f44937b8310c97e2f7155b4cb1d1ee258ebf40f443b23c780c8d617a9d8372ef87139122051df17e4181b2b64cf28e5f59dfc663fa2ad405d1c796694fff70018c5ca2b3624ffc0dfbea6a63e57074d8a6493dec8e2773bece61cc5ce100caa9f6ad380d5f5509fef13e21314e7f52cb431000000a0000380200001800800010000000000050002000000000004000300050002000000000020000180040003000800010002000000060002005e00000008000100060000001c0001800800020047504c00040003000400030008000100000000004000018004000300080001000800000004000300040003000500020000000000040003000800010040000000040003000800010008000000080001000010000006000400ae6600003c00018008000100", @ANYRES32, @ANYBLOB="140002006261746164765f736c6176655f3100000800030000000000140002006261746164765f736c6176655f3100000c00038008000200000000800c00018008000100", @ANYRES32=r7, @ANYBLOB="38000180090300000000000000800000", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300040000004c00018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="140002006261746164765f736c6176655f30000014000200766972745f7769666930000000000000080003000200000008000100", @ANYRES32=r11, @ANYBLOB], 0x2e0}, 0x1, 0x0, 0x0, 0x881}, 0x4000000) 10.585533471s ago: executing program 0 (id=469): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8086, &(0x7f0000000140), 0x1, 0x49d, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) io_setup(0x3, &(0x7f0000000080)=0x0) io_pgetevents(r6, 0x7fffffff, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)={0x0, 0x989680}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf32(r7, 0x0, 0x6c0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000380)={[{@grpjquota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@jqfmt_vfsv1}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000400)="$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") setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) 10.290015265s ago: executing program 4 (id=470): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800700, &(0x7f00000019c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000040)={&(0x7f0000000880)="19f3774a2ad2b922be53d4c0ae01883c533640efc430260ee98d9e43dbac78cd33c1a66fce6e7b825a7d0ec111bd4507803478af997b8aa1fb016faf7f9f19a53ed3f5562d392a13bbfe6f73833e821245d614eef718b4ce3287a15eacaaeeb4a721b49c2ea946368799bf0174ad301d810f8719ee122254fe128f332b54b6a7e589", 0x82}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peekuser(0x3, r0, 0x1ff) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400ce001000010000000000000000001c6a000a28000000000a0101000000005e1affd5000000080002400000053a81bc5a3c149400032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100010000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20048080}, 0x4000090) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x8, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}]}, 0x2}, 0x1) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x6c842, 0x0) r5 = epoll_create1(0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') lseek(r7, 0x7fffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 9.359233124s ago: executing program 2 (id=472): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) close_range(r0, r3, 0x2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x8000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r4, 0x0, 0xcf, 0x6, 0x8, 0x200}, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x3, @private0, 0x200}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e24}, @in6={0xa, 0x4e24, 0x6f58, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6e42e9d5}], 0x58) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f0000000280)=0x9) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x6, @random="ca8e1f502cbb"}, 0x2, {0x2, 0x4e21, @empty}, 'ip_vti0\x00'}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000340)=0x9) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000380)={0x0, 'bridge_slave_0\x00', {}, 0x5251}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f00000003c0)={0x0, @aes256, 0x0, @desc3}) r7 = openat$snapshot(0xffffff9c, &(0x7f0000000400), 0x800, 0x0) ioctl$SNAPSHOT_S2RAM(r7, 0x330b) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x6c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x50}, 0x40004) r9 = creat(&(0x7f0000000600)='./file0\x00', 0x10) vmsplice(r9, &(0x7f0000001640)=[{&(0x7f0000000640)="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", 0x1000}], 0x1, 0xe) fsetxattr$security_evm(r7, &(0x7f0000001680), &(0x7f00000016c0)=@ng={0x4, 0x13, "daaf7cd712de9a15307d26146e"}, 0xf, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r8) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f0000001e40)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e00)={&(0x7f0000001780)={0x57c, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x78}}}}, [@NL80211_ATTR_IE={0x10b, 0x2a, [@chsw_timing={0x68, 0x4, {0x3f5, 0x6}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x2}}, @mic={0x8c, 0x10, {0x8ed, "b807933eb797", @short="6b9a208109913691"}}, @peer_mgmt={0x75, 0x14, {0x0, 0x3ff, @void, @void, @val="40ebd005f2428c7b01c3ada54d1749e6"}}, @dsss={0x3, 0x1, 0x70}, @ht={0x2d, 0x1a, {0x8, 0x1, 0x0, 0x0, {0xfffffffffffffff9, 0x37, 0x0, 0xd5, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x1}}, @measure_req={0x26, 0xa3, {0x6, 0x1f, 0x1, "3c388ed2e55b59e8011af551f7ef871d34662f830126332d8188766c017ed328a4d9d9e4cd711d6e5718aa81bc573239960ddc7a26464963509e2b4de735dc3294b5c2674544967cd592b9f3e5e09a03bbd34c12c91c41940035abf1bc36e4ce443c8538046f876e693d38b964aefc5d70f361635ac74bfcb0ecaedbdae6150f9c9fb95bfe6474a7ac71fba2bd57b3b69546ba31c7a9ee017ea469e2ff9850c7"}}, @cf={0x4, 0x6, {0x1, 0x8, 0x2, 0x500}}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0xd8, 0xf, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x0, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x74, 0xc1}}, @random_vendor={0xdd, 0xb3, "f5110b9c7892fa4912b5aba32270b4ef4aa4b4be14889814083349853fc96987e571474722ed28287e9da5138fb60039ebab22cbf73cb08de75510325ef76bd0e4c80b15ca7de41675abced59bc4b6294e59fdcdf0a8a688de5ec06300cdbba84f6612e7f2e80ebc1bb1afe4c43863e78cf6de63621d4bcddbac29669ddc49a88e6cf80b42eed6f11b8ea458cdbba7e16904d868b826f16aaeb2aae025965743cfc07d4d43169e9f77ce480871defa0395a507"}, @sec_chan_ofs={0x3e, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x0, 0x79}}, @channel_switch={0x25, 0x3, {0x1}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_BEACON_HEAD={0x2d3, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_b, @random="1103482b2ea2", {0xd, 0x5}}, 0x4, @random, 0x0, @void, @val={0x1, 0x5, [{0x36}, {0x3f, 0x1}, {0x48}, {0x4}, {0xb, 0x1}]}, @val={0x3, 0x1, 0x30}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x30}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x3, 0x0, {0x0, 0x5b}, 0x400, 0x9, 0xf7}}, @void, @void, @val={0x76, 0x6, {0x6f, 0x6, 0x8, 0x7}}, [{0xdd, 0xe2, "db95c4f632a99293e1375b5b1a9a10624e9d86f7ce5da64826a98a7591c6aae1397d029bb7b24f7d538fa1f0517e3e430bda97d8ee25f3a97b1c98b100e2175af4b65ad2523281dd228d821b08939496b5535abbfa1525820c7b4cf5da0bc7cc9473374b32c3e55ff01636cd4efde9b9f0274f682e0b180f2df97b451b16e588a91900e5debc15fb1be4452649002a04a6424e64b9a65a0a9d7dac1a8c20f92b5de1efeef661e3eff36609cc048f8ea4b8dfe5e1294a258c4d13fe2ed5d6d0144f960aa926494e0f42079600ab56fb2e9acaa1e8c41449fd169977e61e450eb7a34d"}, {0xdd, 0x76, "0677a52f316fae2ea6a85ecf9f351e4d6ac268ac9faa4fccb490e01a46fb74ef93eec51b050be901372c4781d3b68cf152a04e74c17dae58de70d59f8aad1f8f31f6af34b098e0eb7bd5ae4e1f5d5d971fca259f34ec74c062410e9632593259a5ba960fb324443b79357fb85323d3f301e35f925bbe"}, {0xdd, 0x1f, "42c13e6fbd83ccfe5d50b1afe15a4f05f5aa2d668a7bb48eb5bd97f3578a8c"}, {0xdd, 0x72, "2ab8b31eb32de3ace64d9d3ea5574e34e1883056221534a057cbdc35bf5fa0f3dcd3728c42476191705352ea38a7fad9a598df414b07d0ca5836463130dced82ddaee6b0ae3519d373a7851e2d42e86a4e249c12c470fbbe51bf680699472643657440bed05f0dfd078c9db949e01d9df857"}, {0xdd, 0x82, "bd5ab345ade6395ca39acbfe23851b1dd8cfab8ffef697af24ccc6f638d9928da904b6b77a51422be04c92ffe1f53df1c9bc4199c39acf45447837b5696a1584e23c70232513f0ef88554f616daf1ede28df26ca8291968ba610a456b6a2e03eb95753ce1bf491d8a64811157d49567d8694c497eeb6d9c98e9f905fc5668ce17246"}]}}, @NL80211_ATTR_BEACON_TAIL={0x95, 0xf, [@tim={0x5, 0x78, {0x1f, 0xe2, 0x81, "91a143a7d75ec87ffe9e20bdb142ea3c5a8388a4f2562dd9e7e4c853f55646368f6da167ca6e0cbc492df6ff748e4ddce312043067c1e18f04952f1995dda92c1714bbc74447cdefeca03513ca92844f097aced96c17a297e6b106c44bcd86b4d9f9642b6aab7bb3a72ada420b7b7ee74698b8ecad"}}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x7, 0x3, @device_a, 0x3, 0x3, 0x7fffffff}}]}]}, 0x57c}}, 0x4) semget$private(0x0, 0x2, 0x2a0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000001e80)={0x2, 0x0, 0x2}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f00)={0xb4, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xcb}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe6c5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xdfe}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xdc4b}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x8ef9}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x80000000}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x10) 8.997522564s ago: executing program 0 (id=473): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10, &(0x7f0000000680), 0xfe, 0x252, &(0x7f00000003c0)="$eJzs3TFoJFUcBvBvZne9y90ipzaCqAciooFwdoLN2SgcyHGICCqciNgoiRAT7BIrGwutVVKJEMTOaClpgo0iWEVNERtBg4XBQouV3Ulk3USjbrJzZH4/mGRm5735v2Hne7PN7AZorAtJLidpJZlO0klSDDe4WC0X9jZXpjauJ73eEz8Xg3bVdmW/3/kky0keSrJeFnmpnSyuPbP96+Zj97250Ln3/bWnpyZ6knt2trce333v6hsfX3lw8cuvf7xa5HK6fzmv41cc8lq7SG49iWI3iKJd9wj4N6699tE3/dzfluSeQf47KVO9eW/N37TeyQPv/l3ft3/66o5JjhU4fr1ep38PXO4BjVMm6aYoZ5JU62U5M1N9hv+2da58eW7+1ekX5xZmX6h7pgKOSzfZevTTM5+cH8n/D60q/8Dp1c//k9dWv+uv77bqHg0wEXdW//r5n35u6f7IPzSO/ENzyT8013j5v3giYwImw/0fmkv+obnkH06xzj/vln9oLvmH5pJ/aK7h/AMAzdI7U/cTyEBd6p5/AAAAAAAAAAAAAAAAAACAg1amNq7vL5Oq+fk7yc4jSdqH1W8Nfo84OTv4e+6Xot/sT0XVbSzP3j3mAcb0Yc1PX9/8fb31v7ir3vpLs8ny60kutdsHr79i7/r7/245Yn/n+TEL/EfFyPbDT022/qjfV0++xgdD62dH9l3ZTD7rzz+XDpt/ytw+1Gt0/uke/RXLR3rltzEPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMT8EQAA///wCW4b") recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x185, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000029c0)={0x2, {"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", 0x1000}}, 0x1006) r3 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) timer_gettime(r4, &(0x7f0000000100)) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x120, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) readv(r6, &(0x7f0000000080)=[{&(0x7f0000000440)=""/185, 0x94}], 0x1) ftruncate(r5, 0x12081ff) 8.671439182s ago: executing program 3 (id=474): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0x1, 0x17c, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) fanotify_init(0x0, 0x40000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') preadv2(r4, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000012400)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @prog_id}, 0x20) socket$igmp(0x2, 0x3, 0x2) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) 8.552779141s ago: executing program 4 (id=475): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000c00)={0x1, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000200)={r3}) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x4040, 0x40) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000300)=@v1={0x0, @aes128, 0x2, @desc4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r5, 0x1, r2, 0x3, 0x80000}) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000580)=0xfffffffffffffc5a, 0x80800) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) accept4$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000540)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@private2, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080)=r5) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r5}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b40000004900d96d28bd7000fedbdf250a003800", @ANYRES32=r3, @ANYBLOB="0100000014000100fcf8000000000000000000000000000014000100fe8000000000000000000000000000aa080002"], 0xb4}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0010000000000000b7030000000000ba4901850000007c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x7ffffffff000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 7.230843103s ago: executing program 3 (id=476): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'vxcan1\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x34, &(0x7f0000000040), 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000380)={&(0x7f0000000000), 0x18, &(0x7f0000000340)={&(0x7f0000000280)="0f0582898a1d6e8909", 0x9}}, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r2) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000002d000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0000000000"], 0x60}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000580)={&(0x7f0000000000)=@id, 0x10, &(0x7f0000000400)=[{&(0x7f0000000140)="05", 0x1}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f00000007c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=r9], 0x404) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r11, 0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000a00)={'lo\x00', {0x2, 0x0, @broadcast}}) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x30, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "a9d528", 0x0, 0x6c, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 7.119592152s ago: executing program 2 (id=477): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000240)=ANY=[], 0x0}, 0x90) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4ed}) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x4000}, 0x2}) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000019700)=""/102380, 0x18fec, 0x100008) close(r0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x35315842}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000300)={r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x2}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000640)="17001e000200010000ffbe8c5ee17688a20033000202000a0000b1bfcf0f6f605440a335c2c78b02a257fc5ad90200bb62000000000001000024000200df01800a000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003905000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000affc0840024f0298e9e90539062a80e605007f7117", 0xad) 6.730193465s ago: executing program 1 (id=478): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002024207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000040)) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) munlock(&(0x7f00005fb000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000403, 0x2000000000032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000100)={0x0, 0x4, @start={0x0, 0x1, "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", "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"}, [0xfff, 0x1ff, 0x7fff8000, 0x1000, 0x2, 0x7, 0x2, 0x1, 0x1000, 0x8, 0x11, 0x7, 0x6, 0x100000001, 0x3, 0x1, 0x9, 0x6, 0x2, 0x64bc, 0x8001, 0x31c, 0x1, 0x0, 0x3, 0x80000000, 0x0, 0xe162, 0x8000000000000000, 0x800, 0x59, 0x6, 0x1a, 0x9, 0x3, 0x80, 0x14dfcdc1, 0x1, 0xffffffff, 0x100, 0x800, 0x7fff, 0x5, 0x8, 0x4, 0x2, 0x6, 0x4, 0x89, 0x8001, 0x5, 0x8001, 0x5, 0x5, 0x1, 0x2, 0xfffffc0000000000, 0x22, 0x1, 0x9, 0x8, 0x6, 0x0, 0x7]}) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x43400) setsockopt$inet6_int(r6, 0x29, 0x43, &(0x7f0000000b40)=0x20, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000b80)={0x6, 0x0, [{0xc0000001, 0x9, 0x1, 0x9, 0x100000, 0x12e2619}, {0xa, 0x1, 0x2, 0xb4a, 0x6, 0x7fffffff, 0xd4a8}, {0x0, 0x0, 0x6, 0x2, 0x101, 0x20, 0x80}, {0x1, 0x5, 0x0, 0x4, 0x38c6, 0x4, 0x3}, {0xa, 0x2, 0x2, 0xcb7, 0x3, 0x3ff, 0x2}, {0x80000019, 0x7, 0x6, 0x6, 0xffff, 0x8, 0x80000000}]}) write$cgroup_int(r10, &(0x7f0000000280), 0x12) 6.637477692s ago: executing program 0 (id=479): socket(0xa, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x1008000, &(0x7f0000005780)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6508106500745f637c6368652c6e000000f30800000000"], 0x1, 0x54fd, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x1e}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000001940)={0x0, @null, @bpq0, 0x0, 'syz0\x00', @default, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @bcast, @default]}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000380)='./file2\x00', &(0x7f00000000c0)=@known='system.advise\x00', 0x0, 0x2) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) chdir(0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e45b, 0x700000000000000) syz_emit_ethernet(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 6.569325628s ago: executing program 4 (id=480): sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = eventfd(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sessionid\x00') r3 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1663, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x100) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r6 = getpid() fcntl$lock(r1, 0x24, &(0x7f00000002c0)={0x0, 0x0, 0x2000000, 0xffffffffffff0797, r6}) r7 = socket(0x0, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000d9bffc)=0xfffffffc, 0x4) sendto(r7, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000480)={0x1, @pix={0x0, 0x0, 0x42303159, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6293e981e84336b88ca1076dc37499bf985b9cc04c561b13f8e057edd1b1ffd2"], 0x24}}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r10, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x26, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000db93f310d80483001d9a0102030109021400010000004009040000000202010002"], 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 6.480588166s ago: executing program 1 (id=481): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0x1, 0x17c, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) fanotify_init(0x0, 0x40000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') preadv2(r4, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000012400)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB='\x00\x00\x00!\x00{V\x00\x00\x00\x00\x00'], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @prog_id}, 0x20) socket$igmp(0x2, 0x3, 0x2) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) 5.993820577s ago: executing program 2 (id=482): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fef3eb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2", @ANYRES16], 0xd, 0x2a0, &(0x7f0000000840)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"]) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000540)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x2a02) r6 = dup3(r5, r4, 0x0) read(r6, &(0x7f00000000c0)=""/226, 0xe2) syz_open_dev$tty20(0xc, 0x4, 0x0) read$watch_queue(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x8, 0xdab}, 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x112, 0x4) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvfrom(r8, 0x0, 0xffffffffffffff56, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000000c0)={0x5, 0x0, 0xf, 0x100, 0x800, 0x5}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f0000000b40), &(0x7f0000000b80)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="85000000c200000095000000000000005b5e3cb39a1d3a9be1249250104246c99f8e7214c583374debaad0b4eb638ece72dae3ed86e0806aef6311697c8a6de568bfdf57391e63f56ddc066b2fa04fba027b334e7b83e13f2b907a15e9bf0405a31d784e8cb78352d9b1e5e2ca72990230952d660454c34fd1224f26f29378275be83a8c67ab44ab6f7c5b1574c63a99f138cbdca4498db2ffb7d4480e58de16422cd00634a8c4a4698b1dd87b287999b3b342b5a02cde12"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x90) 5.899347644s ago: executing program 3 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10001) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setregset(0x4205, r0, 0x202, &(0x7f00000003c0)={&(0x7f0000000340)="21577d0a003b815e9a8903bab4a2c3102edd7d1fd2621ffc2e6305f7d0b6d5783d2bd08cb7055487fe9b76ee49c308cf7fc6d195d2c3f15f15e69c2a877ff917f28c5d81ace48865bdd257fb260844d9737728addb7b0ea84650caebb9221369dd13e33e710e910cdd", 0x69}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002100010000004a3662b000000a0000000000000000000000b0041047d59195b193c1f18198ace8e8014917e4dc70eced6c5956b969810c61538dc57e9ee556dc8de81e4bb648034b71e8ebd609297fb5627bd93f29cd14697f6f88df79c8096500d9f4c2b0d36c22a3e0b9d431f9acfb5db64faf6009cafe"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000002000ffff"], 0x2c}}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r7, r9, 0x1, 0x0, @val=@iter={0x0}}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0xb, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000013000100"/20, @ANYRES32=r12, @ANYBLOB="000000000000000005002700000000001c001a8018000a80140007"], 0x44}}, 0x0) 5.177421135s ago: executing program 1 (id=484): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000100)='::,:\x00\ai\x88\x04\xc4\xa4\xe3\xce\xcc\x1a\xc7\xc4\xa5\xa0M\x02Z)\bok\xd4\x14y\xfe^\a\xe0\xadK;y\xef\xa5A\x1a\x9dfM\xd2\xe3C\xd6\xf1F\x04\xea\'0\xbfN<\xf4\xf6\x93\xb1\xe2o\xef\xa8[\x1a\x01\x00\x01\x00\x00\x00\x00\x00a\x14\xf6\x1dX\x9el\xb1\xd0\xca\x04\x15R\x04K\x18\xc1\xdb\x8fim\x80#\xf4b~\xce\x92\xfa\x816Pb\xb3\xc8\xee\xe0\xea\xf6E\x80\xcdpdV\x8a\x8e\x84\xaf\x94pi\xbf\x9fh\x0f_kp\x12\xdd\r\xdf*\xbbz\x9e\xf0v\x15R\xf1\xc5\xa8p\xf2\xc1\xe4\xa9!\xb5\\\\(ZpX_\xc8C\x04\xa0\x02\xe3s\x81\x82\xf4/0J\x99\x9b\x1c:\xf6\x98Q\x92#\xccx\xa4\xd2\xdax\x04\x91]\x94', 0x0) r1 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x8001, 0x1, 0x6712, 0x2482, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x40000001, 0x2, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff07, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffefb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r3, 0x0, r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='page_pool_state_hold\x00', r3}, 0x10) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$inet6(0xa, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './bus/file1'}, 0xf) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r6 = syz_open_procfs(r4, &(0x7f0000000400)='net/sockstat6\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1, 0x168, &(0x7f0000000240)="$eJzs29tKOlEUx/HfqP9/ZudzdBUU1E2Op4Lu8lFEJ5PGkuxGCaJH6cl6Ab3oBZpolKnZBE2CDun3A7LXEhZr74vtLC9GAGbWhSRLltKSPM97vDq0tB/3pgBMhDdc3zwAsyfJ1QdmVL+c9J//LUkvrw/V3vCTjjg/9MsJf/34H9H7Uj8ftf7J8te9VLg+I2khyvzyPKg/Mvov/rJ/xqhfilw/OP/xQbh+WdKKpFVJa5LWJW1I2pS09U3/mtF/N2J/AAAAAACisJQ189AXCV02XCcX5P/8PB/k//28YOTFIJ/z82z11q2N6wgARpT44f4njfufMu4/gL+r3eleV1zXuSMgICAIgrh/mQCMm33fbNntTvek0azUnbpzUyidnpWK+fNcwfYnfzs8/wOYHp8P/bh3AgAAAAAAAAAAAAAARrUtaSfuTQAAAACYiEm8ThT3GQEAAAAAAAAAAAAAmHbvAQAA///oFUsF") write$apparmor_current(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7065726d686174203078303030303030303030303030303030305e3a04941541a157437ae9f7eee49b90ea088b2599b2bb28f0e5d259d474b33b4b81ef8c965bb08721f827b238543544519a6cc3b0497624953194f445b1b8f462e80e29eae89e1de7b4249fa8c367e22251301f2b413e43e71f717bcd4e000000000000000000000000000000002d5c00"], 0x8b) socket$xdp(0x2c, 0x3, 0x0) 5.019097699s ago: executing program 3 (id=485): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800700, &(0x7f00000019c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000040)={&(0x7f0000000880)="19f3774a2ad2b922be53d4c0ae01883c533640efc430260ee98d9e43dbac78cd33c1a66fce6e7b825a7d0ec111bd4507803478af997b8aa1fb016faf7f9f19a53ed3f5562d392a13bbfe6f73833e821245d614eef718b4ce3287a15eacaaeeb4a721b49c2ea946368799bf0174ad301d810f8719ee122254fe128f332b54b6a7e589", 0x82}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peekuser(0x3, r0, 0x1ff) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400ce001000010000000000000000001c6a000a28000000000a0101000000005e1affd5000000080002400000053a81bc5a3c149400032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100010000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20048080}, 0x4000090) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x8, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}]}, 0x2}, 0x1) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x6c842, 0x0) r5 = epoll_create1(0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') lseek(r7, 0x7fffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 4.702040385s ago: executing program 2 (id=486): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4202) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/194, 0xc2) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2800, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x5) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2655, &(0x7f0000000340)={0x0, 0x3113}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/4095, 0xfff}], 0x1) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4867, &(0x7f0000001500)={0x0, 0x75bc, 0x40, 0xfffffff8, 0x8000, 0x0, r1}, 0x0, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, 0x0) keyctl$dh_compute(0x18, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, r5}, 0x48) 4.283761s ago: executing program 0 (id=487): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800700, &(0x7f00000019c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000040)={&(0x7f0000000880)="19f3774a2ad2b922be53d4c0ae01883c533640efc430260ee98d9e43dbac78cd33c1a66fce6e7b825a7d0ec111bd4507803478af997b8aa1fb016faf7f9f19a53ed3f5562d392a13bbfe6f73833e821245d614eef718b4ce3287a15eacaaeeb4a721b49c2ea946368799bf0174ad301d810f8719ee122254fe128f332b54b6a7e589e04b76", 0x85}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peekuser(0x3, r0, 0x1ff) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400ce001000010000000000000000001c6a000a28000000000a0101000000005e1affd5000000080002400000053a81bc5a3c149400032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100010000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20048080}, 0x4000090) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x8, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}]}, 0x2}, 0x1) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x6c842, 0x0) r5 = epoll_create1(0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') lseek(r7, 0x7fffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.637816414s ago: executing program 2 (id=488): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = open(&(0x7f0000000280)='./bus\x00', 0x1e7143, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x80000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2804110, &(0x7f00000002c0)={[{}, {@grpjquota_path={'grpjquota', 0x3d, './file2'}}, {@grpquota}, {@nombcache}, {@nouid32}]}, 0x1, 0x52c, &(0x7f0000000f40)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f0000000340)={[{@test_dummy_encryption}, {@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@minixdf}, {@errors_remount}, {@quota}]}, 0x3, 0x455, &(0x7f0000000f00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r7 = syz_open_procfs(0x0, 0x0) pread64(r7, 0x0, 0x0, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$AUDIT_TRIM(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) recvmmsg(r8, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0, 0x0, 0x0, 0x4d}}], 0x1, 0x100, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) linkat(r2, &(0x7f0000000180)='./file1\x00', r2, &(0x7f0000000640)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x4) 3.577507529s ago: executing program 1 (id=489): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) msgget$private(0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x100, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdb2f}]}]}, 0x100}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x0, 0x4, 0x8}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0xfffffffd) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x1000001, 0x0, &(0x7f0000000000), 0x2000000) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x7) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)='u', 0xa792a, 0x804, 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000100)={'erspan0\x00'}) 3.192926482s ago: executing program 4 (id=490): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_CAPBSET_DROP(0x18, 0x1000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa00080045000014fffc0002000090780000000000000000c1e6920400420b61c9935a7159a083421245ac9303629391fc909b3bd27807b86b0816b805c51dd1712590c2"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x4, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x4004551e, &(0x7f0000000140)={0x0, 0x0, "7da046dc02e5b62e78c14b725ca7f19907a99aab4810bf036efc2530653612031ae2e7d4cecf208a26253d61e08ecbf63439944da1206a4a75c61e590f68d3d0e72bc39efb072acdd44a1270eaa016ca30e85907bb70f16ffe70d35c68edc4fdc288f58acc1fbb1694fe895b64ab35a80455c3337fcf066013ea47b949388dd6bf4b81eff76dd1c5bba45307d0809ca1120534fb2a259395d6973af5ab9e78a8141bfa999e49df4393de21c0b21c0250f07399415841c344949a51f4d4dcfa4613f922654a9f382837c7fde6dd61c862fecebe93619a922900"}) ioctl$USBDEVFS_BULK(r1, 0xc0105502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) socket(0x2000000000000021, 0x2, 0x10000000000002) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="082a060008aa1216b10050505050505050505050505000004cf58707739952f4b193642aaa50e0c181488a766ac2b2dba6a6d68642f32d47146a8235da6aa4e5"], 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r3 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x150, 0xb8, 0x150, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'sit0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'bond_slave_0\x00', 'pimreg1\x00', {}, {}, 0x0, 0x0, 0xf8}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) pipe(0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x24040801) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000880)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x10, 0x0, {"b98d0d6a0c4056b9dc5200000000e900"}, 0x80000000, 0x100, 0x8}, @ib={0x1b, 0x0, 0x6, {"230963d6ced8bd370b210000000e00"}, 0xffffffffffffffff, 0x10001, 0x8}}}, 0x118) 3.181367073s ago: executing program 3 (id=491): r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x6) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa18c14, &(0x7f0000000340)=ANY=[], 0x81, 0x29b, &(0x7f0000000580)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x0) rmdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(r3, 0x0, &(0x7f0000000280)={0xd6, 0xff}, &(0x7f00000000c0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r7, &(0x7f00000001c0)=ANY=[@ANYRES16=r6], 0xffdd) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4874ef0904271a78949178fd825b775b5e55210c4037a557f88c97b6097ea4e9fdd1d167064e969100ff97aa6b42687995845c8c3ce42e76d6db19d5f4f5f283", "eba9d749fdc2dedff9641c2773c54efce1fa87820dae06070446988b8770438b12e6b80c265fdce83841f0f230d1f4fe7b5ba021316c17fb5112d7d0f278e48a", "993216b316a23f839af552fb85026e43c8ad3e80603200a6c188ec22bd7c4549"}}) fdatasync(r1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x48, 0x0, 0x0) 781.524225ms ago: executing program 2 (id=492): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000240)=ANY=[], 0x0}, 0x90) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4ed}) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x4000}, 0x2}) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000019700)=""/102380, 0x18fec, 0x100008) close(r0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x35315842}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000300)={r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x2}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f0000000640)="17001e000200010000ffbe8c5ee17688a20033000202000a0000b1bfcf0f6f605440a335c2c78b02a257fc5ad90200bb62000000000001000024000200df01800a000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003905000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000affc0840024f0298e9e90539062a80e605007f7117", 0xad) 740.143558ms ago: executing program 1 (id=493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002024207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000040)) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) munlock(&(0x7f00005fb000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000403, 0x2000000000032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000100)={0x0, 0x4, @start={0x0, 0x1, "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", "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"}, [0xfff, 0x1ff, 0x7fff8000, 0x1000, 0x2, 0x7, 0x2, 0x1, 0x1000, 0x8, 0x11, 0x7, 0x6, 0x100000001, 0x3, 0x1, 0x9, 0x6, 0x2, 0x64bc, 0x8001, 0x31c, 0x1, 0x0, 0x3, 0x80000000, 0x0, 0xe162, 0x8000000000000000, 0x800, 0x59, 0x6, 0x1a, 0x9, 0x3, 0x80, 0x14dfcdc1, 0x1, 0xffffffff, 0x100, 0x800, 0x7fff, 0x5, 0x8, 0x4, 0x2, 0x6, 0x4, 0x89, 0x8001, 0x5, 0x8001, 0x5, 0x5, 0x1, 0x2, 0xfffffc0000000000, 0x22, 0x1, 0x9, 0x8, 0x6, 0x0, 0x7]}) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x43400) setsockopt$inet6_int(r6, 0x29, 0x43, &(0x7f0000000b40)=0x20, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000b80)={0x6, 0x0, [{0xc0000001, 0x9, 0x1, 0x9, 0x100000, 0x12e2619}, {0xa, 0x1, 0x2, 0xb4a, 0x6, 0x7fffffff, 0xd4a8}, {0x0, 0x0, 0x6, 0x2, 0x101, 0x20, 0x80}, {0x1, 0x5, 0x0, 0x4, 0x38c6, 0x4, 0x3}, {0xa, 0x2, 0x2, 0xcb7, 0x3, 0x3ff, 0x2}, {0x80000019, 0x7, 0x6, 0x6, 0xffff, 0x8, 0x80000000}]}) write$cgroup_int(r9, &(0x7f0000000280), 0x12) 601.9652ms ago: executing program 3 (id=494): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0x1, 0x17c, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) fanotify_init(0x0, 0x40000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') preadv2(r4, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000012400)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB='\x00\x00\x00!\x00{V\x00\x00\x00\x00\x00'], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @prog_id}, 0x20) socket$igmp(0x2, 0x3, 0x2) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) 525.258486ms ago: executing program 1 (id=495): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x11, 0x9, 0x0, 0x6cd, 0x102, 0x1, 0xac01, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='ext4_mballoc_alloc\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) 443.962243ms ago: executing program 4 (id=496): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prlimit64(0x0, 0x0, &(0x7f0000000740)={0x80, 0x2}, &(0x7f0000000780)) sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x67}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e00)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20004185}, 0x40) sched_setscheduler(0x0, 0x0, &(0x7f0000000500)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000500), 0xbf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x1a, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0xd, 0x5, 0x9, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xcd}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000340)='syzkaller\x00', 0x7, 0x9a, &(0x7f00000008c0)=""/154, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001ac0)={0x1, 0x4, 0x80000001, 0x80000000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001b80)=[{0x4, 0x4, 0x5, 0x9}, {0x0, 0x1, 0x7, 0xb}, {0x3, 0x3, 0x7, 0x9}], 0x10, 0x5fed}, 0x90) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@local}}, {{@in6=@ipv4={""/10, ""/2, @remote}}}}, &(0x7f0000000380)=0xe8) statx(0xffffffffffffffff, &(0x7f00000003c0)='./bus\x00', 0x2000, 0x10, &(0x7f0000000640)) lchown(&(0x7f00000002c0)='./bus/file0\x00', 0x0, 0x0) 0s ago: executing program 4 (id=497): r0 = gettid() r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000180000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='fsi_master_gpio_out\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) mkdir(&(0x7f0000000000)='./file0\x00', 0x41) r5 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x5) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000530429c334bb5d8da538301b79d7a1702226583e31298ccc624ff2d1448c0e0fe54a231162f69f7213fc2966d2600f77d30d91517ba2023e043b7dea5af26b286015c7c24ee99669043c524b98705888afb59847d63941581d47689fc67eaf8e95cec92df74d1ae2895e5be2e5deb0ec4e60f423037ba69dd087c51242b1e0f486dd2413a40873181487a95bf3aa38add3d5fd83491e3b258022f5efc006561d482282cd4dd8eb30098917d231dadac884f6422705f88dfc420234e837d5809be11c4d2e9f", @ANYRES8, @ANYRESHEX=r4], 0x14}}, 0xc040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bind$unix(r5, &(0x7f0000000380)=@file={0x1, './file0/bus\x00'}, 0x6e) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)={0x8, 0x5, 0x80000001, 0x3f, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x110) finit_module(r8, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) kernel console output (not intermixed with test programs): ][ T4663] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.096237][ T4663] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.540236][ T3578] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 121.553701][ T3578] usb 2-1: USB disconnect, device number 2 [ 121.576169][ T154] device hsr_slave_0 left promiscuous mode [ 121.593662][ T154] device hsr_slave_1 left promiscuous mode [ 121.607225][ T4710] loop0: detected capacity change from 0 to 512 [ 121.617900][ T3642] usb 4-1: USB disconnect, device number 8 [ 121.678574][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.696545][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.704040][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 121.744198][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.760023][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.780123][ T154] device bridge_slave_0 left promiscuous mode [ 121.786318][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.800914][ T4710] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.835528][ T4710] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 121.870728][ T154] device veth1_macvtap left promiscuous mode [ 121.876786][ T154] device veth0_macvtap left promiscuous mode [ 121.925960][ T154] device veth1_vlan left promiscuous mode [ 121.939251][ T154] device veth0_vlan left promiscuous mode [ 122.074809][ T3642] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.928506][ T3642] usb 4-1: Using ep0 maxpacket: 8 [ 123.231903][ T3642] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 123.625596][ T3642] usb 4-1: New USB device found, idVendor=046d, idProduct=0000, bcdDevice= 0.00 [ 123.649346][ T154] team0 (unregistering): Port device team_slave_1 removed [ 123.707959][ T3642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.767109][ T3642] usb 4-1: config 0 descriptor?? [ 123.778705][ T154] team0 (unregistering): Port device team_slave_0 removed [ 123.779516][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 123.811149][ T3642] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 123.854969][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.874714][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.968959][ T154] bond0 (unregistering): Released all slaves [ 124.263716][ T4753] No such timeout policy "syz0" [ 124.399500][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.895394][ T4607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.921224][ T4607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.940354][ T4607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.979936][ T4607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.069608][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 125.087947][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 125.098353][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.176566][ T21] usb 2-1: config 0 descriptor?? [ 125.245160][ T21] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 125.952441][ T2987] Bluetooth: hci5: command 0x0419 tx timeout [ 126.003660][ T3610] usb 4-1: USB disconnect, device number 9 [ 126.062875][ T4607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.196030][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.222736][ T21] usb 2-1: USB disconnect, device number 3 [ 126.231640][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.307103][ T4607] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.377620][ T4783] netlink: 'syz.3.203': attribute type 10 has an invalid length. [ 126.389066][ T4783] netlink: 164 bytes leftover after parsing attributes in process `syz.3.203'. [ 126.438369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.465098][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.539990][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.547115][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.597056][ T4787] overlayfs: './bus' not a directory [ 126.622391][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.627265][ T4787] 9pnet: Insufficient options for proto=fd [ 126.637596][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.653915][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.706286][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.713400][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.763428][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.806896][ T4787] sch_fq: defrate 0 ignored. [ 126.835007][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.846599][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.874544][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.917847][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.940349][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.944471][ T4797] atomic_op ffff88801afed198 conn xmit_atomic 0000000000000000 [ 126.970277][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.996885][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.007527][ T4797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 127.009877][ T4803] loop0: detected capacity change from 0 to 164 [ 127.035234][ T4607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.064526][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 127.082319][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.095171][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.110602][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.149807][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.190398][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.243748][ T4801] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 127.364244][ T25] audit: type=1326 audit(1723666131.027:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.0.208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37e082f9f9 code=0x0 [ 127.401674][ T4815] bad cache= option: none [ 127.401674][ T4815] [ 127.450410][ T4815] CIFS: VFS: bad cache= option: none [ 127.468208][ T4803] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 127.595634][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.644379][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.491605][ T4803] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 129.054619][ T25] audit: type=1400 audit(1723666132.257:14): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.291769][ T4803] device bridge0 entered promiscuous mode [ 129.355506][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.365187][ T7] usb 5-1: SerialNumber: syz [ 129.448943][ T4607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.517351][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.530600][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.553882][ T4843] loop0: detected capacity change from 0 to 256 [ 129.686834][ T4846] loop3: detected capacity change from 0 to 512 [ 129.852087][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.902431][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.179721][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.211493][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.322349][ T4607] device veth0_vlan entered promiscuous mode [ 130.333937][ T7] usb 5-1: 0:2 : does not exist [ 130.387345][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.393167][ T7] usb 5-1: USB disconnect, device number 6 [ 130.405625][ T4843] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 130.430128][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.461809][ T4607] device veth1_vlan entered promiscuous mode [ 130.568410][ T4607] device veth0_macvtap entered promiscuous mode [ 130.629820][ T4607] device veth1_macvtap entered promiscuous mode [ 130.680620][ T4846] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 130.690882][ T4846] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.213: invalid indirect mapped block 2683928664 (level 1) [ 130.867666][ T4855] fuse: Bad value for 'fd' [ 131.420718][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.429986][ T4846] EXT4-fs (loop3): 1 truncate cleaned up [ 131.435689][ T4846] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,grpjquota=,data_err=ignore,jqfmt=vfsold,jqfmt=vfsv0,usrjquota=.obj_type=cê€oup.contrs,errors=continue. Quota mode: writeback. [ 131.460108][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.477033][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.486925][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.495741][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.514282][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.582404][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.592696][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.599532][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.608292][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.627645][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.638958][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.656078][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.669431][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.688014][ T4607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.705931][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.759353][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.779602][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.836308][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.859478][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 131.868972][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.956233][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.977033][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.979585][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 131.988568][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.067750][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.071028][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=0000, bcdDevice= 0.00 [ 132.131545][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.161935][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.202660][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.210622][ T4607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.226024][ T7] usb 5-1: config 0 descriptor?? [ 132.234517][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.251939][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.288340][ T4607] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.306691][ T4607] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.312387][ T7] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 132.324415][ T4607] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.357454][ T4607] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.382844][ T3951] udevd[3951]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.470745][ T4865] netlink: 48 bytes leftover after parsing attributes in process `syz.1.218'. [ 132.623766][ T4142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.645769][ T4142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.661892][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.668193][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.751511][ T3634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.889363][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.921784][ T3634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.058166][ T4869] No such timeout policy "syz0" [ 133.570160][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.915697][ T4873] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 134.829936][ T3609] usb 5-1: USB disconnect, device number 7 [ 134.850476][ T4859] ALSA: mixer_oss: invalid OSS volume '' [ 134.913696][ T4880] loop4: detected capacity change from 0 to 1024 [ 134.923211][ T25] audit: type=1326 audit(1723666138.587:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.2.220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x0 [ 135.013194][ T4880] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 135.063509][ T4889] netlink: 'syz.1.219': attribute type 10 has an invalid length. [ 135.093562][ T4889] netlink: 164 bytes leftover after parsing attributes in process `syz.1.219'. [ 135.498590][ T3607] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.942391][ T4899] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.093011][ T4902] loop1: detected capacity change from 0 to 16 [ 136.193358][ T4905] loop4: detected capacity change from 0 to 256 [ 136.292378][ T4902] erofs: (device loop1): mounted with root inode @ nid 36. [ 137.462613][ T4906] loop2: detected capacity change from 0 to 256 [ 137.471197][ T3607] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 137.479367][ T3607] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.578721][ T3607] usb 1-1: config 0 has no interface number 0 [ 137.585769][ T3607] usb 1-1: config 0 interface 18 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.604468][ T25] audit: type=1800 audit(1723666141.267:16): pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.223" name="bus" dev="loop4" ino=1048597 res=0 errno=0 [ 138.263736][ T4906] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 138.344984][ T3607] usb 1-1: string descriptor 0 read error: -71 [ 138.351273][ T3607] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 138.361038][ T3607] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 138.373329][ T3607] usb 1-1: config 0 descriptor?? [ 138.633648][ T3607] usb 1-1: can't set config #0, error -71 [ 138.861833][ T4920] fuse: Bad value for 'fd' [ 138.902338][ T3607] usb 1-1: USB disconnect, device number 3 [ 139.924798][ T4916] IPv6: addrconf: prefix option has invalid lifetime [ 140.121413][ T4936] loop2: detected capacity change from 0 to 128 [ 140.196171][ T4936] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 140.817504][ T4936] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.093298][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.149034][ T4953] loop3: detected capacity change from 0 to 512 [ 141.169628][ T3578] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.217022][ T4957] autofs4:pid:4957:autofs_fill_super: called with bogus options [ 141.935417][ T4957] loop2: detected capacity change from 0 to 32768 [ 142.034849][ T4953] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.236: Invalid inode bitmap blk 4 in block_group 0 [ 142.059494][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 142.103907][ T4957] XFS (loop2): Mounting V5 Filesystem [ 142.119970][ T4953] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000080007f,noload,nobarrier,nodiscard,,errors=continue. Quota mode: none. [ 142.179609][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 142.193157][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=0000, bcdDevice= 0.00 [ 142.207610][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.269662][ T3578] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 142.277663][ T3578] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 142.289886][ T13] usb 1-1: config 0 descriptor?? [ 142.298203][ T3578] usb 5-1: config 1 has no interface number 1 [ 142.311173][ T3578] usb 5-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 142.331412][ T13] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 142.362758][ T3578] usb 5-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 142.385151][ T3578] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.412701][ T4957] XFS (loop2): Ending clean mount [ 142.543481][ T25] audit: type=1326 audit(1723666146.207:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4973 comm="syz.3.238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c8a2e19f9 code=0x0 [ 142.567950][ T3578] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.584612][ T3578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.595708][ T3578] usb 5-1: Product: syz [ 142.600072][ T3578] usb 5-1: Manufacturer: syz [ 142.605306][ T3578] usb 5-1: SerialNumber: syz [ 142.815418][ T4607] XFS (loop2): Unmounting Filesystem [ 142.952177][ T4979] No such timeout policy "syz0" [ 143.578799][ T4984] loop1: detected capacity change from 0 to 256 [ 143.752888][ T3578] hub 5-1:1.3: bad descriptor, ignoring hub [ 143.794054][ T3578] hub: probe of 5-1:1.3 failed with error -5 [ 143.815670][ T4984] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 144.259636][ T3578] usb 5-1: USB disconnect, device number 8 [ 144.434677][ T4993] fuse: Bad value for 'fd' [ 144.954024][ T3642] usb 1-1: USB disconnect, device number 4 [ 145.070363][ T4995] loop2: detected capacity change from 0 to 16 [ 145.133566][ T5000] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 145.170398][ T4995] erofs: (device loop2): mounted with root inode @ nid 36. [ 145.189685][ T5000] netlink: 60 bytes leftover after parsing attributes in process `syz.0.245'. [ 146.357537][ T3643] udevd[3643]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.670427][ T5006] loop3: detected capacity change from 0 to 40427 [ 146.702036][ T5008] xt_limit: Overflow, try lower: 6/2147483648 [ 147.572805][ T5006] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 147.580463][ T5006] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 147.609675][ T5006] F2FS-fs (loop3): Unrecognized mount option "batadv_slave_1" or missing value [ 147.693106][ T5020] loop4: detected capacity change from 0 to 256 [ 147.853242][ T5020] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 147.899503][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.859554][ T13] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 148.868604][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.959047][ T13] usb 1-1: config 0 descriptor?? [ 149.062911][ T13] cp210x 1-1:0.0: cp210x converter detected [ 149.148398][ T5034] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 149.183676][ T25] audit: type=1326 audit(1723666152.847:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.2.256" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x0 [ 149.205205][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.271161][ T5037] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 149.313165][ T5058] netlink: 44 bytes leftover after parsing attributes in process `syz.0.251'. [ 149.364031][ T5058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.251'. [ 149.557384][ T25] audit: type=1326 audit(1723666153.217:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5063 comm="syz.1.258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9eebc89f9 code=0x0 [ 149.619928][ T13] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 149.634908][ T13] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 149.839516][ T25] audit: type=1326 audit(1723666153.477:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5063 comm="syz.1.258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9eebc89f9 code=0x0 [ 149.924776][ T13] usb 1-1: cp210x converter now attached to ttyUSB0 [ 149.936685][ T13] usb 1-1: USB disconnect, device number 5 [ 149.945834][ T5069] netlink: 5 bytes leftover after parsing attributes in process `syz.1.258'. [ 149.948137][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 150.009827][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 150.044208][ T13] cp210x 1-1:0.0: device disconnected [ 150.099289][ T5072] loop2: detected capacity change from 0 to 16 [ 150.177430][ T5072] erofs: (device loop2): mounted with root inode @ nid 36. [ 151.355776][ T5086] xt_limit: Overflow, try lower: 6/2147483648 [ 153.258803][ T5074] delete_channel: no stack [ 154.163988][ T5095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.252828][ T5095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 154.473281][ T5095] device bridge_slave_1 left promiscuous mode [ 154.480155][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.570852][ T5107] netlink: 'syz.1.266': attribute type 25 has an invalid length. [ 154.713312][ T5106] loop4: detected capacity change from 0 to 1024 [ 154.836036][ T5095] bridge1: port 1(bridge_slave_1) entered blocking state [ 155.144362][ T5106] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 155.156285][ T5095] bridge1: port 1(bridge_slave_1) entered disabled state [ 155.204552][ T5106] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 155.210575][ T5095] device bridge_slave_1 entered promiscuous mode [ 155.259772][ T5106] EXT4-fs (loop4): group descriptors corrupted! [ 155.394150][ T5106] netlink: 60 bytes leftover after parsing attributes in process `syz.4.267'. [ 155.524955][ T5115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 155.535831][ T5115] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 156.310367][ T5120] loop4: detected capacity change from 0 to 256 [ 156.568800][ T5123] loop2: detected capacity change from 0 to 65536 [ 156.675919][ T5120] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 156.745868][ T5123] XFS (loop2): Mounting V5 Filesystem [ 156.824185][ T5123] XFS (loop2): Ending clean mount [ 156.837070][ T5123] XFS (loop2): Quotacheck needed: Please wait. [ 157.092924][ T5123] XFS (loop2): Quotacheck: Done. [ 158.914306][ T5144] sd 0:0:1:0: device reset [ 159.002123][ T5141] fuse: Bad value for 'fd' [ 159.811965][ T4607] XFS (loop2): Unmounting Filesystem [ 159.906343][ T5152] loop4: detected capacity change from 0 to 16 [ 160.063130][ T5152] erofs: (device loop4): mounted with root inode @ nid 36. [ 160.536579][ T5156] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 160.578629][ T5156] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -27 in[61, 4035] out[1851] [ 160.594426][ T5156] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 160.951225][ T5163] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 161.940764][ T5171] loop0: detected capacity change from 0 to 16 [ 161.942805][ T5173] loop1: detected capacity change from 0 to 16 [ 161.980598][ T5173] erofs: (device loop1): mounted with root inode @ nid 36. [ 162.205211][ T5155] chnl_net:caif_netlink_parms(): no params data found [ 162.212395][ T5171] erofs: (device loop0): mounted with root inode @ nid 36. [ 162.892994][ T3615] Bluetooth: hci2: command 0x0409 tx timeout [ 163.294037][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.307651][ T5155] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.316772][ T5155] device bridge_slave_0 entered promiscuous mode [ 164.140187][ T25] audit: type=1400 audit(1723666167.067:21): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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bridge0: port 2(bridge_slave_1) entered blocking state [ 164.979556][ T3615] Bluetooth: hci2: command 0x041b tx timeout [ 165.097926][ T5155] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.107038][ T5155] device bridge_slave_1 entered promiscuous mode [ 165.124103][ T5188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.287'. [ 166.070690][ T5155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.122143][ T5155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.175864][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 166.193000][ T5207] loop1: detected capacity change from 0 to 64 [ 166.249668][ T5155] team0: Port device team_slave_0 added [ 166.282654][ T5155] team0: Port device team_slave_1 added [ 166.489482][ T5155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.506665][ T5155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.259815][ T2987] Bluetooth: hci2: command 0x040f tx timeout [ 167.267359][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 167.402356][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 167.419083][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 167.429519][ T5155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.486532][ T5155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.516710][ T5155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.614402][ T5155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.628748][ T21] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 167.640098][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.648173][ T21] usb 1-1: Product: syz [ 167.658465][ T21] usb 1-1: Manufacturer: syz [ 167.664159][ T5217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.668580][ T21] usb 1-1: SerialNumber: syz [ 167.696620][ T21] usb 1-1: config 0 descriptor?? [ 167.874699][ T21] opticon 1-1:0.0: opticon converter detected [ 167.892510][ T21] usb 1-1: opticon converter now attached to ttyUSB0 [ 167.938795][ T5155] device hsr_slave_0 entered promiscuous mode [ 168.628771][ T3578] usb 1-1: USB disconnect, device number 6 [ 168.656383][ T3578] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 168.705095][ T5228] loop4: detected capacity change from 0 to 16 [ 168.706053][ T3578] opticon 1-1:0.0: device disconnected [ 168.728254][ T5229] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.759655][ T5155] device hsr_slave_1 entered promiscuous mode [ 168.818781][ T5228] erofs: (device loop4): mounted with root inode @ nid 36. [ 169.118777][ T5155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.145975][ T25] audit: type=1326 audit(1723666172.807:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz.2.299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x0 [ 169.210634][ T5155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.267662][ T5155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.290238][ T3610] Bluetooth: hci2: command 0x0419 tx timeout [ 169.329082][ T5155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.622976][ T5155] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.883708][ T5155] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.090120][ T5155] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.383313][ T5155] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.661809][ T5247] loop4: detected capacity change from 0 to 65536 [ 170.712676][ T5249] loop0: detected capacity change from 0 to 512 [ 170.861841][ T5249] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.873160][ T5249] ext4 filesystem being mounted at /34/bus supports timestamps until 2038 (0x7fffffff) [ 171.040307][ T5247] XFS (loop4): Mounting V5 Filesystem [ 171.047099][ T5155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.636822][ T5155] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.678408][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.690734][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.740577][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.764576][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.779173][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.786262][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.798446][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.807290][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.822100][ T5273] tipc: Failed to remove unknown binding: 66,1,1/0:197960629/197960631 [ 171.834802][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.841900][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.859621][ T5273] tipc: Failed to remove unknown binding: 66,1,1/0:197960629/197960631 [ 171.863213][ T5247] XFS (loop4): Ending clean mount [ 171.874822][ T5247] XFS (loop4): Quotacheck needed: Please wait. [ 172.043054][ T5247] XFS (loop4): Quotacheck: Done. [ 172.115469][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.166550][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.363699][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.513659][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.522862][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.594455][ T5277] loop2: detected capacity change from 0 to 164 [ 172.675722][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.696784][ T5155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.897509][ T5281] sd 0:0:1:0: device reset [ 172.960408][ T5277] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 173.328924][ T3577] XFS (loop4): Unmounting Filesystem [ 173.389562][ T5155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.436645][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.452974][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.472765][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.474073][ T5284] loop0: detected capacity change from 0 to 512 [ 173.481367][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.495646][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.507955][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.519630][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.708580][ T5284] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.729497][ T5284] ext4 filesystem being mounted at /36/bus supports timestamps until 2038 (0x7fffffff) [ 173.736603][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.845572][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.872254][ T5155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.459181][ T5155] device veth0_vlan entered promiscuous mode [ 174.489256][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.519737][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.528515][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.571579][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.589007][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.626699][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.652701][ T5155] device veth1_vlan entered promiscuous mode [ 174.736741][ T5314] loop2: detected capacity change from 0 to 1024 [ 174.743405][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.796539][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.807485][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.829568][ T5155] device veth0_macvtap entered promiscuous mode [ 174.993557][ T5155] device veth1_macvtap entered promiscuous mode [ 175.392207][ T25] audit: type=1326 audit(1723666691.030:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ff00000 [ 175.640707][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.659524][ T25] audit: type=1326 audit(1723666691.030:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ff00000 [ 175.729165][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.766020][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.800082][ T25] audit: type=1326 audit(1723666691.030:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ff00000 [ 175.853732][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.876202][ T25] audit: type=1326 audit(1723666691.030:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ff00000 [ 175.877890][ T5305] loop0: detected capacity change from 0 to 40427 [ 175.906263][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.918079][ T25] audit: type=1326 audit(1723666691.030:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ff00000 [ 175.924183][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.957127][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.959876][ T5312] loop4: detected capacity change from 0 to 32768 [ 175.967620][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.967640][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.974791][ T25] audit: type=1326 audit(1723666691.030:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ff00000 [ 175.990494][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.995242][ T25] audit: type=1326 audit(1723666691.030:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ff00000 [ 176.018814][ T5155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.048656][ T25] audit: type=1326 audit(1723666691.030:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ff00000 [ 176.078677][ T25] audit: type=1326 audit(1723666691.030:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ff00000 [ 176.090712][ T5305] F2FS-fs (loop0): invalid crc value [ 176.131270][ T5312] jfs: Unrecognized mount option "jfs" or missing value [ 176.151264][ T25] audit: type=1326 audit(1723666691.030:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ff00000 [ 176.187174][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.200299][ T5305] F2FS-fs (loop0): Found nat_bits in checkpoint [ 176.217493][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.242818][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.279314][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.308122][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.342724][ T5305] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 176.353801][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.375376][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.389015][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.399464][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.410445][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.420816][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.432097][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.449779][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.552976][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.599119][ T5155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.626354][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.645802][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.726563][ T5333] dlm: no local IP address has been set [ 176.732774][ T5333] dlm: cannot start dlm midcomms -107 [ 177.231948][ T5155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.244568][ T5155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.253388][ T5155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.265412][ T4187] attempt to access beyond end of device [ 177.265412][ T4187] loop0: rw=2049, want=45112, limit=40427 [ 177.278442][ T5155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.164215][ T5341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.166393][ T3898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.203577][ T5344] netlink: 72 bytes leftover after parsing attributes in process `syz.4.322'. [ 178.212601][ T3898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.223944][ T5343] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 178.242231][ T3663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.270436][ T3663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.288753][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.330522][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.732043][ T3607] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.895355][ T5361] loop1: detected capacity change from 0 to 16 [ 178.993342][ T3607] usb 4-1: Using ep0 maxpacket: 16 [ 179.000525][ T5359] loop0: detected capacity change from 0 to 65536 [ 179.006110][ T5361] erofs: (device loop1): mounted with root inode @ nid 36. [ 179.120375][ T3607] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 179.168070][ T3607] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 179.171346][ T5365] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 179.216637][ T3607] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 179.225884][ T3607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.266117][ T3607] usb 4-1: config 0 descriptor?? [ 179.276325][ T5359] XFS (loop0): Mounting V5 Filesystem [ 179.302862][ T5359] XFS (loop0): Ending clean mount [ 179.309145][ T5359] XFS (loop0): Quotacheck needed: Please wait. [ 179.353405][ T5365] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -27 in[61, 4035] out[1851] [ 179.490006][ T5357] loop4: detected capacity change from 0 to 32768 [ 179.496610][ T5359] XFS (loop0): Quotacheck: Done. [ 179.516212][ T5365] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 180.184182][ T5377] sd 0:0:1:0: device reset [ 180.191117][ T5378] udc-core: couldn't find an available UDC or it's busy [ 180.198127][ T5378] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 180.441955][ T5357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.326'. [ 180.499502][ T5381] tap0: tun_chr_ioctl cmd 1074025677 [ 180.564408][ T5376] loop3: detected capacity change from 0 to 512 [ 180.580625][ T5381] tap0: linktype set to 270 [ 180.596606][ T5357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.326'. [ 180.625040][ T4187] XFS (loop0): Unmounting Filesystem [ 180.635781][ T5376] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 180.642994][ T5376] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 180.682211][ T5376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 180.690276][ T5376] System zones: 1-12 [ 180.691188][ T5385] loop2: detected capacity change from 0 to 512 [ 180.703147][ T5376] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.279: corrupted in-inode xattr [ 180.715847][ T5376] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.279: couldn't read orphan inode 15 (err -117) [ 180.728726][ T5376] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 180.810100][ T5385] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.827775][ T5385] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 180.830347][ T5391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 180.878771][ T5385] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 180.889992][ T5385] System zones: 0-2, 18-18, 34-34 [ 180.897184][ T5394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.331'. [ 180.936829][ T5385] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 181.058177][ T5385] EXT4-fs (loop2): 1 truncate cleaned up [ 181.065648][ T5385] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.123556][ T25] kauditd_printk_skb: 58 callbacks suppressed [ 181.123570][ T25] audit: type=1326 audit(1723666696.790:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ffc0000 [ 181.252833][ T5399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.272350][ T25] audit: type=1326 audit(1723666696.840:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ffc0000 [ 181.382347][ T25] audit: type=1326 audit(1723666696.840:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21cef449f9 code=0x7ffc0000 [ 181.499578][ T25] audit: type=1326 audit(1723666696.840:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ffc0000 [ 181.575561][ T25] audit: type=1326 audit(1723666696.840:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ffc0000 [ 181.606191][ T25] audit: type=1326 audit(1723666696.840:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21cef449f9 code=0x7ffc0000 [ 181.733391][ T5408] loop2: detected capacity change from 0 to 512 [ 181.753434][ T25] audit: type=1326 audit(1723666696.840:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ffc0000 [ 181.810907][ T25] audit: type=1326 audit(1723666696.840:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ffc0000 [ 181.989796][ T5408] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.335: inode #1: comm syz.2.335: iget: illegal inode # [ 182.070048][ T5419] netlink: 'syz.0.330': attribute type 25 has an invalid length. [ 182.594481][ T5408] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.335: error while reading EA inode 1 err=-117 [ 182.704242][ T5408] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 182.759657][ T5408] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.335: inode #1: comm syz.2.335: iget: illegal inode # [ 182.790881][ T25] audit: type=1326 audit(1723666696.840:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f21cef449f9 code=0x7ffc0000 [ 182.816304][ T5415] overlayfs: invalid redirect ((null)) [ 182.825022][ T5423] loop0: detected capacity change from 0 to 512 [ 182.865685][ T5408] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.335: error while reading EA inode 1 err=-117 [ 182.883036][ T25] audit: type=1326 audit(1723666696.840:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5384 comm="syz.2.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cef449f9 code=0x7ffc0000 [ 182.914876][ T5423] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 182.922473][ T5408] EXT4-fs (loop2): 1 orphan inode deleted [ 182.933217][ T5423] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 182.969987][ T5408] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000200,usrjquota=,,errors=continue. Quota mode: none. [ 183.020727][ T5423] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 183.028672][ T5423] System zones: 1-12 [ 183.112695][ T5423] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.338: corrupted in-inode xattr [ 183.135704][ T5428] loop4: detected capacity change from 0 to 256 [ 183.191250][ T5428] FAT-fs (loop4): Unrecognized mount option "codepage=<66" or missing value [ 183.283909][ T5423] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.338: couldn't read orphan inode 15 (err -117) [ 183.325924][ T5423] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 183.627400][ T5423] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz.0.338: No space for directory leaf checksum. Please run e2fsck -D. [ 183.666185][ T5423] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #11: comm syz.0.338: checksumming directory block 0 [ 183.802966][ T4187] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5789: Out of memory [ 183.895958][ T4187] EXT4-fs error (device loop0): ext4_dirty_inode:5993: inode #2: comm syz-executor: mark_inode_dirty error [ 183.915629][ T4187] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 183.955744][ T4187] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 183.972732][ T4187] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 183.989126][ T3578] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 183.997185][ T4187] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 184.014190][ T4187] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 184.030335][ T4187] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 2048 [ 184.045017][ T4187] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 184.079497][ T4187] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 3072 [ 184.137108][ T4187] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 184.159734][ T3607] usbhid 4-1:0.0: can't add hid device: -71 [ 184.179574][ T3607] usbhid: probe of 4-1:0.0 failed with error -71 [ 184.217342][ T3607] usb 4-1: USB disconnect, device number 10 [ 184.227311][ T4187] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 4096 [ 184.267787][ T4187] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 184.315859][ T4187] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 5120 [ 184.337164][ T4187] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 184.736655][ T5435] loop1: detected capacity change from 0 to 65536 [ 184.761661][ T4187] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 6144 [ 184.783188][ T4187] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 184.817841][ T4187] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 184.836143][ T5442] smc: net device vlan0 applied user defined pnetid SYZ1 [ 184.846150][ T5442] smc: net device bridge_slave_0 applied user defined pnetid SYZ1 [ 184.857089][ T5444] netlink: 192 bytes leftover after parsing attributes in process `syz.3.344'. [ 184.929649][ T3578] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 184.941293][ T3578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.945323][ T5444] netlink: 192 bytes leftover after parsing attributes in process `syz.3.344'. [ 184.952411][ T3578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.971062][ T5435] XFS (loop1): Mounting V5 Filesystem [ 184.971149][ T3578] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 184.995928][ T5442] PM: Enabling pm_trace changes system date and time during resume. [ 184.995928][ T5442] PM: Correct system time has to be restored manually after resume. [ 185.044503][ T3578] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 185.080761][ T3578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.085897][ T5435] XFS (loop1): Ending clean mount [ 185.090736][ T3578] usb 5-1: config 0 descriptor?? [ 185.105537][ T5435] XFS (loop1): Quotacheck needed: Please wait. [ 185.167831][ T5435] XFS (loop1): Quotacheck: Done. [ 185.400814][ T5459] sd 0:0:1:0: device reset [ 185.842797][ T3578] kye 0003:0458:501A.0001: unknown main item tag 0x0 [ 185.866660][ T3566] XFS (loop1): Unmounting Filesystem [ 185.910376][ T3578] kye 0003:0458:501A.0001: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 185.963150][ T3578] kye 0003:0458:501A.0001: tablet-enabling feature report not found [ 186.018071][ T3578] kye 0003:0458:501A.0001: tablet enabling failed [ 186.135491][ T3578] usb 5-1: USB disconnect, device number 9 [ 186.288689][ T5463] device veth0_vlan left promiscuous mode [ 186.339604][ T3615] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 186.538233][ T5467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 186.731526][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.753055][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.767484][ T3615] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.789625][ T3615] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 186.813108][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.864843][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.908195][ T3615] usb 3-1: config 0 descriptor?? [ 187.103270][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.127413][ T5477] IPv4: Oversized IP packet from 127.202.26.0 [ 187.306447][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.476641][ T3615] acrux 0003:1A34:0802.0002: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 187.489558][ T3615] acrux 0003:1A34:0802.0002: no inputs found [ 187.496639][ T3615] acrux 0003:1A34:0802.0002: Failed to enable force feedback support, error: -19 [ 187.571046][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.106362][ T5491] loop3: detected capacity change from 0 to 256 [ 188.146013][ T5479] chnl_net:caif_netlink_parms(): no params data found [ 188.160110][ T5491] exfat: Deprecated parameter 'namecase' [ 188.224565][ T5491] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 188.499018][ T5504] loop1: detected capacity change from 0 to 512 [ 188.540567][ T5491] attempt to access beyond end of device [ 188.540567][ T5491] loop3: rw=524288, want=34359738496, limit=256 [ 188.654232][ T5479] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.679605][ T3615] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 188.697752][ T5479] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.734669][ T5479] device bridge_slave_0 entered promiscuous mode [ 188.745972][ T5504] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 188.765364][ T5479] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.773415][ T5479] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.783091][ T5479] device bridge_slave_1 entered promiscuous mode [ 188.814688][ T5491] attempt to access beyond end of device [ 188.814688][ T5491] loop3: rw=0, want=34359738496, limit=256 [ 188.868009][ T5479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.875911][ T5526] loop2: detected capacity change from 0 to 16 [ 188.903103][ T5479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.928635][ T25] kauditd_printk_skb: 33 callbacks suppressed [ 188.928649][ T25] audit: type=1800 audit(1723666704.590:134): pid=5491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.355" name="file1" dev="loop3" ino=1048603 res=0 errno=0 [ 188.962717][ T5526] erofs: (device loop2): mounted with root inode @ nid 36. [ 188.992365][ T5504] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 189.142093][ T5504] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.357: Corrupt directory, running e2fsck is recommended [ 189.371375][ T3607] Bluetooth: hci1: command 0x0409 tx timeout [ 189.582238][ T3574] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000] [ 189.618341][ T5530] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[8192] [ 189.764180][ T3606] usb 3-1: USB disconnect, device number 5 [ 189.819115][ T25] audit: type=1800 audit(1723666705.310:135): pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.358" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 189.819646][ T5504] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 189.849508][ T5504] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.357: corrupted in-inode xattr [ 189.875207][ T5504] EXT4-fs (loop1): Remounting filesystem read-only [ 189.896002][ T5479] team0: Port device team_slave_0 added [ 189.957030][ T154] device bridge_slave_1 left promiscuous mode [ 189.989664][ T5504] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.357: couldn't read orphan inode 15 (err -117) [ 190.010983][ T154] bridge1: port 1(bridge_slave_1) entered disabled state [ 190.214520][ T5504] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,nojournal_checksum,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 190.214531][ T154] device hsr_slave_0 left promiscuous mode [ 190.250765][ T154] device hsr_slave_1 left promiscuous mode [ 190.257196][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.375416][ T5540] loop3: detected capacity change from 0 to 164 [ 190.910406][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.921076][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.928785][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.941326][ T154] device bridge_slave_0 left promiscuous mode [ 190.942907][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 190.947535][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.976446][ T5538] Unsupported NM flag settings (8) [ 191.102750][ T154] device veth1_macvtap left promiscuous mode [ 191.109804][ T154] device veth0_macvtap left promiscuous mode [ 191.116141][ T154] device veth1_vlan left promiscuous mode [ 191.124531][ T154] device veth0_vlan left promiscuous mode [ 191.151087][ T5504] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 191.270287][ T5504] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 191.373676][ T5504] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.357: Corrupt directory, running e2fsck is recommended [ 191.414941][ T5504] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 191.498339][ T5504] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 191.502568][ T5553] loop2: detected capacity change from 0 to 1024 [ 191.526840][ T5504] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.357: Corrupt directory, running e2fsck is recommended [ 191.560957][ T5553] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 191.582122][ T5553] JBD2: no valid journal superblock found [ 191.587872][ T5553] EXT4-fs (loop2): error loading journal [ 191.599588][ T5504] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 3: comm syz.1.357: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 191.618310][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.658613][ T5562] loop4: detected capacity change from 0 to 2048 [ 191.668650][ T5504] EXT4-fs (loop1): Remounting filesystem read-only [ 191.704229][ T5550] dccp_close: ABORT with 80 bytes unread [ 191.715139][ T5562] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 191.763919][ T5562] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 191.859451][ T3607] Bluetooth: hci1: command 0x041b tx timeout [ 191.965878][ T154] team0 (unregistering): Port device team_slave_1 removed [ 192.030291][ T154] team0 (unregistering): Port device team_slave_0 removed [ 192.064745][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.093997][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.131392][ T5566] loop2: detected capacity change from 0 to 40427 [ 192.180230][ T154] bond0 (unregistering): Released all slaves [ 192.209776][ T5566] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 192.216751][ T5566] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 192.230580][ T5566] F2FS-fs (loop2): Unrecognized mount option "ÿ" or missing value [ 192.249959][ T5479] team0: Port device team_slave_1 added [ 192.281222][ T5549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.364'. [ 192.360700][ T5479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.367664][ T5479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.403010][ T3577] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /76/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=117440527, rec_len=0, size=2048 fake=0 [ 192.476231][ T5479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.494082][ T3577] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 192.516008][ T5479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.520451][ T5571] netlink: 100 bytes leftover after parsing attributes in process `syz.3.372'. [ 192.532661][ T5479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.608946][ T5479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.707064][ T5571] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 192.765391][ T5479] device hsr_slave_0 entered promiscuous mode [ 193.048332][ T5479] device hsr_slave_1 entered promiscuous mode [ 193.069783][ T25] audit: type=1326 audit(1723666708.730:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9eebc89f9 code=0x0 [ 193.112283][ T5479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.171273][ T5479] Cannot create hsr debugfs directory [ 193.422793][ T5594] loop2: detected capacity change from 0 to 1024 [ 193.463961][ T5590] loop4: detected capacity change from 0 to 64 [ 193.499495][ T2987] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 193.537373][ T5594] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 193.879531][ T2987] usb 4-1: Using ep0 maxpacket: 16 [ 193.965440][ T3615] Bluetooth: hci1: command 0x040f tx timeout [ 194.049497][ T2987] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 194.092307][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.098634][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.120847][ T5608] loop1: detected capacity change from 0 to 16 [ 194.184166][ T2987] usb 4-1: config 0 has no interface number 0 [ 194.209680][ T2987] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 194.238316][ T5608] erofs: (device loop1): mounted with root inode @ nid 36. [ 194.469697][ T2987] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 194.492663][ T5613] loop2: detected capacity change from 0 to 16 [ 194.500021][ T2987] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 194.508219][ T2987] usb 4-1: Product: syz [ 194.512443][ T2987] usb 4-1: SerialNumber: syz [ 195.009984][ T2987] usb 4-1: config 0 descriptor?? [ 195.029549][ T5613] erofs: (device loop2): mounted with root inode @ nid 36. [ 195.048085][ T5616] loop4: detected capacity change from 0 to 512 [ 195.057578][ T2987] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 195.404101][ T5616] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.377: inode #1: comm syz.4.377: iget: illegal inode # [ 195.627822][ T5616] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.377: error while reading EA inode 1 err=-117 [ 195.729996][ T5616] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.377: inode #1: comm syz.4.377: iget: illegal inode # [ 195.761525][ T5479] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 195.786216][ T5479] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.792406][ T5616] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.377: error while reading EA inode 1 err=-117 [ 195.813982][ T5479] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 195.846958][ T5479] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.870052][ T5616] EXT4-fs (loop4): 1 orphan inode deleted [ 195.919490][ T3578] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 195.935480][ T5616] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000200,usrjquota=,,errors=continue. Quota mode: none. [ 195.977103][ T13] usb 4-1: USB disconnect, device number 11 [ 196.092212][ T5479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.130016][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.142897][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.167191][ T5479] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.188000][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.206966][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.235352][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.242465][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.342370][ T25] audit: type=1800 audit(1723666712.000:137): pid=5644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.377" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 196.669613][ T3578] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 196.679876][ T5643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.683965][ T5647] loop1: detected capacity change from 0 to 512 [ 196.695965][ T3607] Bluetooth: hci1: command 0x0419 tx timeout [ 196.701915][ T3578] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 196.716136][ T3578] usb 3-1: config 1 has no interface number 1 [ 196.723042][ T3578] usb 3-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 196.744312][ T3578] usb 3-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 196.760136][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.768186][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.785813][ T3578] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.797604][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.846224][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.853339][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.905252][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.979782][ T3578] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.979812][ T3578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.979832][ T3578] usb 3-1: Product: syz [ 196.979846][ T3578] usb 3-1: Manufacturer: syz [ 196.979860][ T3578] usb 3-1: SerialNumber: syz [ 197.078991][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.107758][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.109573][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.110216][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.110853][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.111383][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.111826][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.112321][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.112765][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.113309][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.134218][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.141697][ T5647] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.390: inode #1: comm syz.1.390: iget: illegal inode # [ 197.142194][ T5647] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.390: error while reading EA inode 1 err=-117 [ 197.142626][ T5647] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.390: inode #1: comm syz.1.390: iget: illegal inode # [ 197.142956][ T5647] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.390: error while reading EA inode 1 err=-117 [ 197.143647][ T5647] EXT4-fs (loop1): 1 orphan inode deleted [ 197.143669][ T5647] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000200,usrjquota=,,errors=continue. Quota mode: none. [ 197.843077][ T25] audit: type=1800 audit(1723666713.500:138): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.390" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 197.987289][ T3578] hub 3-1:1.3: bad descriptor, ignoring hub [ 197.987317][ T3578] hub: probe of 3-1:1.3 failed with error -5 [ 198.055693][ T3578] usb 3-1: USB disconnect, device number 6 [ 198.139322][ T5673] netlink: 47 bytes leftover after parsing attributes in process `syz.3.384'. [ 198.217835][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.217962][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.254943][ T5479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.381970][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.382623][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.401814][ T3643] udevd[3643]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.416094][ T25] audit: type=1326 audit(1723666714.080:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.3.385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7247a8d9f9 code=0x0 [ 198.461077][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.461729][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.462414][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.462903][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.477727][ T5479] device veth0_vlan entered promiscuous mode [ 198.522142][ T5479] device veth1_vlan entered promiscuous mode [ 198.555472][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.556088][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.556677][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.557209][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.572982][ T5479] device veth0_macvtap entered promiscuous mode [ 198.591092][ T5479] device veth1_macvtap entered promiscuous mode [ 198.633986][ T5479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.634018][ T5479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.634027][ T5479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.634039][ T5479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.634049][ T5479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.634061][ T5479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.634071][ T5479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.634083][ T5479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.634093][ T5479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.634105][ T5479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.641330][ T5479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.641450][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.642118][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.642644][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.643178][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.701484][ T5479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.701504][ T5479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.701511][ T5479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.701520][ T5479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.701529][ T5479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.701538][ T5479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.701547][ T5479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.701556][ T5479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.701566][ T5479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.701574][ T5479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.702709][ T5479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.702810][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.703352][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.709255][ T5479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.709287][ T5479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.709312][ T5479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.709337][ T5479] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.119805][ T3607] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 199.367201][ T3749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.367263][ T3749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.401660][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.412596][ T5698] loop3: detected capacity change from 0 to 16 [ 199.435921][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.436172][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.448361][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.469599][ T5698] erofs: (device loop3): mounted with root inode @ nid 36. [ 199.544270][ T3607] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.544322][ T3607] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.544349][ T3607] usb 2-1: config 1 interface 1 has no altsetting 0 [ 200.100916][ T3607] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.100947][ T3607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.100966][ T3607] usb 2-1: Product: syz [ 200.100980][ T3607] usb 2-1: Manufacturer: syz [ 200.100994][ T3607] usb 2-1: SerialNumber: syz [ 200.142929][ T3607] usb 2-1: selecting invalid altsetting 1 [ 200.142954][ T3607] usb 2-1: selecting invalid altsetting 0 [ 200.143040][ T3607] usb 2-1: selecting invalid altsetting 0 [ 200.143100][ T3607] cdc_ncm 2-1:1.0: bind() failure [ 200.150639][ T3607] usb 2-1: selecting invalid altsetting 0 [ 200.150670][ T3607] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 200.150834][ T3607] usb 2-1: selecting invalid altsetting 0 [ 200.150856][ T3607] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 200.152082][ T3607] usb 2-1: selecting invalid altsetting 0 [ 200.152106][ T3607] usbtest: probe of 2-1:1.1 failed with error -22 [ 200.319584][ T3609] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 200.477263][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.930493][ T5722] IPv4: Oversized IP packet from 127.202.26.0 [ 201.169433][ T3609] usb 3-1: Using ep0 maxpacket: 16 [ 201.329638][ T3609] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 201.357060][ T3609] usb 3-1: config 0 has no interface number 0 [ 201.379035][ T3609] usb 3-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 201.492052][ T5727] loop3: detected capacity change from 0 to 64 [ 201.569985][ T3609] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 201.585828][ T3609] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 201.595058][ T3609] usb 3-1: Product: syz [ 201.607837][ T3609] usb 3-1: SerialNumber: syz [ 201.622259][ T3609] usb 3-1: config 0 descriptor?? [ 201.660873][ T3609] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 201.701402][ T25] audit: type=1400 audit(1723666717.370:140): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5723 comm="syz.3.391" [ 201.719114][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.812437][ T5731] netlink: 'syz.4.394': attribute type 4 has an invalid length. [ 201.817715][ T5732] IPv4: Oversized IP packet from 127.202.26.0 [ 202.896155][ T13] usb 2-1: USB disconnect, device number 4 [ 203.066534][ T5753] loop0: detected capacity change from 0 to 256 [ 203.435049][ T5762] loop1: detected capacity change from 0 to 16 [ 204.191653][ T5762] erofs: (device loop1): mounted with root inode @ nid 36. [ 204.242748][ T5765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 204.956093][ T3607] usb 3-1: USB disconnect, device number 7 [ 205.073902][ T5775] loop2: detected capacity change from 0 to 512 [ 205.118012][ T25] audit: type=1326 audit(1723666720.780:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 205.163225][ T5777] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 205.197692][ T25] audit: type=1326 audit(1723666720.810:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 205.257960][ T5775] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 205.264751][ T25] audit: type=1326 audit(1723666720.810:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 205.327353][ T5775] EXT4-fs (loop2): orphan cleanup on readonly fs [ 205.353883][ T5783] IPv4: Oversized IP packet from 127.202.26.0 [ 205.380003][ T5775] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 205.402674][ T25] audit: type=1326 audit(1723666720.810:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 205.462902][ T5775] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 205.471975][ T5786] loop1: detected capacity change from 0 to 64 [ 205.504389][ T5775] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.404: bg 0: block 40: padding at end of block bitmap is not set [ 205.534252][ T25] audit: type=1326 audit(1723666720.810:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 205.646176][ T5775] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 205.653914][ T25] audit: type=1326 audit(1723666720.810:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 205.718425][ T5775] EXT4-fs (loop2): 1 truncate cleaned up [ 205.780679][ T5775] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.800316][ T25] audit: type=1326 audit(1723666720.820:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 207.899445][ T3578] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 207.909486][ T25] audit: type=1326 audit(1723666720.820:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 208.019690][ T25] audit: type=1326 audit(1723666720.820:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 208.127360][ T25] audit: type=1326 audit(1723666720.820:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 208.131760][ T5810] netlink: 72 bytes leftover after parsing attributes in process `syz.3.413'. [ 208.203986][ T25] audit: type=1326 audit(1723666720.820:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 208.237092][ T25] audit: type=1326 audit(1723666720.830:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 208.253314][ T5807] loop2: detected capacity change from 0 to 4096 [ 208.270143][ T25] audit: type=1326 audit(1723666720.830:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 208.300008][ T25] audit: type=1326 audit(1723666720.830:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 208.316754][ T5810] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 208.330034][ T25] audit: type=1326 audit(1723666720.830:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 208.364184][ T25] audit: type=1326 audit(1723666720.830:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5776 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc00aad99f9 code=0x7ffc0000 [ 208.387428][ T3578] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.399316][ T5807] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 208.407938][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 208.415965][ T3578] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.429406][ T3578] usb 5-1: config 1 interface 1 has no altsetting 0 [ 208.609668][ T3578] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.628975][ T3578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.629778][ T5815] loop3: detected capacity change from 0 to 16 [ 208.639102][ T3578] usb 5-1: Product: syz [ 208.656021][ T3578] usb 5-1: Manufacturer: syz [ 208.669462][ T3578] usb 5-1: SerialNumber: syz [ 208.684899][ T5804] loop1: detected capacity change from 0 to 32768 [ 208.699520][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 208.710575][ T3578] usb 5-1: selecting invalid altsetting 1 [ 208.716674][ T3578] usb 5-1: selecting invalid altsetting 0 [ 208.723631][ T3578] usb 5-1: selecting invalid altsetting 0 [ 208.730896][ T3578] cdc_ncm 5-1:1.0: bind() failure [ 208.742635][ T3578] usb 5-1: selecting invalid altsetting 0 [ 208.753470][ T3578] cdc_ncm: probe of 5-1:1.1 failed with error -22 [ 208.769827][ T3578] usb 5-1: selecting invalid altsetting 0 [ 208.776349][ T3578] cdc_mbim: probe of 5-1:1.1 failed with error -22 [ 208.782711][ T5815] erofs: (device loop3): mounted with root inode @ nid 36. [ 208.789176][ T3578] usb 5-1: selecting invalid altsetting 0 [ 208.802800][ T3578] usbtest: probe of 5-1:1.1 failed with error -22 [ 208.826932][ T5804] XFS (loop1): Mounting V5 Filesystem [ 208.980930][ T26] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 209.185945][ T26] usb 1-1: config 0 has no interface number 0 [ 209.192056][ T5804] XFS (loop1): Ending clean mount [ 209.192617][ T26] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 209.278426][ T5829] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 209.865959][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.871514][ T5804] XFS (loop1): Quotacheck needed: Please wait. [ 209.873310][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.051783][ T3607] usb 5-1: USB disconnect, device number 10 [ 210.094633][ T26] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 210.104908][ T26] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 210.136477][ T26] usb 1-1: Product: syz [ 210.148920][ T5836] IPv4: Oversized IP packet from 127.202.26.0 [ 210.163099][ T26] usb 1-1: SerialNumber: syz [ 210.199482][ T5804] XFS (loop1): Quotacheck: Done. [ 210.201703][ T26] usb 1-1: config 0 descriptor?? [ 210.252603][ T26] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 210.413275][ T5841] loop3: detected capacity change from 0 to 512 [ 210.555231][ T5841] EXT4-fs error (device loop3): ext4_find_extent:929: inode #4: comm syz.3.421: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 210.616283][ T3566] XFS (loop1): Unmounting Filesystem [ 210.705893][ T5841] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 210.745910][ T5841] EXT4-fs (loop3): mount failed [ 210.786525][ T5853] fuse: Unknown parameter 'roo¶§÷l9Ÿç0000000000000000400user_id' [ 211.386553][ T5871] loop4: detected capacity change from 0 to 64 [ 211.480704][ T5869] device syzkaller0 entered promiscuous mode [ 211.514764][ T3578] syzkaller0: tun_net_xmit 48 [ 211.528483][ T5874] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 211.667179][ T5869] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 211.735197][ T5869] syzkaller0: Linktype set failed because interface is up [ 211.881247][ T3609] usb 1-1: USB disconnect, device number 7 [ 211.927475][ T5878] loop0: detected capacity change from 0 to 16 [ 212.094427][ T5878] erofs: (device loop0): mounted with root inode @ nid 36. [ 212.884297][ T5883] device batadv0 entered promiscuous mode [ 212.892528][ T5883] device macsec1 entered promiscuous mode [ 212.928288][ T5883] device batadv0 left promiscuous mode [ 213.008346][ T5889] IPv4: Oversized IP packet from 127.202.26.0 [ 213.382005][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 213.446818][ T5894] loop4: detected capacity change from 0 to 8192 [ 213.690675][ T5907] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.795987][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.866810][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.878765][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.914380][ T5876] device bridge_slave_0 entered promiscuous mode [ 214.009852][ T3578] Bluetooth: hci2: command 0x0409 tx timeout [ 214.092883][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.166079][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.176697][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.208913][ T5876] device bridge_slave_1 entered promiscuous mode [ 214.433504][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.462659][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 214.500004][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.537976][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.633166][ T5914] device syzkaller0 entered promiscuous mode [ 214.649169][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.676002][ T5876] team0: Port device team_slave_0 added [ 214.709134][ T5876] team0: Port device team_slave_1 added [ 214.762310][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.769329][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.797205][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.809825][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.816798][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.843611][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.884652][ T3578] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 214.912418][ T5876] device hsr_slave_0 entered promiscuous mode [ 214.919669][ T5876] device hsr_slave_1 entered promiscuous mode [ 214.926399][ T5876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.943508][ T5876] Cannot create hsr debugfs directory [ 214.985114][ T5933] loop2: detected capacity change from 0 to 16 [ 215.009555][ T3609] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 215.030149][ T5933] erofs: (device loop2): mounted with root inode @ nid 36. [ 215.149572][ T3578] usb 1-1: Using ep0 maxpacket: 8 [ 215.864081][ T3578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.875605][ T3578] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 215.885471][ T3578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.895621][ T3578] usb 1-1: config 0 descriptor?? [ 215.978425][ T3609] usb 2-1: config 1 has an invalid interface number: 3 but max is 2 [ 215.989294][ T3578] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 216.006601][ T3609] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 216.032242][ T5942] loop4: detected capacity change from 0 to 1024 [ 216.035896][ T3578] usb 1-1: Detected SIO [ 216.049534][ T3578] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 216.060640][ T3609] usb 2-1: config 1 has no interface number 1 [ 216.074306][ T3609] usb 2-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 216.086497][ T3578] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 216.108978][ T3609] usb 2-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 216.115146][ T5946] IPv4: Oversized IP packet from 127.202.26.0 [ 216.130211][ T3609] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.162098][ T3578] Bluetooth: hci2: command 0x041b tx timeout [ 216.193826][ T5942] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 216.255350][ T5876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.319565][ T3609] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.328889][ T3609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.338056][ T3609] usb 2-1: Product: syz [ 216.345994][ T3609] usb 2-1: Manufacturer: syz [ 216.350957][ T3609] usb 2-1: SerialNumber: syz [ 216.390753][ T5914] loop0: detected capacity change from 0 to 256 [ 216.616764][ T5876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.627653][ T5955] 9pnet: Insufficient options for proto=fd [ 216.645268][ T5876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.662181][ T5953] loop2: detected capacity change from 0 to 65536 [ 216.680171][ T5876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.712095][ T2987] usb 1-1: USB disconnect, device number 8 [ 216.750145][ T2987] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 216.772281][ T2987] ftdi_sio 1-1:0.0: device disconnected [ 216.870136][ T5953] XFS (loop2): Mounting V5 Filesystem [ 216.943552][ T5953] XFS (loop2): Ending clean mount [ 216.951766][ T5953] XFS (loop2): Quotacheck needed: Please wait. [ 216.976624][ T3609] hub 2-1:1.3: bad descriptor, ignoring hub [ 216.983070][ T3609] hub: probe of 2-1:1.3 failed with error -5 [ 217.036661][ T3609] usb 2-1: USB disconnect, device number 5 [ 217.096393][ T5953] XFS (loop2): Quotacheck: Done. [ 217.571831][ T13] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 217.957840][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.964778][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 217.991314][ T4607] XFS (loop2): Unmounting Filesystem [ 218.011428][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.020972][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.032881][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.090602][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.124976][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.158501][ T13] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 218.187919][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.227042][ T13] usb 5-1: config 0 descriptor?? [ 218.294300][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.306159][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.331479][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.338548][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.382496][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.394646][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.422789][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.429977][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.480787][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 218.494549][ T154] device hsr_slave_0 left promiscuous mode [ 218.513756][ T154] device hsr_slave_1 left promiscuous mode [ 218.552302][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.586516][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.617660][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.645922][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.670326][ T154] device bridge_slave_1 left promiscuous mode [ 218.684461][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.732657][ T154] device bridge_slave_0 left promiscuous mode [ 218.772389][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.821193][ T154] device veth1_macvtap left promiscuous mode [ 218.827200][ T154] device veth0_macvtap left promiscuous mode [ 218.839602][ T13] usbhid 5-1:0.0: can't add hid device: -71 [ 218.845583][ T13] usbhid: probe of 5-1:0.0 failed with error -71 [ 218.879382][ T154] device veth1_vlan left promiscuous mode [ 218.898264][ T13] usb 5-1: USB disconnect, device number 11 [ 218.968869][ T6000] IPv4: Oversized IP packet from 127.202.26.0 [ 219.035622][ T6001] mmap: syz.1.453 (6001) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 219.126721][ T6010] loop2: detected capacity change from 0 to 512 [ 219.233324][ T6010] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 219.282730][ T6010] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038 (0x7fffffff) [ 219.419024][ T6021] loop1: detected capacity change from 0 to 16 [ 219.501244][ T6021] erofs: (device loop1): mounted with root inode @ nid 36. [ 219.696626][ T6023] ptrace attach of "./syz-executor exec"[4607] was attempted by "./syz-executor exec"[6023] [ 219.878376][ T154] team0 (unregistering): Port device team_slave_1 removed [ 220.138069][ T154] team0 (unregistering): Port device team_slave_0 removed [ 220.289763][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.314109][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.370380][ T154] bond0 (unregistering): Released all slaves [ 220.418920][ T6026] loop2: detected capacity change from 0 to 1024 [ 220.449049][ T5876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.460374][ T5876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.474286][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.482971][ T6026] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 220.483777][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.517074][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.525843][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.535131][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.543909][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.552627][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.561631][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.570186][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.579446][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.587738][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.596527][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.604438][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.612285][ T3642] Bluetooth: hci2: command 0x0419 tx timeout [ 220.672271][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 220.726213][ T6028] 9pnet: Insufficient options for proto=fd [ 220.924472][ T6033] input: syz1 as /devices/virtual/input/input8 [ 221.139892][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.148943][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.176290][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.199334][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.208882][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.299298][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.307963][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.338832][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.346207][ T3610] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 221.369134][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.390112][ T5876] device veth0_vlan entered promiscuous mode [ 221.419467][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 221.453468][ T5876] device veth1_vlan entered promiscuous mode [ 221.481936][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.518905][ T5876] device veth0_macvtap entered promiscuous mode [ 221.541122][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.555269][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.590388][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.601410][ T5876] device veth1_macvtap entered promiscuous mode [ 221.648371][ T5876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.663232][ T5876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.679445][ T5876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.697756][ T5876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.707941][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 221.721705][ T5876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.736882][ T5876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.748194][ T2987] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 221.756017][ T3610] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 221.778023][ T5876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.804936][ T3610] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 221.827750][ T5876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.839808][ T3610] usb 5-1: config 1 has no interface number 1 [ 221.851521][ T26] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 221.863601][ T3610] usb 5-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 221.874812][ T26] usb 1-1: config 0 has no interface number 0 [ 221.881603][ T5876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.892679][ T26] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 221.903766][ T3610] usb 5-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 221.917742][ T5876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.929448][ T3610] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.942304][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.956006][ T5876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.967236][ T5876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.981174][ T5876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.002641][ T5876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.017102][ T5876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.027873][ T5876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.029029][ T6043] loop1: detected capacity change from 0 to 16 [ 222.041253][ T5876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.059823][ T26] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 222.069017][ T26] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 222.077690][ T2987] usb 3-1: Using ep0 maxpacket: 32 [ 222.089160][ T5876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.099582][ T26] usb 1-1: Product: syz [ 222.103772][ T26] usb 1-1: SerialNumber: syz [ 222.111271][ T5876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.123245][ T26] usb 1-1: config 0 descriptor?? [ 222.128326][ T5876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.139224][ T3610] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.150531][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.158522][ T3610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.169077][ T26] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 222.177099][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.183936][ T6043] erofs: (device loop1): mounted with root inode @ nid 36. [ 222.185927][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.206518][ T3610] usb 5-1: Product: syz [ 222.217267][ T3610] usb 5-1: Manufacturer: syz [ 222.224848][ T2987] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 222.247488][ T2987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.256214][ T3610] usb 5-1: SerialNumber: syz [ 222.262337][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.271945][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.281761][ T2987] usb 3-1: config 0 descriptor?? [ 222.290312][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.321449][ T2987] gspca_main: sunplus-2.14.0 probing 041e:400b [ 222.395511][ T5876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.422856][ T5876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.441989][ T5876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.676602][ T5876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.808023][ T6041] loop2: detected capacity change from 0 to 128 [ 222.872482][ T1199] usb 1-1: USB disconnect, device number 9 [ 222.924621][ T2987] gspca_sunplus: reg_w_riv err -110 [ 222.931326][ T2987] sunplus: probe of 3-1:0.0 failed with error -110 [ 223.035154][ T6041] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.048875][ T6041] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 223.116886][ T3610] hub 5-1:1.3: bad descriptor, ignoring hub [ 223.289452][ T3610] hub: probe of 5-1:1.3 failed with error -5 [ 223.297756][ T853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.307465][ T6054] IPv4: Oversized IP packet from 127.202.26.0 [ 223.330567][ T853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.959564][ T3610] usb 5-1: USB disconnect, device number 12 [ 223.992391][ T3898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.044723][ T3898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.061947][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 224.150847][ T6071] loop1: detected capacity change from 0 to 16 [ 224.153635][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.206020][ T6074] loop0: detected capacity change from 0 to 512 [ 224.220252][ T6071] erofs: (device loop1): mounted with root inode @ nid 36. [ 224.378916][ T6077] loop3: detected capacity change from 0 to 2048 [ 224.422914][ T3951] udevd[3951]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.464617][ T6074] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.469: corrupted in-inode xattr [ 224.507644][ T6074] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.469: couldn't read orphan inode 15 (err -117) [ 224.554137][ T6082] loop4: detected capacity change from 0 to 512 [ 224.563112][ T6077] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.590542][ T6074] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.618455][ T3662] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 224.638227][ T3662] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 224.651606][ T3662] EXT4-fs (loop3): This should not happen!! Data will be lost [ 224.651606][ T3662] [ 224.662295][ T3662] EXT4-fs (loop3): Total free blocks count 0 [ 224.668387][ T3662] EXT4-fs (loop3): Free/Dirty block details [ 224.674909][ T3662] EXT4-fs (loop3): free_blocks=2415919104 [ 224.681048][ T3662] EXT4-fs (loop3): dirty_blocks=48 [ 224.686472][ T3662] EXT4-fs (loop3): Block reservation details [ 224.693027][ T3662] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 224.711849][ T6077] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 224.776879][ T6077] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 224.790097][ T6082] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.470: inode #1: comm syz.4.470: iget: illegal inode # [ 224.819912][ T6082] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.470: error while reading EA inode 1 err=-117 [ 225.411904][ T6082] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.470: inode #1: comm syz.4.470: iget: illegal inode # [ 225.426197][ T6082] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.470: error while reading EA inode 1 err=-117 [ 225.433807][ T26] usb 3-1: USB disconnect, device number 8 [ 225.447066][ T6082] EXT4-fs (loop4): 1 orphan inode deleted [ 225.465745][ T6082] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000200,usrjquota=,,errors=continue. Quota mode: none. [ 225.801339][ T25] kauditd_printk_skb: 13 callbacks suppressed [ 225.871900][ T25] audit: type=1800 audit(1723666741.460:164): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.470" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 226.264349][ T6095] loop0: detected capacity change from 0 to 128 [ 226.338635][ T6100] loop3: detected capacity change from 0 to 16 [ 226.405130][ T6095] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.420973][ T6100] erofs: (device loop3): mounted with root inode @ nid 36. [ 226.658885][ T6095] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 228.007159][ T6113] netlink: 104 bytes leftover after parsing attributes in process `syz.4.475'. [ 228.042501][ T25] audit: type=1326 audit(1723666743.710:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.4.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00aad99f9 code=0x7fc00000 [ 228.156904][ T6121] IPv4: Oversized IP packet from 127.202.26.0 [ 228.214360][ T6120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.338315][ T6132] loop1: detected capacity change from 0 to 16 [ 228.425205][ T6134] futex_wake_op: syz.4.480 tries to shift op by 32; fix this program [ 228.443112][ T6132] erofs: (device loop1): mounted with root inode @ nid 36. [ 228.729709][ T1199] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 228.817096][ T6137] loop2: detected capacity change from 0 to 256 [ 228.882746][ T6127] loop0: detected capacity change from 0 to 40427 [ 228.969516][ T1199] usb 5-1: Using ep0 maxpacket: 16 [ 229.013219][ T6143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.483'. [ 229.052238][ T6143] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 229.714526][ T6127] F2FS-fs (loop0): Found nat_bits in checkpoint [ 229.732931][ T1199] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 229.751872][ T1199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.787787][ T6152] loop3: detected capacity change from 0 to 512 [ 229.789519][ T1199] usb 5-1: Product: syz [ 229.826014][ T1199] usb 5-1: Manufacturer: syz [ 229.845581][ T1199] usb 5-1: SerialNumber: syz [ 229.858533][ T1199] usb 5-1: config 0 descriptor?? [ 229.883464][ T6127] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 229.926800][ T6152] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.485: inode #1: comm syz.3.485: iget: illegal inode # [ 229.941254][ T1199] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 229.947528][ T1199] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 230.098785][ T6152] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.485: error while reading EA inode 1 err=-117 [ 230.162903][ T6160] program syz.0.479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.499070][ T6152] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.485: inode #1: comm syz.3.485: iget: illegal inode # [ 230.499282][ T5479] attempt to access beyond end of device [ 230.499282][ T5479] loop0: rw=2049, want=45104, limit=40427 [ 230.534829][ T6152] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.485: error while reading EA inode 1 err=-117 [ 230.574981][ T6152] EXT4-fs (loop3): 1 orphan inode deleted [ 230.846637][ T6152] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000200,usrjquota=,,errors=continue. Quota mode: none. [ 231.236983][ T25] audit: type=1800 audit(1723666746.890:166): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.485" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 231.310766][ T6168] loop2: detected capacity change from 0 to 2048 [ 231.540735][ T3609] usb 5-1: USB disconnect, device number 13 [ 231.727770][ T6175] xt_TCPMSS: Only works on TCP SYN packets [ 231.744801][ T6168] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.793500][ T6179] loop3: detected capacity change from 0 to 256 [ 231.807172][ T25] audit: type=1800 audit(1723666747.470:167): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.488" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 233.336592][ T6172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.991517][ T4607] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 234.162059][ T6185] IPv4: Oversized IP packet from 127.202.26.0 [ 234.233278][ T6187] loop0: detected capacity change from 0 to 512 [ 234.283138][ T6191] loop1: detected capacity change from 0 to 512 [ 234.297732][ T6193] loop3: detected capacity change from 0 to 16 [ 234.363949][ T6193] erofs: (device loop3): mounted with root inode @ nid 36. [ 234.413838][ T6191] EXT4-fs (loop1): 1 truncate cleaned up [ 234.423363][ T6187] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.487: inode #1: comm syz.0.487: iget: illegal inode # [ 234.499473][ T6191] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 234.700260][ T6187] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.487: error while reading EA inode 1 err=-117 [ 234.926138][ T6187] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.487: inode #1: comm syz.0.487: iget: illegal inode # [ 234.948258][ T25] audit: type=1107 audit(1723666750.610:168): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='yס' [ 234.949151][ T6206] syz.4.497[6206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.971726][ T6187] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.487: error while reading EA inode 1 err=-117 [ 339.939319][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 339.945946][ C0] rcu: 0-...!: (10498 ticks this GP) idle=28d/1/0x4000000000000000 softirq=17903/17903 fqs=6 [ 339.957604][ C0] (t=10500 jiffies g=19953 q=301) [ 339.962699][ C0] rcu: rcu_preempt kthread starved for 10295 jiffies! g19953 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 339.973860][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 339.983801][ C0] rcu: RCU grace-period kthread stack dump: [ 339.989663][ C0] task:rcu_preempt state:R running task stack:27064 pid: 15 ppid: 2 flags:0x00004000 [ 340.000432][ C0] Call Trace: [ 340.003688][ C0] [ 340.006599][ C0] __schedule+0x12c4/0x45b0 [ 340.011092][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 340.016963][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 340.022832][ C0] ? __mod_timer+0xa8e/0xeb0 [ 340.027403][ C0] ? release_firmware_map_entry+0x190/0x190 [ 340.033267][ C0] ? mod_timer_pending+0x20/0x20 [ 340.038175][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 340.043532][ C0] schedule+0x11b/0x1f0 [ 340.047660][ C0] schedule_timeout+0x1b9/0x300 [ 340.052483][ C0] ? console_conditional_schedule+0x40/0x40 [ 340.058349][ C0] ? update_process_times+0x200/0x200 [ 340.063694][ C0] ? prepare_to_swait_event+0x321/0x340 [ 340.069213][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 340.074047][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 340.080176][ C0] ? rcu_gp_init+0x1140/0x1140 [ 340.084918][ C0] ? finish_swait+0xc5/0x1d0 [ 340.089484][ C0] rcu_gp_kthread+0xa4/0x360 [ 340.094047][ C0] ? _raw_spin_unlock+0x40/0x40 [ 340.098868][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 340.103948][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 340.109820][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 340.114819][ C0] kthread+0x3f6/0x4f0 [ 340.118857][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 340.123938][ C0] ? kthread_blkcg+0xd0/0xd0 [ 340.128501][ C0] ret_from_fork+0x1f/0x30 [ 340.132896][ C0] [ 340.135892][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 340.142195][ C0] Sending NMI from CPU 0 to CPUs 1: [ 340.147384][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_do_entry+0x10f/0x340 [ 340.148370][ C0] NMI backtrace for cpu 0 [ 340.161309][ C0] CPU: 0 PID: 6206 Comm: syz.4.497 Not tainted 5.15.164-syzkaller #0 [ 340.169349][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 340.179375][ C0] Call Trace: [ 340.182633][ C0] [ 340.185451][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 340.190105][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 340.195708][ C0] ? panic+0x860/0x860 [ 340.199755][ C0] ? read_lock_is_recursive+0x10/0x10 [ 340.205101][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 340.210014][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 340.216139][ C0] ? try_to_wake_up+0x844/0x1300 [ 340.221054][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 340.226489][ C0] ? _raw_spin_lock+0x40/0x40 [ 340.231137][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 340.237184][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 340.243137][ C0] rcu_dump_cpu_stacks+0x223/0x390 [ 340.248230][ C0] print_cpu_stall+0x320/0x600 [ 340.252967][ C0] rcu_sched_clock_irq+0x8d9/0x1150 [ 340.258139][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 340.262964][ C0] ? hrtimer_run_queues+0x163/0x450 [ 340.268131][ C0] ? account_process_tick+0x232/0x3a0 [ 340.273477][ C0] update_process_times+0x196/0x200 [ 340.278651][ C0] tick_sched_timer+0x386/0x550 [ 340.283473][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 340.288988][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 340.294169][ C0] ? hrtimer_interrupt+0x980/0x980 [ 340.299255][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 340.305295][ C0] hrtimer_interrupt+0x392/0x980 [ 340.310219][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 340.316173][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 340.321779][ C0] [ 340.324684][ C0] [ 340.327589][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 340.333551][ C0] RIP: 0010:_copy_from_user+0xe3/0x170 [ 340.338988][ C0] Code: f0 ff ff ff 7f 00 00 4c 89 ef 48 89 de e8 a5 4e 77 fd 4c 89 f8 4c 01 e0 72 63 4c 39 e8 77 5e e8 b3 4a 77 fd 0f ae e8 4c 89 f7 <44> 89 e6 e8 25 20 c1 fd 4c 89 f7 44 89 e2 4c 89 fe e8 27 cd 27 00 [ 340.358576][ C0] RSP: 0018:ffffc900033d7c30 EFLAGS: 00000246 [ 340.364623][ C0] RAX: ffffffff840916ad RBX: 00007fc008f55b68 RCX: 0000000000040000 [ 340.372567][ C0] RDX: ffffc9000a851000 RSI: 000000000003ffff RDI: ffffc900033d7cc0 [ 340.380509][ C0] RBP: ffffc900033d7e50 R08: ffffffff8409169b R09: fffffbfff1bd2986 [ 340.388453][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000000c0 [ 340.396397][ C0] R13: 00007ffffffff000 R14: ffffc900033d7cc0 R15: 00007fc008f55aa8 [ 340.404346][ C0] ? _copy_from_user+0xcb/0x170 [ 340.409170][ C0] ? _copy_from_user+0xdd/0x170 [ 340.413997][ C0] restore_sigcontext+0xce/0x710 [ 340.418911][ C0] ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250 [ 340.425307][ C0] ? set_current_blocked+0x40/0x40 [ 340.430394][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 340.436346][ C0] __do_sys_rt_sigreturn+0x190/0x250 [ 340.441603][ C0] ? x32_copy_siginfo_to_user+0x270/0x270 [ 340.447293][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 340.453253][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 340.458434][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 340.464409][ C0] do_syscall_64+0x3b/0xb0 [ 340.468808][ C0] ? clear_bhb_loop+0x15/0x70 [ 340.473463][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 340.479335][ C0] RIP: 0033:0x7fc00aa75369 [ 340.483735][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 340.503312][ C0] RSP: 002b:00007fc008f55a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 340.511708][ C0] RAX: ffffffffffffffda RBX: 00007fc00ac75f80 RCX: 00007fc00aa75369 [ 340.519655][ C0] RDX: 00007fc008f55a80 RSI: 00007fc008f55bb0 RDI: 0000000000000021 [ 340.527600][ C0] RBP: 00007fc00ab478ee R08: 0000000000000000 R09: 0000000000000000 [ 340.535545][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 340.543488][ C0] R13: 0000000000000000 R14: 00007fc00ac75f80 R15: 00007ffc6e061998 [ 340.551445][ C0]