last executing test programs: 27m31.028179635s ago: executing program 32 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x64, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) 26m35.206981407s ago: executing program 33 (id=354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xc040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 26m15.847415673s ago: executing program 34 (id=383): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='bridge0\x00', 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @loopback, 0x7}, @in6={0xa, 0x4e23, 0x40000, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x81}], 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setrlimit(0xf, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000001740)="$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") getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) 24m48.455083333s ago: executing program 35 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) alarm(0x81) alarm(0x8) 22m38.89606598s ago: executing program 36 (id=891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r0}, 0x38) 20m54.368702773s ago: executing program 37 (id=1111): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030302c706172746974696f6e3d30303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa"], 0x2, 0xc2d, &(0x7f00000001c0)="$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") ftruncate(0xffffffffffffffff, 0x84) modify_ldt$write(0x1, &(0x7f0000000a40)={0x476, 0x20000000, 0x1000, 0x0, 0x1, 0x0, 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000d40)={0xe5a44100, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58) 17m43.370537216s ago: executing program 38 (id=1577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) ioctl$FIOCLEX(r1, 0x5451) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 16m46.355636031s ago: executing program 9 (id=1757): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 16m35.036141134s ago: executing program 9 (id=1783): socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 16m34.264515344s ago: executing program 9 (id=1787): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a01010200000000000000000000000006000000040300"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 16m16.683566555s ago: executing program 39 (id=1787): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a01010200000000000000000000000006000000040300"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 15m21.539477342s ago: executing program 40 (id=1905): r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats}) socket$nl_route(0x10, 0x3, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) 12m11.298790191s ago: executing program 41 (id=2278): accept$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x20, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x28010, &(0x7f00000002c0)='rpc_pipefs\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) close(0x3) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) setpgid(0x0, r0) close(r5) 11m40.888627414s ago: executing program 42 (id=2350): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000240)={0x0, 0xfff, 0x7, 0x0, 0x1000}) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 10m20.342932271s ago: executing program 43 (id=2499): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x41d9fda7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 8m53.83265983s ago: executing program 44 (id=2640): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 8m34.036943406s ago: executing program 9 (id=2654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, 0x0, &(0x7f0000000cc0)) shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001bc0)=[{{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)}], 0x1}}], 0x1, 0x1005) r6 = socket(0x2b, 0x1, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) 8m30.293501133s ago: executing program 9 (id=2680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000000700)=ANY=[@ANYRESOCT], 0x30}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 8m26.636361184s ago: executing program 9 (id=2687): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x7fffffff, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101041, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) socket$inet_udplite(0x2, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) 8m15.849845038s ago: executing program 3 (id=2713): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x5, 0x6, 0x5, 0x70bd2c, 0x25dfdbfe, {0x14, 0x0, 0xc2a4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}) r6 = socket$kcm(0x10, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 8m15.024355882s ago: executing program 3 (id=2715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), 0x0}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 8m9.847872972s ago: executing program 45 (id=2687): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x7fffffff, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101041, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) socket$inet_udplite(0x2, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) 8m9.737769329s ago: executing program 3 (id=2720): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r4, 0xf}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) write$binfmt_script(r6, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r5, r6, 0x0) 8m7.676996447s ago: executing program 3 (id=2724): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0800}, 0x20040040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x844}, 0x4040004) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x4e23, @multicast1}}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01}, 0x0) 8m6.129836927s ago: executing program 3 (id=2727): creat(0x0, 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="110000000400000004000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r3, 0x3b79, 0x3137, 0x8, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000700)=0x38f, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479", 0x2}], 0x1}}], 0x1, 0x24044015) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="00ea5bd69d713e222cd60cd11db90800000000000000ea4152adefefb2fcccba61cbfd569fa19db9f8c2d61957d809"], 0x1, 0x221, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRg6IBEMyA38sg+U8b5DCKVeF3i7dDxL1Cq3cxMConsK/aM6GCU4zecHGMkZGIZvDfEBmFociI9ixk/9E3HsAM9J7zaWgzClXRTn+iZ1qWb7KrPM+w4yOaWkMjAazQEr0jujOtDPg7WaAqi+urMpOzMlJLSo+w4Bq/mTG/UyKjCCXnfl7NRikvDuWgZFBboO/2uJvf6QqN26qj5xeFVEztbvp5tL1cQzb9P9eMZF6PzEj7P+DQ4JaFnn5H+bJKH3f3DDnQ03dExPHzkblufytl/++ex9TW5ygxvRYvKuQjT+B8V/NJ1YGN8vHc9Or27cUKy7ISnOZeGzqxb8Jx9cyMEy+8MRWv+bMoXjFmP9SbpVzY+66xQtaczAw1L1hYDgY9Xki2B9MDAwzw3buAfmLiYGBHRRW5Q3QyGBgZmBgUAErYmFIy8xJNfBg4GNghnIMWaCqoKpZodxUveT8nJR2BnZwUgBrW87AAjfD8DEDK5xjhMwxtmiAGsHQDqVVoLQHlF4OpR8zMLAxICUvWLJhAZvQD+VpNICUVSSWlBQZgpRDWHAxI7iYkQDcZiaorXOZUDzHcJyJYRSMglEwCkbBKBgFo2AUjIJRMApGMgAEAAD//7Y1rvw=") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) 8m4.129707492s ago: executing program 3 (id=2732): socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x9, 0x3, 0x0, 0x8, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x101, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) pipe2(&(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m3.098178186s ago: executing program 46 (id=2732): socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x9, 0x3, 0x0, 0x8, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x101, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) pipe2(&(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m30.357363513s ago: executing program 7 (id=2959): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000c600f20000000029c03306635ad52eff2b35be5eb610e76d6e241e8dc15f687ccb6478f300002a6c6c18a2ef2d0fcc0eec6e22c6ddfb3dac17a23b5b05ffde6bfeb4ae8e65ae286495927578f90ee50f0c1a57e986bc9981d2f33ff39886fb27a67c5634cbf967daa9150be8dd4d83760ae4de1a38a5f6b6d9fd", @ANYRES32=0x0, @ANYRES32=r3], 0x50) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4c805}, 0x4048080) syz_emit_vhci(0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 5m29.411966392s ago: executing program 7 (id=2963): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) 5m27.982698967s ago: executing program 2 (id=2968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r4}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0xce, &(0x7f0000000000)=0xa2, 0x4) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r8, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 5m27.755142109s ago: executing program 7 (id=2969): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r5, 0xbc7ae000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 5m24.848450121s ago: executing program 2 (id=2982): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffe}, {0xa, 0x0, 0x2, @empty}, 0x0, {[0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x6e]}}, 0x5c) syz_genetlink_get_family_id$devlink(0x0, r4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x1, 0x5, 0x4}, 0x50) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r7, 0x1) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept4$rose(r8, 0x0, 0x0, 0x80800) 5m22.844626116s ago: executing program 2 (id=2974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x9, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5m22.844314256s ago: executing program 7 (id=2975): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x3, 0x400, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0x20ffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x100, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0xc, 0x0, 0x0, 0x28c, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x204, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x31, 0x0, 0x4b7a0856, 0x0, 0x0, 0x0, 0x71]}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff}, 0x51) r6 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) r7 = syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x201) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x28}], 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r7, 0xc0285629, &(0x7f0000000040)={0x0, 0xfffffffe, 0x7f, '\x00', &(0x7f0000000000)=0x5}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x40045730, &(0x7f0000000080)) landlock_restrict_self(0xffffffffffffffff, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e24, @rand_addr=0xdffefc13}}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xaece, 0x0) 5m21.697660286s ago: executing program 7 (id=2977): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x40002, 0xa69c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x0, 0x4a}, 0x28) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290}) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x4, 0x0, 0xe2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev, 0x80, 0x0, 0xffffffff, 0x1}}) 5m21.281369418s ago: executing program 2 (id=2979): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240), 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m20.093832111s ago: executing program 7 (id=2981): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x5, 0x6, 0x5, 0x70bd2c, 0x25dfdbfe, {0x14, 0x0, 0xc2a4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}) r5 = socket$kcm(0x10, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 5m17.559834103s ago: executing program 2 (id=2986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000000c0)=0x7) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg1\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, 0x0, 0x880) syz_pidfd_open(r2, 0x0) syz_open_dev$MSR(0x0, 0x3, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe9, 0x5b, 0x17, 0x10, 0x572, 0xcb00, 0xbbc9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0xfb}}]}}, 0x0) 5m11.904321469s ago: executing program 2 (id=2994): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m3.999929012s ago: executing program 47 (id=2981): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x5, 0x6, 0x5, 0x70bd2c, 0x25dfdbfe, {0x14, 0x0, 0xc2a4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}) r5 = socket$kcm(0x10, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 4m55.680383048s ago: executing program 48 (id=2994): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 52.637918405s ago: executing program 1 (id=4021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 52.491397893s ago: executing program 1 (id=4023): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01, r4}, 0xc) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_clone(0x8001080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 51.532745624s ago: executing program 1 (id=4024): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x89b0}], 0x1, 0x10102, 0x0) 51.434609309s ago: executing program 1 (id=4025): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@noquota}, {}, {@errors_remount}, {@errors_continue}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'macroman'}}]}, 0x1, 0x6313, &(0x7f0000002080)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) 48.777742219s ago: executing program 1 (id=4043): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 47.382914693s ago: executing program 1 (id=4057): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01, r4}, 0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_clone(0x8001080, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 47.123280817s ago: executing program 49 (id=4057): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01, r4}, 0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_clone(0x8001080, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 8.326746209s ago: executing program 0 (id=4270): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xd, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0x80, &(0x7f0000000080)}, 0x4040040) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r6, @ANYRES16], 0xfffffffffffffd3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff000000, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xffffffff, 0xff000000], 'bond_slave_1\x00', 'bond_slave_1\x00', {}, {0xff}, 0x62, 0xd4, 0x3, 0x4c}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 7.668680654s ago: executing program 8 (id=4277): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01, r4}, 0xc) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_clone(0x8001080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 6.60990244s ago: executing program 8 (id=4280): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x40b, 0x9, 0xfffffffe}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 6.338772654s ago: executing program 8 (id=4285): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0800a10005000000050019010b00000005001801030000000800a00000000000080022018702000008009f00060000002c00238005001100000000000d00130001000000060018000010000006001000ffff000008000b00fcff"], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.945851876s ago: executing program 4 (id=4290): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01, r4}, 0xc) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_clone(0x8001080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 5.920050747s ago: executing program 8 (id=4291): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01, r4}, 0xc) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_clone(0x8001080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.96383674s ago: executing program 4 (id=4295): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000340), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 3.96365237s ago: executing program 5 (id=4296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="012126bd7000fbdbdf250900000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008"], 0x38}}, 0x20000000) 3.96339366s ago: executing program 4 (id=4298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x641, 0x0, 0x4}]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 3.958384631s ago: executing program 8 (id=4299): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) setsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_clone(0x8001080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.883602475s ago: executing program 5 (id=4300): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}}, 0x8046) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2005d1, 0xd8400) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0x80, &(0x7f0000000080)}, 0x4040040) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES16], 0xfffffffffffffd3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff000000, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xffffffff, 0xff000000], 'bond_slave_1\x00', 'bond_slave_1\x00', {}, {0xff}, 0x62, 0xd4, 0x3, 0x4c}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 3.801820979s ago: executing program 4 (id=4302): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef6a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = syz_open_dev$loop(&(0x7f0000000700), 0x47d, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 3.484717446s ago: executing program 5 (id=4303): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xd, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}}, 0x8046) r2 = socket$kcm(0xa, 0x922000000003, 0x11) syz_open_dev$evdev(0x0, 0x2005d1, 0xd8400) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES16], 0xfffffffffffffd3a) 3.165104732s ago: executing program 5 (id=4305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x40000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) 2.939858155s ago: executing program 5 (id=4307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xae}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x456e4785fc52b815}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000040) 2.8334458s ago: executing program 5 (id=4308): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) fstat(r0, &(0x7f00000001c0)) 2.83188476s ago: executing program 6 (id=4309): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)}, {0x0}, {0x0}, {0x0}], 0x4, 0x0, 0x0, 0x4000000}], 0x1, 0x4040) timer_create(0xfffffffffffffffc, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) 2.679692168s ago: executing program 0 (id=4310): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01, r4}, 0xc) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_clone(0x8001080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.68996259s ago: executing program 6 (id=4311): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01, r4}, 0xc) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_clone(0x8001080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.264810373s ago: executing program 4 (id=4312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.262995663s ago: executing program 0 (id=4313): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}}, 0x8046) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2005d1, 0xd8400) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0x80, &(0x7f0000000080)}, 0x4040040) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r5, @ANYRES16], 0xfffffffffffffd3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff000000, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xffffffff, 0xff000000], 'bond_slave_1\x00', 'bond_slave_1\x00', {}, {0xff}, 0x62, 0xd4, 0x3, 0x4c}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 1.035517755s ago: executing program 4 (id=4314): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 545.080251ms ago: executing program 6 (id=4315): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xd, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}}, 0x8046) r2 = socket$kcm(0xa, 0x922000000003, 0x11) syz_open_dev$evdev(0x0, 0x2005d1, 0xd8400) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES16], 0xfffffffffffffd3a) 198.461069ms ago: executing program 0 (id=4316): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000580)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27) 198.306989ms ago: executing program 6 (id=4317): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x1000, 0x4, 0xfffc, 0x9}, 'syz1\x00', 0x9}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(r0, &(0x7f0000000140)=[{&(0x7f0000002840)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e", 0x18}], 0x1) 198.193129ms ago: executing program 8 (id=4318): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)={0x28, 0x4, 0x0, {0x2, 0x400000000}}, 0x28) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 128.300853ms ago: executing program 6 (id=4319): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0xffffff95}, 0x10) 97.474055ms ago: executing program 0 (id=4320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 15.834929ms ago: executing program 6 (id=4321): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 0s ago: executing program 0 (id=4322): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") r0 = creat(&(0x7f0000000080)='./file1\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) lseek(r0, 0x9, 0x4) kernel console output (not intermixed with test programs): -fs (loop5): Ignoring removed mblk_io_submit option [ 1559.503177][T18982] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1559.514519][T18982] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1559.524514][T18982] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1559.538093][T18982] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1559.546193][T18982] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce11c, mo2=0000] [ 1559.554561][T18982] EXT4-fs (loop5): failed to initialize system zone (-117) [ 1559.561838][T18982] EXT4-fs (loop5): mount failed [ 1559.637547][T18978] vxcan1 speed is unknown, defaulting to 1000 [ 1559.707417][T18911] chnl_net:caif_netlink_parms(): no params data found [ 1560.287643][T18978] wlan0 speed is unknown, defaulting to 1000 [ 1561.659732][T13123] Bluetooth: hci2: command 0x040f tx timeout [ 1561.676131][T13123] Bluetooth: hci3: command 0x0409 tx timeout [ 1561.868577][T18911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.889519][T18911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.127718][T18911] device bridge_slave_0 entered promiscuous mode [ 1562.256995][T18911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.346916][T18911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.479871][T18911] device bridge_slave_1 entered promiscuous mode [ 1562.924990][T18911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1563.006175][T18911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1563.500039][T18911] team0: Port device team_slave_0 added [ 1563.758652][T18978] chnl_net:caif_netlink_parms(): no params data found [ 1563.959398][T18911] team0: Port device team_slave_1 added [ 1564.016148][T12594] Bluetooth: hci2: command 0x0419 tx timeout [ 1564.022950][T13123] Bluetooth: hci3: command 0x041b tx timeout [ 1564.150277][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1564.156615][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1564.163831][T18911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1564.178667][T18911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1564.276638][T18911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1564.589639][T18911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1564.604077][T18911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1565.285236][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 1565.999505][T18911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.086896][T19034] vxcan1 speed is unknown, defaulting to 1000 [ 1566.466298][T12594] Bluetooth: hci3: command 0x040f tx timeout [ 1566.469698][T18911] device hsr_slave_0 entered promiscuous mode [ 1566.498499][T18911] device hsr_slave_1 entered promiscuous mode [ 1566.515364][T18911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1566.630814][T19051] binder_alloc: binder_alloc_mmap_handler: 19039 200000fed000-200001000000 already mapped failed -16 [ 1568.538379][T18911] Cannot create hsr debugfs directory [ 1568.573237][T18094] device hsr_slave_0 left promiscuous mode [ 1569.132405][T18094] device hsr_slave_1 left promiscuous mode [ 1569.183072][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 1569.234570][T18094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.250134][T18094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.275503][T18094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1569.326997][T18094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.408604][T18094] device bridge_slave_1 left promiscuous mode [ 1569.441502][T18094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.473380][T18094] device bridge_slave_0 left promiscuous mode [ 1569.480216][T18094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.265465][T18094] device hsr_slave_0 left promiscuous mode [ 1571.362994][T18094] device hsr_slave_1 left promiscuous mode [ 1571.376043][T18094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1571.407815][T18094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.457928][T18094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1571.585967][T18094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.612446][T18094] device bridge_slave_1 left promiscuous mode [ 1571.626023][T18094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.645793][T18094] device bridge_slave_0 left promiscuous mode [ 1572.194079][T18094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.421779][T18094] device veth1_macvtap left promiscuous mode [ 1572.427864][T18094] device veth0_macvtap left promiscuous mode [ 1572.447491][T18094] device veth1_vlan left promiscuous mode [ 1572.789822][T18094] device veth0_vlan left promiscuous mode [ 1573.310304][T18094] device veth1_macvtap left promiscuous mode [ 1573.316400][T18094] device veth0_macvtap left promiscuous mode [ 1573.337598][T18094] device veth1_vlan left promiscuous mode [ 1573.343674][T18094] device veth0_vlan left promiscuous mode [ 1573.416184][T19094] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3124'. [ 1575.872054][T18094] team0 (unregistering): Port device team_slave_1 removed [ 1576.016504][T18094] team0 (unregistering): Port device team_slave_0 removed [ 1577.083194][T18094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.130265][T18094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.598592][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3133'. [ 1578.607715][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3133'. [ 1578.622839][T18094] bond0 (unregistering): Released all slaves [ 1578.948215][T19136] loop5: detected capacity change from 0 to 64 [ 1580.421647][T18094] team0 (unregistering): Port device team_slave_1 removed [ 1580.435547][T18094] team0 (unregistering): Port device team_slave_0 removed [ 1580.448171][T18094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1580.467313][T18094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1580.568793][T18094] bond0 (unregistering): Released all slaves [ 1580.719257][T19127] veth1_virt_wifi: default FDB implementation only supports local addresses [ 1580.755061][T19135] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3135'. [ 1580.779885][T19135] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3135'. [ 1580.802608][T19135] tipc: MTU too low for tipc bearer [ 1580.963656][T18978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.974470][T18978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.982910][T18978] device bridge_slave_0 entered promiscuous mode [ 1580.992128][T18978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.999431][T18978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.016469][T18978] device bridge_slave_1 entered promiscuous mode [ 1581.167043][T18978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1581.214738][T18978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.954036][T18978] team0: Port device team_slave_0 added [ 1583.319237][T18978] team0: Port device team_slave_1 added [ 1583.970456][T18978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1583.977460][T18978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.206199][T18978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.322544][T18978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.355131][T18978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.436313][T18978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.491543][T18978] device hsr_slave_0 entered promiscuous mode [ 1584.505430][T18978] device hsr_slave_1 entered promiscuous mode [ 1584.830603][T19188] vivid-001: ================= START STATUS ================= [ 1584.838376][T19188] vivid-001: Generate PTS: true [ 1584.843399][T19188] vivid-001: Generate SCR: true [ 1584.848639][T19188] tpg source WxH: 720x576 (Y'CbCr) [ 1584.853937][T19188] tpg field: 4 [ 1584.857470][T19188] tpg crop: 64x64@0x0 [ 1584.861512][T19188] tpg compose: 16x16@0x560 [ 1584.866004][T19188] tpg colorspace: 1 [ 1584.869932][T19188] tpg transfer function: 0/2 [ 1584.874581][T19188] tpg Y'CbCr encoding: 0/1 [ 1584.879172][T19188] tpg quantization: 0/2 [ 1584.883393][T19188] tpg RGB range: 0/2 [ 1584.887378][T19188] vivid-001: ================== END STATUS ================== [ 1585.048703][T18978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1585.089599][T18978] Cannot create hsr debugfs directory [ 1586.571846][ T7] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1586.702841][T18911] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1586.716875][T18911] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1586.758049][T18911] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1586.790672][T18911] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1587.085453][T18911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.144343][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1587.161880][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1587.171008][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1587.188668][T18911] 8021q: adding VLAN 0 to HW filter on device team0 [ 1587.196218][ T7] usb 6-1: not running at top speed; connect to a high speed hub [ 1587.285924][ T7] usb 6-1: too many endpoints for config 1 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 1587.330164][ T7] usb 6-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 1587.538344][ T7] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1587.858577][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1587.894673][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.914087][ T7] usb 6-1: Product: syz [ 1587.935510][ T7] usb 6-1: Manufacturer: syz [ 1587.940161][ T7] usb 6-1: SerialNumber: syz [ 1587.970733][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1587.980154][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1587.994014][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.001167][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.019094][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1588.041690][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1588.068757][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1588.095205][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.102332][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1588.181618][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1588.210958][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1588.233391][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1588.263240][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1588.296382][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1588.512325][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1589.206145][T19246] autofs4:pid:19246:autofs_fill_super: called with bogus options [ 1589.326349][ T7] usb 6-1: USB disconnect, device number 4 [ 1589.930674][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1589.954777][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1590.220674][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1590.295383][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1590.348663][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1590.374126][T18911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1590.408485][T18978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1590.468243][T18978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1590.512793][T18978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1590.673762][T18978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1591.560461][T18978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1591.650225][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1591.658622][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1591.718009][T18911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1592.781096][T18978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.007938][T18978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1593.062204][T18978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1593.125631][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1593.172357][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1593.285542][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1593.343597][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1593.395756][T18753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.402964][T18753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.463840][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1593.578706][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1594.230622][T18753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.237765][T18753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1594.479353][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1594.543657][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1594.600446][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1594.653346][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1594.704428][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1594.758208][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1594.819007][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1594.851353][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1594.895379][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1594.904399][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1594.913067][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1594.936295][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1594.957392][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1595.485283][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1595.505452][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1595.539115][T19332] loop5: detected capacity change from 0 to 64 [ 1595.556917][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1595.584929][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1595.619875][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1595.628569][T19332] MINIX-fs: bad superblock or unable to read bitmaps [ 1595.639117][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1595.673688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1595.741475][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1595.772725][T18978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1595.781878][T18911] device veth0_vlan entered promiscuous mode [ 1595.838829][T18911] device veth1_vlan entered promiscuous mode [ 1595.862792][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1595.881069][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1595.909174][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1596.026550][T19344] autofs4:pid:19344:autofs_fill_super: called with bogus options [ 1596.158966][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1597.013964][T18978] device veth0_vlan entered promiscuous mode [ 1597.209540][T18911] device veth0_macvtap entered promiscuous mode [ 1597.272229][T18911] device veth1_macvtap entered promiscuous mode [ 1598.040174][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1598.772092][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1598.792350][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1598.924073][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1598.932948][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1598.975684][T18978] device veth1_vlan entered promiscuous mode [ 1599.063630][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1599.074066][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1599.128265][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1599.158746][T18911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.162765][T19380] loop5: detected capacity change from 0 to 512 [ 1599.186303][T18911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.226457][T18911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.273137][T18911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.303724][T18911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.328182][T18911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.355314][T18911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.381020][T18911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.414509][T18911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.441382][T18911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.468108][T18911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.498296][T18911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.524048][T18911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.551900][T18911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.581967][T18911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1599.592886][T19380] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1599.603485][T19380] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1599.612489][T19380] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1599.622349][T19380] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1599.632600][T19380] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1599.641587][T18911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1599.658048][T19380] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1599.666150][T19380] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce11c, mo2=0000] [ 1599.674891][T19380] EXT4-fs (loop5): failed to initialize system zone (-117) [ 1599.682299][T19380] EXT4-fs (loop5): mount failed [ 1599.707060][T18911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.719093][T18911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1599.732191][T18911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.742447][T18911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1599.753381][T18911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.763597][T18911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1599.774723][T18911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.794741][T18911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1599.818995][T18911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.839130][T18911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1599.857897][T18911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.893379][T18911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1599.941382][T18911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.105389][T18911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.138819][T18911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.167492][T18911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.178230][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1600.187972][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1600.207797][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1600.228784][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1600.330473][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3180'. [ 1600.972068][T18978] device veth0_macvtap entered promiscuous mode [ 1600.995258][T18978] device veth1_macvtap entered promiscuous mode [ 1601.061462][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1601.091357][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1601.126529][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1601.158094][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1601.220629][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.239150][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.264294][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.286631][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.305456][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.325606][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.335615][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.360509][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.370398][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.402456][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.425125][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.435859][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.456738][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.467296][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.492750][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.517504][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.618399][T18978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1601.644306][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1601.655428][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1601.768274][T18753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.776142][T18753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1602.736145][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.769850][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.780111][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.790910][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.939094][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.099851][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.272180][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.358744][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.368707][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.379596][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.402487][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.434660][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.458008][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.478964][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.510978][T18978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.520076][T19408] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1603.550794][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1603.570163][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1603.605751][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1603.624271][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.656142][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.701499][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1603.842226][T18978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.869843][T18978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.118011][T18978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.465239][T18978] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.054562][ T4477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.084474][ T4477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.174560][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1605.195858][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.223636][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.349395][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1608.117260][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3204'. [ 1608.202775][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3204'. [ 1608.327572][T19497] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3205'. [ 1608.395516][T19497] netlink: 'syz.0.3205': attribute type 3 has an invalid length. [ 1609.897353][T18094] device hsr_slave_0 left promiscuous mode [ 1609.933264][T18094] device hsr_slave_1 left promiscuous mode [ 1610.163006][T18094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1610.208380][T18094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.253923][T18094] device bridge_slave_1 left promiscuous mode [ 1610.502488][T18094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.222244][T18094] device bridge_slave_0 left promiscuous mode [ 1611.254221][T18094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.351302][T18094] device hsr_slave_0 left promiscuous mode [ 1611.367924][T18094] device hsr_slave_1 left promiscuous mode [ 1611.378365][T18094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1611.399766][T18094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1611.431917][T18094] device bridge_slave_1 left promiscuous mode [ 1611.438261][T18094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.463618][T18094] device bridge_slave_0 left promiscuous mode [ 1611.469859][T18094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.522286][T18094] device veth1_macvtap left promiscuous mode [ 1611.549262][T18094] device veth0_macvtap left promiscuous mode [ 1611.555387][T18094] device veth1_vlan left promiscuous mode [ 1611.591526][T18094] device veth0_vlan left promiscuous mode [ 1614.738216][T19585] loop5: detected capacity change from 0 to 764 [ 1614.890352][T19585] Symlink component flag not implemented [ 1614.906982][T19588] loop4: detected capacity change from 0 to 256 [ 1614.929427][T19585] Symlink component flag not implemented (15) [ 1615.003236][T19588] FAT-fs (loop4): Directory bread(block 64) failed [ 1615.024593][T19588] FAT-fs (loop4): Directory bread(block 65) failed [ 1615.032906][T19588] FAT-fs (loop4): Directory bread(block 66) failed [ 1615.077139][T19588] FAT-fs (loop4): Directory bread(block 67) failed [ 1615.096384][T19588] FAT-fs (loop4): Directory bread(block 68) failed [ 1615.147329][T19588] FAT-fs (loop4): Directory bread(block 69) failed [ 1615.194543][T19588] FAT-fs (loop4): Directory bread(block 70) failed [ 1615.250189][T19588] FAT-fs (loop4): Directory bread(block 71) failed [ 1615.273232][T19588] FAT-fs (loop4): Directory bread(block 72) failed [ 1615.281393][T19588] FAT-fs (loop4): Directory bread(block 73) failed [ 1616.486908][T18094] team0 (unregistering): Port device team_slave_1 removed [ 1616.564997][T18094] team0 (unregistering): Port device team_slave_0 removed [ 1616.596462][T18094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1616.631951][T18094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1617.066597][T18094] bond0 (unregistering): Released all slaves [ 1617.771936][T19613] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3243'. [ 1618.169407][T18094] team0 (unregistering): Port device team_slave_1 removed [ 1618.183200][T18094] team0 (unregistering): Port device team_slave_0 removed [ 1618.220833][T18094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1618.626817][T18094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1620.436752][T18094] bond0 (unregistering): Released all slaves [ 1620.549998][T19633] loop4: detected capacity change from 0 to 4096 [ 1620.601444][T19633] __ntfs_error: 58 callbacks suppressed [ 1620.601465][T19633] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 1620.646520][T19633] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1620.648955][T19581] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3234'. [ 1620.801514][T19633] ntfs: volume version 3.1. [ 1620.806132][T19633] ntfs: (device loop4): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 1620.884160][T19633] ntfs: (device loop4): map_mft_record(): Failed with error code 5. [ 1620.937353][T19649] loop1: detected capacity change from 0 to 256 [ 1620.967274][T19633] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 1620.987799][T19652] loop5: detected capacity change from 0 to 1024 [ 1621.068478][T19633] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1621.278232][ T4506] hfsplus: b-tree write err: -5, ino 25 [ 1621.284303][ T4506] hfsplus: b-tree write err: -5, ino 4 [ 1621.346132][ T4506] hfsplus: b-tree write err: -5, ino 2 [ 1621.406581][T19633] ntfs: (device loop4): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported. Sorry. [ 1622.335515][T19633] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 1623.004093][T19682] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3268'. [ 1623.961105][ T9328] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1624.410845][ T9328] usb 5-1: Using ep0 maxpacket: 32 [ 1624.667344][T19702] loop5: detected capacity change from 0 to 1024 [ 1624.754136][T19702] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1624.795380][T19702] EXT4-fs (loop5): inline encryption not supported [ 1624.828886][T19705] loop1: detected capacity change from 0 to 736 [ 1624.860001][T19702] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 1624.891042][ T9328] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.911226][ T9328] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.029124][T19715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1625.083293][ T9328] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1625.092468][ T9328] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1625.143874][ T9328] usb 5-1: Product: syz [ 1625.168563][ T9328] usb 5-1: Manufacturer: syz [ 1625.287591][ T9328] hub 5-1:4.0: USB hub found [ 1625.292035][T19721] loop5: detected capacity change from 0 to 8 [ 1625.299456][T19719] netlink: 'syz.6.3278': attribute type 10 has an invalid length. [ 1625.357179][T19719] bridge0: port 3(batadv0) entered blocking state [ 1625.364282][T19719] bridge0: port 3(batadv0) entered forwarding state [ 1625.371478][T19719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.378766][T19719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1625.386287][T19719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.393458][T19719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1625.510863][ T9328] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 1625.512543][T19719] team0: Port device bridge0 added [ 1625.586536][T19721] SQUASHFS error: Unable to read directory block [629:26] [ 1625.885710][ T9328] usb 5-1: USB disconnect, device number 6 [ 1626.200821][T19744] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3284'. [ 1626.780358][T19754] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1627.579413][T19736] loop1: detected capacity change from 0 to 32768 [ 1627.936538][T19736] (syz.1.3282,19736,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1629.427551][T19736] (syz.1.3282,19736,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1630.113366][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1630.120033][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1630.478948][T19736] (syz.1.3282,19736,1):ocfs2_initialize_super:2313 ERROR: status = -12 [ 1630.603411][T19736] (syz.1.3282,19736,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 1630.846067][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 1631.385114][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 1631.566905][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 1631.567566][T19784] loop4: detected capacity change from 0 to 1024 [ 1631.580642][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 1631.592091][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 1631.669080][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 1631.756251][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 1631.808032][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 1631.854972][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 1631.946421][T19784] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6) [ 1631.958887][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 1632.128399][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 1632.137736][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 1632.159076][T19784] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1632.393767][T19784] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.3295: Failed to acquire dquot type 0 [ 1632.512720][T19784] EXT4-fs error (device loop4): mb_free_blocks:1874: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 1632.790178][T19784] EXT4-fs (loop4): 1 truncate cleaned up [ 1632.801817][T19784] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1632.838417][T19813] loop5: detected capacity change from 0 to 164 [ 1632.966018][T19784] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6) [ 1632.984369][T19813] overlayfs: upper fs is r/o, try multi-lower layers mount [ 1633.040561][T19784] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1633.058928][T19784] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.3295: Failed to acquire dquot type 0 [ 1633.299100][T19827] rdma_rxe: rxe_register_device failed with error -23 [ 1633.338938][T19827] rdma_rxe: failed to add ipvlan0 [ 1633.625023][T19837] comedi comedi0: dac02: I/O port conflict (0x80,8) [ 1633.886934][T19852] loop5: detected capacity change from 0 to 8 [ 1633.965285][T19854] bridge0: port 3(batadv0) entered disabled state [ 1634.019888][T19857] loop1: detected capacity change from 0 to 64 [ 1634.037899][T19844] loop4: detected capacity change from 0 to 4096 [ 1634.076878][T19852] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1634.160005][T19844] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1634.252320][T19857] attempt to access beyond end of device [ 1634.252320][T19857] loop1: rw=0, want=268435470, limit=64 [ 1634.279692][T19857] buffer_io_error: 10 callbacks suppressed [ 1634.279713][T19857] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 1634.305354][T19844] ntfs3: loop4: Failed to load $Extend. [ 1634.548167][T19857] attempt to access beyond end of device [ 1634.548167][T19857] loop1: rw=0, want=268435470, limit=64 [ 1634.648727][T19857] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 1635.053828][ T4266] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1635.138463][T19881] loop4: detected capacity change from 0 to 2048 [ 1635.197181][T19881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1635.313935][ T4266] usb 6-1: Using ep0 maxpacket: 8 [ 1635.379059][T19888] Cannot find set identified by id 0 to match [ 1635.442484][ T4266] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.485047][ T4266] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1635.547163][ T4266] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1635.708638][T19894] loop1: detected capacity change from 0 to 4096 [ 1635.773828][ T4266] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1635.794493][ T4266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.826303][ T4266] usb 6-1: Product: syz [ 1635.838407][T19894] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1635.867614][ T4266] usb 6-1: Manufacturer: syz [ 1635.894222][ T4266] usb 6-1: SerialNumber: syz [ 1635.921269][T19907] loop4: detected capacity change from 0 to 256 [ 1635.956907][ T4266] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 1635.964353][ T4266] cdc_ncm 6-1:1.0: bind() failure [ 1636.030437][T19894] ntfs: volume version 3.1. [ 1636.057562][T19907] FAT-fs (loop4): Directory bread(block 64) failed [ 1636.092768][T19894] ntfs: (device loop1): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 1636.106604][T19907] FAT-fs (loop4): Directory bread(block 65) failed [ 1636.113636][T19907] FAT-fs (loop4): Directory bread(block 66) failed [ 1636.148616][T19907] FAT-fs (loop4): Directory bread(block 67) failed [ 1636.155292][T19907] FAT-fs (loop4): Directory bread(block 68) failed [ 1636.190721][ T4266] cdc_mbim 6-1:1.1: CDC Union missing and no IAD found [ 1636.197704][ T4266] cdc_mbim 6-1:1.1: bind() failure [ 1636.206617][T19894] ntfs: (device loop1): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 1636.245040][T19907] FAT-fs (loop4): Directory bread(block 69) failed [ 1636.286232][T19907] FAT-fs (loop4): Directory bread(block 70) failed [ 1636.315571][T19894] ntfs: (device loop1): ntfs_remount(): Volume has errors and is read-only. Cannot remount read-write. [ 1636.336814][T19907] FAT-fs (loop4): Directory bread(block 71) failed [ 1636.361714][T19907] FAT-fs (loop4): Directory bread(block 72) failed [ 1636.383109][T19907] FAT-fs (loop4): Directory bread(block 73) failed [ 1636.443293][ T9328] usb 6-1: USB disconnect, device number 5 [ 1636.854476][T19921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1637.431777][T19935] loop1: detected capacity change from 0 to 256 [ 1637.649065][T19942] __nla_validate_parse: 10 callbacks suppressed [ 1637.649085][T19942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3341'. [ 1637.670532][T19935] FAT-fs (loop1): Directory bread(block 64) failed [ 1637.698134][T19935] FAT-fs (loop1): Directory bread(block 65) failed [ 1637.704769][T19935] FAT-fs (loop1): Directory bread(block 66) failed [ 1637.744386][T19935] FAT-fs (loop1): Directory bread(block 67) failed [ 1637.751057][T19935] FAT-fs (loop1): Directory bread(block 68) failed [ 1637.793797][T19942] tc_dump_action: action bad kind [ 1637.801028][T19935] FAT-fs (loop1): Directory bread(block 69) failed [ 1637.843661][T19944] loop5: detected capacity change from 0 to 1764 [ 1637.858442][T19935] FAT-fs (loop1): Directory bread(block 70) failed [ 1637.923954][T19935] FAT-fs (loop1): Directory bread(block 71) failed [ 1637.944312][T19935] FAT-fs (loop1): Directory bread(block 72) failed [ 1637.951033][T19935] FAT-fs (loop1): Directory bread(block 73) failed [ 1637.964559][T19944] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1638.139801][T19954] loop4: detected capacity change from 0 to 16 [ 1638.223273][T19954] erofs: (device loop4): mounted with root inode @ nid 36. [ 1638.389406][ T26] audit: type=1800 audit(1773990622.270:269): pid=19935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3340" name="file1" dev="loop1" ino=1048734 res=0 errno=0 [ 1638.414964][T19958] loop5: detected capacity change from 0 to 64 [ 1638.963310][T19980] rdma_rxe: rxe_register_device failed with error -23 [ 1639.013124][T19980] rdma_rxe: failed to add team_slave_0 [ 1639.094681][T19968] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1639.418281][T19996] set_capacity_and_notify: 1 callbacks suppressed [ 1639.418299][T19996] loop5: detected capacity change from 0 to 16 [ 1639.489201][T19996] erofs: (device loop5): mounted with root inode @ nid 36. [ 1639.580837][T20002] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1641.501797][T20044] loop5: detected capacity change from 0 to 512 [ 1641.708599][T20044] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1641.762690][T20044] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1641.797347][T20053] xt_connbytes: Forcing CT accounting to be enabled [ 1641.804539][T20044] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1641.908255][T20044] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1641.985254][T20061] comedi comedi2: mpc624: I/O port conflict (0x2,16) [ 1642.041061][T20044] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1642.136865][T20067] binder: 20066:20067 unknown command 0 [ 1642.160857][T20067] binder: 20066:20067 ioctl c0306201 200000000080 returned -22 [ 1642.178258][T20044] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1642.220490][T20044] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce11c, mo2=0000] [ 1642.228364][T20044] EXT4-fs (loop5): failed to initialize system zone (-117) [ 1642.235877][T20044] EXT4-fs (loop5): mount failed [ 1642.898527][T20089] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3386'. [ 1644.235695][T20130] loop1: detected capacity change from 0 to 8 [ 1644.393885][T20130] SQUASHFS error: Failed to read block 0x33c: -5 [ 1644.427085][T20130] SQUASHFS error: Unable to read metadata cache entry [33c] [ 1644.471162][ T26] audit: type=1800 audit(1773990627.948:270): pid=20130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3398" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1644.665977][T20146] loop1: detected capacity change from 0 to 256 [ 1644.727444][T20146] exfat: Deprecated parameter 'utf8' [ 1644.783113][T20146] exfat: Deprecated parameter 'utf8' [ 1644.877026][T20146] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1645.185790][T20166] loop4: detected capacity change from 0 to 64 [ 1645.502611][T20182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3416'. [ 1647.980676][T20269] loop5: detected capacity change from 0 to 64 [ 1648.333762][T20280] loop5: detected capacity change from 0 to 1024 [ 1648.392924][T20280] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1648.482526][T20280] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 1648.720451][ T26] audit: type=1800 audit(1773990631.914:271): pid=20280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3446" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1649.208676][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3453'. [ 1649.344349][T20299] loop1: detected capacity change from 0 to 4096 [ 1649.364592][T20306] tipc: Started in network mode [ 1649.394068][T20306] tipc: Node identity , cluster identity 4711 [ 1649.453661][T20299] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid end of sector marker. [ 1649.641251][T20299] ntfs: volume version 3.1. [ 1650.180267][T20335] loop1: detected capacity change from 0 to 512 [ 1650.445044][T20335] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1650.521182][T20335] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1650.645027][T20335] EXT4-fs warning (device loop1): ext4_group_extend:1852: can't read last block, resize aborted [ 1650.717103][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3466'. [ 1651.881883][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'. [ 1652.376151][ T4228] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1652.791019][T20421] loop5: detected capacity change from 0 to 16 [ 1652.910434][T20421] erofs: (device loop5): mounted with root inode @ nid 36. [ 1652.921548][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1652.949637][ T4228] usb 2-1: New USB device found, idVendor=5e0a, idProduct=a055, bcdDevice= 0.00 [ 1652.969774][T20421] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1652.994318][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.020372][T20421] erofs: (device loop5): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1653.061979][ T4228] usb 2-1: config 0 descriptor?? [ 1653.090629][T20421] erofs: (device loop5): z_erofs_readpage: failed to read, err [-95] [ 1653.124814][ T26] audit: type=1800 audit(1773990636.058:272): pid=20421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3491" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1653.599864][ T4228] hid-generic 0003:5E0A:A055.0002: unbalanced collection at end of report description [ 1653.620475][ T4228] hid-generic: probe of 0003:5E0A:A055.0002 failed with error -22 [ 1653.644325][T20447] tipc: Started in network mode [ 1653.674094][T20447] tipc: Node identity , cluster identity 4711 [ 1653.859576][ T4228] usb 2-1: USB disconnect, device number 5 [ 1655.893392][ T4266] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1656.262930][T20520] loop1: detected capacity change from 0 to 512 [ 1656.281796][T20522] netlink: 'syz.6.3519': attribute type 3 has an invalid length. [ 1656.290210][ T4266] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1656.298336][ T4266] usb 5-1: config 0 has no interface number 0 [ 1656.321113][ T4266] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1656.373486][ T4266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.430008][ T4266] usb 5-1: config 0 descriptor?? [ 1656.476019][T20520] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,auto_da_alloc=0x0000000000000007,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1656.485792][T20531] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 1656.513169][ T4266] usb 5-1: selecting invalid altsetting 1 [ 1656.525697][ T4266] dvb_ttusb_budget: ttusb_init_controller: error [ 1656.532268][ T4266] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1656.532345][T20520] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1656.729950][ T4266] DVB: Unable to find symbol cx22700_attach() [ 1656.765185][T20520] EXT4-fs (loop1): re-mounted. Opts: noinit_itable,auto_da_alloc=0x0000000000000007,noauto_da_alloc,. Quota mode: writeback. [ 1656.847243][ T4266] DVB: Unable to find symbol tda10046_attach() [ 1656.859791][ T4266] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1656.890684][ T4266] usb 5-1: USB disconnect, device number 7 [ 1657.153270][T20548] device dummy0 entered promiscuous mode [ 1657.177272][T20548] device dummy0 left promiscuous mode [ 1657.475931][T20560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3528'. [ 1657.928948][T20587] loop4: detected capacity change from 0 to 512 [ 1658.063189][T20587] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1658.165498][T20587] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #17: comm syz.4.3540: inode has both inline data and extents flags [ 1658.181891][T20587] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.3540: couldn't read orphan inode 17 (err -117) [ 1658.227482][T20587] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1660.017824][T20669] bridge_slave_1: default FDB implementation only supports local addresses [ 1660.294111][T20653] loop4: detected capacity change from 0 to 32768 [ 1660.366190][T20653] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3558 (20653) [ 1660.526719][T20653] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1660.590637][T20653] BTRFS info (device loop4): turning off barriers [ 1660.623886][T20653] BTRFS info (device loop4): setting nodatasum [ 1660.682837][T20653] BTRFS info (device loop4): force zlib compression, level 3 [ 1660.702143][T20653] BTRFS info (device loop4): ignoring bad roots [ 1660.730598][T20653] BTRFS info (device loop4): turning on barriers [ 1660.757890][T20653] BTRFS info (device loop4): unrecognized rescue option 'ignoremetacsums' [ 1660.814794][T20653] BTRFS error (device loop4): unrecognized rescue value ignoremetacsums [ 1660.840252][T20653] BTRFS error (device loop4): open_ctree failed: -22 [ 1660.998760][T20702] loop5: detected capacity change from 0 to 512 [ 1661.110704][ T4228] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1661.160838][T20702] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 1661.160838][T20702] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1661.160838][T20702] [ 1661.223158][T20702] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1661.309959][T20702] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026018, mo2=0000] [ 1661.367118][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 1661.415443][T20702] EXT4-fs (loop5): 1 truncate cleaned up [ 1661.463307][T20702] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nojournal_checksum,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,journal_ioprio=0x0000000000000002,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 1661.493065][ T4447] Quota error (device loop5): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 1661.538373][ T4447] EXT4-fs error (device loop5): ext4_release_dquot:6270: comm kworker/u4:12: Failed to release dquot type 1 [ 1661.671923][T20719] loop4: detected capacity change from 0 to 4096 [ 1661.677203][ T4228] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1661.720816][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.729329][ T4228] usb 2-1: Product: syz [ 1661.746492][ T4228] usb 2-1: Manufacturer: syz [ 1661.751150][ T4228] usb 2-1: SerialNumber: syz [ 1661.801640][T20719] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856e018, mo2=0002] [ 1661.827033][T20719] System zones: 0-5 [ 1661.829481][ T4228] usb 2-1: config 0 descriptor?? [ 1661.848708][T20719] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000007,grpquota,nouid32,debug,nojournal_checksum,resuid=0x0000000000000000,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 1661.871236][ T4228] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1661.881003][ T4228] dvb-usb: bulk message failed: -22 (2/0) [ 1661.892257][ T4228] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1661.923139][ T4228] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1661.932399][ T4228] usb 2-1: media controller created [ 1661.961597][ T4228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1662.006504][ T4228] usb 2-1: selecting invalid altsetting 7 [ 1662.025271][ T4228] cxusb: set interface failed [ 1662.030720][ T4228] dvb-usb: bulk message failed: -22 (1/0) [ 1662.083288][T20719] fs-verity: sha512 using implementation "sha512-avx2" [ 1662.126016][T20697] cxusb: i2c wr: len=79 is too big! [ 1662.126016][T20697] [ 1662.197715][ T4228] DVB: Unable to find symbol lgdt330x_attach() [ 1662.212423][ T4228] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1662.395951][ T4228] rc_core: IR keymap rc-dvico-portable not found [ 1662.414470][ T4228] Registered IR keymap rc-empty [ 1662.432393][ T4228] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1662.465816][ T4228] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7 [ 1662.525396][ T4228] dvb-usb: schedule remote query interval to 100 msecs. [ 1662.544399][ T4228] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1662.606294][ T4228] usb 2-1: USB disconnect, device number 6 [ 1663.185084][T20767] IPVS: Unknown mcast interface: pim6reg1 [ 1663.353024][ T4228] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1663.366125][T20773] mkiss: ax0: crc mode is auto. [ 1663.703032][T20788] loop1: detected capacity change from 0 to 1024 [ 1663.875417][T20788] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,auto_da_alloc,,errors=continue. Quota mode: none. [ 1664.659257][T20816] loop1: detected capacity change from 0 to 2048 [ 1664.812082][T20824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3605'. [ 1665.636630][T20824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3605'. [ 1666.598852][T20875] loop4: detected capacity change from 0 to 256 [ 1666.703366][T20875] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1666.889033][T20875] exFAT-fs (loop4): hint_cluster is invalid (17) [ 1667.463216][T20849] loop5: detected capacity change from 0 to 32768 [ 1667.639233][T20849] XFS (loop5): Mounting V5 Filesystem [ 1667.859839][T20849] XFS (loop5): Starting recovery (logdev: internal) [ 1667.941795][T20849] XFS (loop5): Ending recovery (logdev: internal) [ 1668.267044][T12786] XFS (loop5): Unmounting Filesystem [ 1668.297368][T20935] loop1: detected capacity change from 0 to 8192 [ 1668.522436][T20922] loop4: detected capacity change from 0 to 32768 [ 1668.562125][T20922] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3632 (20922) [ 1668.594000][T20935] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1668.623484][T20935] REISERFS (device loop1): using ordered data mode [ 1668.650774][T20922] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1668.664542][T20935] reiserfs: using flush barriers [ 1668.729990][T20922] BTRFS info (device loop4): setting nodatasum [ 1668.764622][T20935] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1668.786354][T20922] BTRFS info (device loop4): force zlib compression, level 3 [ 1668.808868][T20922] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1668.821789][T20935] REISERFS (device loop1): checking transaction log (loop1) [ 1668.919265][T20935] REISERFS (device loop1): Using r5 hash to sort names [ 1668.936466][T20922] BTRFS info (device loop4): use lzo compression, level 0 [ 1668.943879][T20922] BTRFS info (device loop4): turning on flush-on-commit [ 1668.996513][T20922] BTRFS info (device loop4): enabling auto defrag [ 1669.032237][T20922] BTRFS info (device loop4): max_inline at 4096 [ 1669.041683][T20935] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1669.054674][T20922] BTRFS info (device loop4): using free space tree [ 1669.094955][T20922] BTRFS info (device loop4): has skinny extents [ 1669.474737][T20922] BTRFS info (device loop4): enabling ssd optimizations [ 1670.244609][T21006] loop5: detected capacity change from 0 to 164 [ 1671.220273][T21020] loop1: detected capacity change from 0 to 1024 [ 1672.405046][ C0] vkms_vblank_simulate: vblank timer overrun [ 1672.474760][T21020] hfsplus: bad catalog entry type [ 1672.601478][ C0] vkms_vblank_simulate: vblank timer overrun [ 1672.773892][T18753] hfsplus: b-tree write err: -5, ino 25 [ 1672.779851][T18753] hfsplus: b-tree write err: -5, ino 4 [ 1672.838123][T18753] hfsplus: b-tree write err: -5, ino 2 [ 1673.006420][T21062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3662'. [ 1673.051157][T21062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3662'. [ 1673.262726][T21074] tipc: Started in network mode [ 1673.295593][T21074] tipc: Node identity , cluster identity 4711 [ 1673.332304][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'. [ 1673.500879][T21053] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1673.682625][T17137] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1673.768158][T21053] usb 6-1: Using ep0 maxpacket: 16 [ 1673.909053][T21053] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1673.952646][T21053] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1674.155182][T21053] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1674.186459][T21053] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.194494][T21053] usb 6-1: Product: syz [ 1674.253653][T21053] usb 6-1: Manufacturer: syz [ 1674.264436][T21053] usb 6-1: SerialNumber: syz [ 1674.300355][T21053] usb 6-1: config 0 descriptor?? [ 1674.613147][T17137] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1674.630822][T17137] usb 2-1: config 0 has no interface number 0 [ 1674.668790][T17137] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1674.717418][T17137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.787599][T17137] usb 2-1: config 0 descriptor?? [ 1674.872752][T17137] usb 2-1: selecting invalid altsetting 1 [ 1674.894144][T17137] dvb_ttusb_budget: ttusb_init_controller: error [ 1674.916333][T21053] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8 [ 1674.928990][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1674.934135][T17137] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1674.982945][ T9329] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1675.086965][T17137] DVB: Unable to find symbol cx22700_attach() [ 1675.157830][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1675.169485][T21053] imon:send_packet: packet tx failed (-71) [ 1675.183473][T17137] DVB: Unable to find symbol tda10046_attach() [ 1675.190039][T21053] imon 6-1:0.0: panel buttons/knobs setup failed [ 1675.194547][T17137] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1675.254205][ T9329] usb 5-1: Using ep0 maxpacket: 16 [ 1675.267090][T17137] usb 2-1: USB disconnect, device number 7 [ 1675.393097][T21053] rc_core: IR keymap rc-imon-pad not found [ 1675.399113][T21053] Registered IR keymap rc-empty [ 1675.418369][T21053] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1675.451617][T21053] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1675.489341][T21053] imon:send_packet: packet tx failed (-71) [ 1675.489621][ T9329] usb 5-1: config 141 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.521421][T21053] imon 6-1:0.0: remote input dev register failed [ 1675.527818][ T9329] usb 5-1: config 141 has 0 interfaces, different from the descriptor's value: 1 [ 1675.574957][T21053] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 1675.664623][T21053] imon 6-1:0.0: unable to initialize intf0, err 0 [ 1675.676681][T21053] imon:imon_probe: failed to initialize context! [ 1675.694744][T21053] imon 6-1:0.0: unable to register, err -19 [ 1675.748545][T21053] usb 6-1: USB disconnect, device number 6 [ 1675.802232][ T9329] usb 5-1: string descriptor 0 read error: -22 [ 1675.817582][ T9329] usb 5-1: New USB device found, idVendor=05e3, idProduct=1bf0, bcdDevice=ca.00 [ 1675.851745][ T9329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.200523][T14588] usb 5-1: USB disconnect, device number 8 [ 1676.320696][T21162] loop5: detected capacity change from 0 to 512 [ 1676.323134][ T9329] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1676.555973][T21162] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1676.965987][ T9329] usb 2-1: Using ep0 maxpacket: 16 [ 1677.103844][ T9329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1677.135607][ T9329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1677.165565][ T9329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1677.208684][ T9329] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1677.247513][ T9329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.261700][T21189] sch_tbf: peakrate 2 is lower than or equals to rate 2 ! [ 1677.292045][ T9329] usb 2-1: config 0 descriptor?? [ 1677.340832][T21054] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1677.468472][T21197] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3697'. [ 1677.477489][T21197] netem: unknown loss type 13 [ 1677.497085][T21197] netem: change failed [ 1677.606194][T21054] usb 6-1: Using ep0 maxpacket: 32 [ 1677.643783][T21211] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3700'. [ 1677.734508][T21054] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1677.764678][T21054] usb 6-1: config 0 has no interface number 0 [ 1677.849460][ T9329] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1677.883499][ T9329] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 1677.948428][T21054] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1677.954675][ T9329] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1677.978756][T21228] 9pnet: Insufficient options for proto=fd [ 1677.980174][T21054] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.012484][ T9329] microsoft 0003:045E:07DA.0003: no inputs found [ 1678.022987][T21054] usb 6-1: Product: syz [ 1678.034381][T21054] usb 6-1: Manufacturer: syz [ 1678.043562][ T9329] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 1678.048897][T21054] usb 6-1: SerialNumber: syz [ 1678.091129][T21054] usb 6-1: config 0 descriptor?? [ 1678.112785][ T9329] usb 2-1: USB disconnect, device number 8 [ 1678.167094][T21054] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1678.197498][T21237] loop4: detected capacity change from 0 to 64 [ 1678.285639][T21234] fido_id[21234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1678.357343][T21054] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1678.408298][T21054] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1679.179854][T21257] loop1: detected capacity change from 0 to 512 [ 1679.226232][T21257] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1679.276682][T21257] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1679.284517][T14588] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1679.364255][T21257] EXT4-fs (loop1): 1 truncate cleaned up [ 1679.397241][T21257] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 1679.429447][T17137] usb 6-1: USB disconnect, device number 7 [ 1679.434064][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1679.443822][T17137] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1679.511737][T17137] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1679.574494][T17137] quatech2 6-1:0.51: device disconnected [ 1680.235722][T14588] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 1680.245121][T14588] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.255645][T14588] usb 5-1: config 0 has no interface number 0 [ 1680.262126][T14588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 1680.272044][T14588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.301609][T14588] usb 5-1: config 0 descriptor?? [ 1680.497457][T21302] loop1: detected capacity change from 0 to 256 [ 1680.620977][T14588] usb 5-1: string descriptor 0 read error: -71 [ 1680.638035][T21302] FAT-fs (loop1): Directory bread(block 1285) failed [ 1680.656239][T21302] FAT-fs (loop1): Directory bread(block 1286) failed [ 1680.663031][T21302] FAT-fs (loop1): Directory bread(block 1287) failed [ 1680.721902][T21302] FAT-fs (loop1): Directory bread(block 1288) failed [ 1680.775760][T21302] FAT-fs (loop1): Directory bread(block 1285) failed [ 1680.794170][T21302] FAT-fs (loop1): Directory bread(block 1286) failed [ 1680.814250][T21302] FAT-fs (loop1): Directory bread(block 1287) failed [ 1680.821098][T21302] FAT-fs (loop1): Directory bread(block 1288) failed [ 1680.867525][T21308] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 1680.887482][T21302] FAT-fs (loop1): Directory bread(block 1285) failed [ 1681.193191][T14588] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 1681.872658][T21290] loop5: detected capacity change from 0 to 32768 [ 1681.926713][T14588] usb 5-1: USB disconnect, device number 9 [ 1682.078564][T21290] XFS (loop5): Mounting V5 Filesystem [ 1682.245223][T21290] XFS (loop5): Ending clean mount [ 1682.368664][T21290] XFS (loop5): Quotacheck needed: Please wait. [ 1682.516610][T14588] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1682.548568][T21290] XFS (loop5): Quotacheck: Done. [ 1682.792094][T12786] XFS (loop5): Unmounting Filesystem [ 1682.792196][T14588] usb 5-1: Using ep0 maxpacket: 32 [ 1682.963188][T14588] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1682.971427][T14588] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1683.001813][T14588] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1683.027373][T14588] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1683.058403][T14588] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1683.253960][T14588] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1683.269050][T14588] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1683.283224][T14588] usb 5-1: Product: syz [ 1683.287613][T14588] usb 5-1: Manufacturer: syz [ 1683.292229][T14588] usb 5-1: SerialNumber: syz [ 1683.315185][T14588] usb 5-1: config 0 descriptor?? [ 1683.359347][T14588] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1683.432701][T14588] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1683.483309][T21371] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3734'. [ 1683.885425][T21386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3738'. [ 1683.926016][T17137] usb 5-1: USB disconnect, device number 10 [ 1684.058057][T17137] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1685.114674][T21413] overlayfs: failed to clone lowerpath [ 1686.876627][ T9328] Bluetooth: hci2: command 0x0406 tx timeout [ 1689.905664][T21528] loop4: detected capacity change from 0 to 256 [ 1689.923001][T21530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.930404][T21530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.999804][T21528] FAT-fs (loop4): Directory bread(block 64) failed [ 1690.022663][T21528] FAT-fs (loop4): Directory bread(block 65) failed [ 1690.038528][T21528] FAT-fs (loop4): Directory bread(block 66) failed [ 1690.060704][T21528] FAT-fs (loop4): Directory bread(block 67) failed [ 1690.067377][T21528] FAT-fs (loop4): Directory bread(block 68) failed [ 1690.082359][ T9329] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1690.095868][T21528] FAT-fs (loop4): Directory bread(block 69) failed [ 1690.102906][T21528] FAT-fs (loop4): Directory bread(block 70) failed [ 1690.109948][T21528] FAT-fs (loop4): Directory bread(block 71) failed [ 1690.119330][T21528] FAT-fs (loop4): Directory bread(block 72) failed [ 1690.126565][T21528] FAT-fs (loop4): Directory bread(block 73) failed [ 1690.520467][ T9329] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1690.553336][ T9329] usb 6-1: config 0 has no interface number 0 [ 1690.756231][ T9329] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1690.801152][ T9329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.904707][ T9329] usb 6-1: Product: syz [ 1690.942859][ T9329] usb 6-1: Manufacturer: syz [ 1690.990849][ T9329] usb 6-1: SerialNumber: syz [ 1691.118006][ T9329] usb 6-1: config 0 descriptor?? [ 1691.439779][ T9329] dvb_usb_ec168: probe of 6-1:0.1 failed with error -71 [ 1691.479879][ T9329] usb 6-1: USB disconnect, device number 8 [ 1691.576255][T21560] loop1: detected capacity change from 0 to 4096 [ 1691.669942][T21560] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1691.749312][T21560] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1691.946161][T21586] device netdevsim0 entered promiscuous mode [ 1691.965585][T21586] device macsec1 entered promiscuous mode [ 1691.990863][T21586] device netdevsim0 left promiscuous mode [ 1692.252186][ T9329] Bluetooth: hci3: command 0x0406 tx timeout [ 1692.828669][T21621] loop1: detected capacity change from 0 to 512 [ 1692.931570][T21615] block device autoloading is deprecated and will be removed. [ 1693.003228][T21622] loop4: detected capacity change from 0 to 64 [ 1693.186392][T21621] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1693.195917][T21621] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1693.244706][T21621] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1693.254797][T21621] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1693.265554][T21621] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1693.282635][T21621] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1693.291600][T21621] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce11c, mo2=0000] [ 1693.299460][T21621] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1693.306825][T21621] EXT4-fs (loop1): mount failed [ 1693.930694][ T4228] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1694.483832][T21680] loop5: detected capacity change from 0 to 64 [ 1694.539958][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 1694.689878][ T4228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.709235][ T4228] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1694.893990][ T4228] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1694.917921][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.970391][ T4228] usb 2-1: Product: syz [ 1695.003921][ T4228] usb 2-1: Manufacturer: syz [ 1695.036336][ T4228] usb 2-1: SerialNumber: syz [ 1695.187206][T21706] loop5: detected capacity change from 0 to 256 [ 1695.246624][T21706] exfat: Deprecated parameter 'namecase' [ 1695.267576][T21706] exfat: Deprecated parameter 'utf8' [ 1695.304527][T21706] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1695.384360][T21712] loop4: detected capacity change from 0 to 256 [ 1695.459576][ T4228] usb 2-1: 0:2 : does not exist [ 1695.505500][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1695.512212][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1695.745507][ T4228] usb 2-1: USB disconnect, device number 9 [ 1695.817321][T19639] udevd[19639]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1696.045632][T21727] loop4: detected capacity change from 0 to 4096 [ 1696.086807][T21727] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1696.444905][ T4368] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 1696.451965][ T4368] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1696.518366][T18911] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 1696.819144][T21758] loop1: detected capacity change from 0 to 512 [ 1696.916504][T21758] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1696.926609][T21758] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1696.937222][T21758] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1696.947144][T21758] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1696.957480][T21758] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1696.980308][T21758] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1696.989551][T21758] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce11c, mo2=0000] [ 1696.997478][T21758] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1697.004939][T21758] EXT4-fs (loop1): mount failed [ 1697.009475][ T4266] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1697.276845][ T4266] usb 5-1: Using ep0 maxpacket: 16 [ 1697.405198][ T4266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.429800][ T4266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1697.555501][ T4266] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1697.564705][ T4266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.584869][ T4266] usb 5-1: config 0 descriptor?? [ 1698.111839][ T4266] betop 0003:20BC:5500.0004: unknown main item tag 0x0 [ 1698.118767][ T4266] betop 0003:20BC:5500.0004: unknown main item tag 0x0 [ 1698.158707][ T4266] betop 0003:20BC:5500.0004: unknown main item tag 0x0 [ 1698.189085][ T4266] betop 0003:20BC:5500.0004: unknown main item tag 0x0 [ 1698.206805][ T4266] betop 0003:20BC:5500.0004: unknown main item tag 0x0 [ 1698.217864][ T4266] betop 0003:20BC:5500.0004: unknown main item tag 0x0 [ 1698.235797][ T4266] betop 0003:20BC:5500.0004: unknown global tag 0xd [ 1698.246606][ T4266] betop 0003:20BC:5500.0004: item 0 1 1 13 parsing failed [ 1698.260753][ T4266] betop 0003:20BC:5500.0004: parse failed [ 1698.266579][ T4266] betop: probe of 0003:20BC:5500.0004 failed with error -22 [ 1698.354154][T17137] usb 5-1: USB disconnect, device number 11 [ 1698.623891][ T4266] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1698.901776][ T4266] usb 2-1: Using ep0 maxpacket: 8 [ 1699.030148][ T4266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.068332][ T4266] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1699.094782][ T4266] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 1699.142794][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.180768][ T4266] usb 2-1: config 0 descriptor?? [ 1699.378554][T21821] loop5: detected capacity change from 0 to 128 [ 1699.542075][ T4266] usb 2-1: USB disconnect, device number 10 [ 1699.927427][T21834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3855'. [ 1701.737939][T21881] loop5: detected capacity change from 0 to 128 [ 1701.884211][T21881] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1703.479083][T21909] loop5: detected capacity change from 0 to 128 [ 1704.708225][T21925] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1705.521643][T21933] loop5: detected capacity change from 0 to 512 [ 1705.795320][T21939] loop1: detected capacity change from 0 to 512 [ 1705.826108][T21933] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1705.848569][T21939] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1705.858992][T21939] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1705.864074][T21933] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1705.893512][T21939] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1705.903413][T21939] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1705.913339][T21939] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1705.935912][T21939] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1705.944457][T21939] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce11c, mo2=0000] [ 1705.953019][T21939] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1705.960585][T21939] EXT4-fs (loop1): mount failed [ 1707.443515][T17264] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1707.708395][T17264] usb 6-1: Using ep0 maxpacket: 32 [ 1707.839360][T17264] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1707.853008][T17264] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1707.918074][T17264] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1707.951312][T17264] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1708.008749][T17264] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1708.132952][T22007] loop4: detected capacity change from 0 to 128 [ 1708.143062][T22008] loop1: detected capacity change from 0 to 512 [ 1708.213492][T17264] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1708.251698][T22008] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.3904: inode has both inline data and extents flags [ 1708.295356][T17264] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1708.309740][T22007] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1708.323107][T22007] hpfs: filesystem error: improperly stopped [ 1708.329226][T22007] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1708.341924][T22008] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3904: couldn't read orphan inode 15 (err -117) [ 1708.352432][T22007] hpfs: You really don't want any checks? You are crazy... [ 1708.362123][T22008] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1708.372796][T17264] usb 6-1: Product: syz [ 1708.384119][T22007] hpfs: hpfs_map_sector(): read error [ 1708.413047][T22007] hpfs: code page support is disabled [ 1708.419917][T22007] hpfs: hpfs_map_4sectors(): unaligned read [ 1708.426427][T22007] hpfs: hpfs_map_4sectors(): unaligned read [ 1708.444075][T22007] hpfs: filesystem error: unable to find root dir [ 1708.554328][T17264] usb 6-1: Manufacturer: syz [ 1708.565493][T17264] usb 6-1: SerialNumber: syz [ 1708.572711][T17264] usb 6-1: config 0 descriptor?? [ 1708.621012][T17264] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1709.365140][T22028] loop4: detected capacity change from 0 to 512 [ 1709.414542][T17264] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1709.648932][T22028] EXT4-fs (loop4): filesystem is read-only [ 1709.694371][T22028] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1709.754896][T22037] loop1: detected capacity change from 0 to 128 [ 1709.852749][T22028] EXT4-fs (loop4): filesystem is read-only [ 1709.865985][T22028] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1709.872765][T22037] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1709.927444][T22028] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3909: bg 0: block 64: padding at end of block bitmap is not set [ 1709.952618][T22028] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 1709.960109][T22037] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1709.962471][T22028] EXT4-fs (loop4): 1 orphan inode deleted [ 1709.978638][T22028] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,noblock_validity,auto_da_alloc=0x0000000000000000,delalloc,noblock_validity,noauto_da_alloc,minixdf,nolazytime,prjquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1710.003102][T22037] ext2 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1710.308871][T17264] usb 6-1: USB disconnect, device number 9 [ 1710.316587][T17264] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1710.363644][T22054] loop5: detected capacity change from 0 to 128 [ 1710.435869][T22058] loop1: detected capacity change from 0 to 256 [ 1710.501688][T22058] exfat: Deprecated parameter 'utf8' [ 1710.507181][T22058] exfat: Deprecated parameter 'namecase' [ 1710.537931][T22058] exfat: Deprecated parameter 'namecase' [ 1710.549723][T22054] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1710.615577][T22054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1710.634852][T22058] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1710.662985][T22063] loop4: detected capacity change from 0 to 256 [ 1711.666398][ T9329] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1711.953856][T22085] loop5: detected capacity change from 0 to 512 [ 1711.991667][T22087] loop4: detected capacity change from 0 to 1024 [ 1712.008605][ T9329] usb 2-1: Using ep0 maxpacket: 16 [ 1712.080050][T22085] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 1712.138501][ T9329] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1712.180952][ T9329] usb 2-1: config 0 has no interface number 0 [ 1712.187193][ T9329] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.254567][T22085] ext4 filesystem being mounted at /422/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1712.289049][ T9329] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1712.346099][ T9329] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1712.371996][ T9329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.404165][ T9329] usb 2-1: config 0 descriptor?? [ 1713.444541][ T9329] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0005/input/input10 [ 1713.716268][ T9329] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0005/input/input11 [ 1713.783436][ T9329] uclogic 0003:28BD:0071.0005: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 1713.841876][ T9329] usb 2-1: USB disconnect, device number 11 [ 1714.017658][T22118] fido_id[22118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1715.133162][T22113] loop4: detected capacity change from 0 to 40427 [ 1715.297781][T22113] F2FS-fs (loop4): invalid crc value [ 1715.342940][T22113] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1715.651538][T22159] loop1: detected capacity change from 0 to 2048 [ 1715.873817][T22165] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1715.945855][T22113] F2FS-fs (loop4): Start checkpoint disabled! [ 1716.068791][T22113] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1716.269319][T22175] loop1: detected capacity change from 0 to 512 [ 1716.386536][T22175] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1716.468155][T22175] EXT4-fs (loop1): 1 orphan inode deleted [ 1716.486954][T22175] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1716.544563][ T8804] attempt to access beyond end of device [ 1716.544563][ T8804] loop4: rw=2049, want=40984, limit=40427 [ 1716.601743][T22175] EXT4-fs (loop1): shut down requested (2) [ 1718.035915][T22189] loop1: detected capacity change from 0 to 131072 [ 1718.268534][T22189] F2FS-fs (loop1): invalid crc value [ 1718.303655][T22189] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1718.353039][T22189] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 1718.452349][T22189] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1718.618600][T22208] loop4: detected capacity change from 0 to 4096 [ 1719.169063][T22192] loop5: detected capacity change from 0 to 32768 [ 1719.395888][T22192] XFS (loop5): Mounting V5 Filesystem [ 1719.532173][T22192] XFS (loop5): Ending clean mount [ 1719.595186][T12786] XFS (loop5): Unmounting Filesystem [ 1719.832506][T22244] loop1: detected capacity change from 0 to 512 [ 1719.988353][T22244] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1720.089722][T22244] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1720.583248][T22225] loop4: detected capacity change from 0 to 32768 [ 1721.406792][T22261] loop5: detected capacity change from 0 to 2048 [ 1721.582131][T22261] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 1721.795522][T22225] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 1721.795522][T22225] [ 1721.877768][T22225] ERROR: (device loop4): remounting filesystem as read-only [ 1721.885113][T22225] xtLookup: xtSearch returned -5 [ 1721.951004][T22225] free_index: error reading directory table [ 1725.082344][T22284] loop1: detected capacity change from 0 to 32768 [ 1725.254740][T22285] loop5: detected capacity change from 0 to 32768 [ 1725.374332][T22285] XFS (loop5): Mounting V5 Filesystem [ 1725.592005][T22284] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 1725.592005][T22284] [ 1725.605285][T22284] ERROR: (device loop1): dbDiscardAG: -EIO [ 1725.605285][T22284] [ 1725.620167][T22292] loop4: detected capacity change from 0 to 32768 [ 1725.639220][T22285] XFS (loop5): Ending clean mount [ 1726.117277][T12786] XFS (loop5): Unmounting Filesystem [ 1726.483515][ T9329] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1726.793798][ T9329] usb 2-1: Using ep0 maxpacket: 16 [ 1726.986730][ T9329] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1727.077954][T22360] loop4: detected capacity change from 0 to 128 [ 1727.340867][ T9329] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1728.045252][ T9329] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1728.058165][T22358] loop5: detected capacity change from 0 to 131072 [ 1728.075790][ T9329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.090458][T22368] loop4: detected capacity change from 0 to 2048 [ 1728.105812][T22358] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1728.112415][ T9329] usb 2-1: Product: syz [ 1728.114121][T22358] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1728.126112][ T9329] usb 2-1: Manufacturer: syz [ 1728.144552][T22358] F2FS-fs (loop5): invalid crc value [ 1728.165095][T22368] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1728.240315][T22358] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1728.246559][ T9329] usb 2-1: SerialNumber: syz [ 1728.288941][ T26] audit: type=1800 audit(1773990706.362:273): pid=22368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3983" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 1728.336899][T22358] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1728.345716][T22358] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1728.571445][ T9329] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1729.388605][ T9329] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1729.498486][ T9329] usb 2-1: 2:1 : can't get Cluster Descriptor [ 1729.715664][T21053] usb 2-1: USB disconnect, device number 12 [ 1730.588440][T22382] loop4: detected capacity change from 0 to 32768 [ 1733.429135][T22468] loop4: detected capacity change from 0 to 256 [ 1733.697159][T22468] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x28b7239b, utbl_chksum : 0xe619d30d) [ 1733.963753][T22444] loop1: detected capacity change from 0 to 32768 [ 1734.052975][T22444] XFS: attr2 mount option is deprecated. [ 1734.306754][T22444] XFS (loop1): Mounting V5 Filesystem [ 1734.539639][T22444] XFS (loop1): Ending clean mount [ 1734.572572][T22444] XFS (loop1): Quotacheck needed: Please wait. [ 1734.833201][T22444] XFS (loop1): Quotacheck: Done. [ 1734.967059][T18978] XFS (loop1): Unmounting Filesystem [ 1735.250245][ T9328] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1735.581338][ T9328] usb 5-1: Using ep0 maxpacket: 32 [ 1735.709772][ T9328] usb 5-1: config 123 interface 0 has no altsetting 0 [ 1735.945081][ T9328] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 1735.962927][ T9328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.000084][ T9328] usb 5-1: Product: syz [ 1736.010901][ T9328] usb 5-1: Manufacturer: syz [ 1736.037357][ T9328] usb 5-1: SerialNumber: syz [ 1736.223781][T22542] bridge0: port 1(bridge_slave_0) entered listening state [ 1736.260801][T22544] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4020'. [ 1736.374406][ T9328] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 1736.418355][ T9328] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1736.461496][ T9328] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 1736.493756][ T9328] usb 5-1: media controller created [ 1736.558944][ T9328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1736.679813][ T9328] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1736.711075][ T9328] error writing reg: 0xff, val: 0x00 [ 1736.752721][ T9328] dvb_usb_mxl111sf: probe of 5-1:123.0 failed with error -22 [ 1736.907205][ T9328] usb 5-1: USB disconnect, device number 12 [ 1737.587436][T22574] loop4: detected capacity change from 0 to 764 [ 1739.021916][T22605] loop5: detected capacity change from 0 to 128 [ 1739.422349][T22575] loop1: detected capacity change from 0 to 32768 [ 1740.283726][T18978] read_mapping_page failed! [ 1740.299485][T18978] ERROR: (device loop1): txCommit: [ 1740.299485][T18978] [ 1740.414555][T18978] read_mapping_page failed! [ 1740.433021][T18978] ERROR: (device loop1): txCommit: [ 1740.433021][T18978] [ 1741.335281][T18094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.382266][T22624] loop5: detected capacity change from 0 to 40427 [ 1741.451349][T18094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.500868][T22624] F2FS-fs (loop5): invalid crc value [ 1741.526361][T22624] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1741.536117][T17264] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1741.607872][T18094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.716000][T22624] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1741.735179][T18094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.813863][T17264] usb 5-1: Using ep0 maxpacket: 8 [ 1741.915226][T22624] attempt to access beyond end of device [ 1741.915226][T22624] loop5: rw=2049, want=45104, limit=40427 [ 1741.953066][T17264] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1741.965946][T17264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.142501][T17264] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1742.177310][T17264] pvrusb2: ********** [ 1742.181356][T17264] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1742.224381][T17264] pvrusb2: Important functionality might not be entirely working. [ 1742.245986][T17264] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1742.274823][T17264] pvrusb2: ********** [ 1742.343196][ T2422] pvrusb2: Invalid write control endpoint [ 1742.575380][ T2422] pvrusb2: Invalid write control endpoint [ 1742.624588][T22695] vxcan1 speed is unknown, defaulting to 1000 [ 1742.637896][ T2422] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1742.673859][ T2422] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1742.695566][ T2422] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1742.749695][ T2422] pvrusb2: Device being rendered inoperable [ 1742.809010][T22669] pvrusb2: Attempted to execute control transfer when device not ok [ 1742.840446][ T2422] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1742.842637][T17264] usb 5-1: USB disconnect, device number 13 [ 1742.848647][ T2422] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1742.953539][ T2422] pvrusb2: Attached sub-driver cx25840 [ 1742.986586][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1743.019011][T22695] wlan0 speed is unknown, defaulting to 1000 [ 1743.033055][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1743.591066][T22695] chnl_net:caif_netlink_parms(): no params data found [ 1743.639225][T22739] loop5: detected capacity change from 0 to 256 [ 1743.753138][T22739] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1743.784103][T22743] loop4: detected capacity change from 0 to 512 [ 1743.956338][T22695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.012759][T22695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.015846][T22743] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 1744.035650][T22695] device bridge_slave_0 entered promiscuous mode [ 1744.052572][T22743] ext4 filesystem being mounted at /156/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1744.202243][ T26] audit: type=1800 audit(1773990721.254:274): pid=22743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4071" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1744.262143][T22695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.273163][T22695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.311261][T22695] device bridge_slave_1 entered promiscuous mode [ 1744.593327][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 1744.777345][T22695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1744.876734][T22695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1745.094809][T22695] team0: Port device team_slave_0 added [ 1745.139178][T18094] device hsr_slave_0 left promiscuous mode [ 1745.158245][T18094] device hsr_slave_1 left promiscuous mode [ 1745.181500][T18094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.204912][T18094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.226533][T18094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.249753][T18094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.275773][T18094] device bridge_slave_1 left promiscuous mode [ 1745.341857][T18094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.365407][T18094] device bridge_slave_0 left promiscuous mode [ 1745.371642][T18094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.420705][T22756] loop5: detected capacity change from 0 to 32768 [ 1745.519275][T18094] device veth1_macvtap left promiscuous mode [ 1745.534384][T18094] device veth0_macvtap left promiscuous mode [ 1745.540503][T18094] device veth1_vlan left promiscuous mode [ 1745.555552][T18094] device veth0_vlan left promiscuous mode [ 1745.617187][T22756] XFS (loop5): Mounting V5 Filesystem [ 1745.707798][T22756] XFS (loop5): Ending clean mount [ 1745.887680][T12786] XFS (loop5): Unmounting Filesystem [ 1746.524968][T18094] team0 (unregistering): Port device team_slave_1 removed [ 1746.576006][T18094] team0 (unregistering): Port device team_slave_0 removed [ 1746.612564][T18094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1746.632220][T18094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1746.819584][T16626] Bluetooth: hci3: command 0x041b tx timeout [ 1746.898154][T18094] bond0 (unregistering): Released all slaves [ 1746.967703][T22695] team0: Port device team_slave_1 added [ 1747.041566][T22830] loop5: detected capacity change from 0 to 256 [ 1747.165323][T22695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1747.227184][T22695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1747.362771][T22695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1747.386560][T22695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1747.406251][T22695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1747.471101][T22695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1747.655955][T22695] device hsr_slave_0 entered promiscuous mode [ 1747.694410][T22695] device hsr_slave_1 entered promiscuous mode [ 1747.715444][T22695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1747.752153][T22695] Cannot create hsr debugfs directory [ 1748.285108][T22695] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.446076][T22695] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.599152][T22695] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.748208][T22695] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.998709][T22695] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1749.031145][T22695] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1749.040787][T16626] Bluetooth: hci3: command 0x040f tx timeout [ 1749.064599][T22695] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1749.142785][T22695] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1749.189604][T22879] loop5: detected capacity change from 0 to 764 [ 1749.269372][T22882] device syzkaller1 entered promiscuous mode [ 1749.634175][T22695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1749.669408][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1749.714917][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1749.768976][T22695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1749.818990][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1749.850157][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1749.893525][T16007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.900699][T16007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1749.952354][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1749.989271][ T8804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1750.032725][ T8804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1750.065604][ T8804] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.072803][ T8804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.131142][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1750.167140][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1750.207923][ T8804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1750.258429][ T8804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1750.296891][ T8804] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1750.307592][T22903] overlayfs: failed to clone upperpath [ 1750.332175][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1750.359318][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1750.429083][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1750.457889][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1750.485971][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1750.602502][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1750.657751][T22695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1750.686629][T22926] loop5: detected capacity change from 0 to 512 [ 1750.758029][T22926] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1750.767819][T22896] loop4: detected capacity change from 0 to 32768 [ 1750.774526][T22926] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1750.789587][T22926] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1750.799816][T22926] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1750.809802][T22926] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1750.839774][T22926] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1750.848604][T22926] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce11c, mo2=0000] [ 1750.856454][T22926] EXT4-fs (loop5): failed to initialize system zone (-117) [ 1750.863844][T22926] EXT4-fs (loop5): mount failed [ 1750.979272][T22896] XFS (loop4): Mounting V5 Filesystem [ 1751.124547][T22896] XFS (loop4): Ending clean mount [ 1751.265044][T17137] Bluetooth: hci3: command 0x0419 tx timeout [ 1751.321121][ T8804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1751.337863][ T8804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1751.370784][T22695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1751.400715][T18911] XFS (loop4): Unmounting Filesystem [ 1751.561219][T22953] loop5: detected capacity change from 0 to 64 [ 1752.031179][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1752.055956][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1752.182182][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1752.199037][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1752.259670][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1752.271579][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1752.319164][T22695] device veth0_vlan entered promiscuous mode [ 1752.367367][T22695] device veth1_vlan entered promiscuous mode [ 1752.483329][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1752.533237][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1752.562126][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1752.590883][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1752.734664][T22695] device veth0_macvtap entered promiscuous mode [ 1752.842517][T22695] device veth1_macvtap entered promiscuous mode [ 1752.972435][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1753.049342][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.098663][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1753.109516][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.122852][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1753.133512][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.143419][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1753.155007][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.165026][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1753.175549][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.198001][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1753.216563][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.235892][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1753.256732][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.284275][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1753.305249][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.331909][T22695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1753.380658][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1753.439782][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1753.502431][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1753.581196][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1753.633002][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.647925][T23001] netlink: 35284 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1753.689883][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1753.730459][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.771553][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1753.836490][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.899497][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1753.915004][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.929543][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1753.940441][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.955571][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1753.966198][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.976216][T22695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1753.987952][T22695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1754.000115][T22695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1754.100899][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1754.131969][T18753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1754.213605][T23012] loop4: detected capacity change from 0 to 512 [ 1754.312421][T23012] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1754.322010][T23012] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1754.336237][T23012] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1754.346407][T23012] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1754.356849][T23012] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1754.498742][T23012] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1754.507305][T23012] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce11c, mo2=0000] [ 1754.515288][T23012] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1754.522590][T23012] EXT4-fs (loop4): mount failed [ 1754.855120][T22695] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.887924][T22695] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.938528][T22695] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.967894][T22695] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.008111][T23021] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.4128'. [ 1755.468641][T23035] bond1 (unregistering): Released all slaves [ 1755.559763][T16007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.589528][T16007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1755.610453][T18094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1755.681160][T23040] loop5: detected capacity change from 0 to 4096 [ 1755.689945][ T4445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.728269][ T4445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1755.754914][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1757.124193][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4141'. [ 1757.555745][T23085] loop5: detected capacity change from 0 to 512 [ 1757.616725][T23085] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1757.626607][T23085] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1757.676406][T23085] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1757.686338][T23085] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1757.696192][T23085] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1757.824720][T23085] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1757.832798][T23085] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce11c, mo2=0000] [ 1757.840978][T23085] EXT4-fs (loop5): failed to initialize system zone (-117) [ 1757.848350][T23085] EXT4-fs (loop5): mount failed [ 1759.002797][T23108] loop5: detected capacity change from 0 to 512 [ 1759.396620][T23108] EXT4-fs (loop5): Ignoring removed orlov option [ 1759.569543][T23108] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1759.991868][T23108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1760.032635][T23108] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.4150: corrupted in-inode xattr [ 1760.068877][T23108] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.4150: couldn't read orphan inode 15 (err -117) [ 1760.073374][ T4228] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1760.111793][T23108] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 1760.427573][ T4228] usb 5-1: Using ep0 maxpacket: 32 [ 1760.576209][ T4228] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1760.620225][ T4228] usb 5-1: config 0 has no interface number 0 [ 1761.015029][ T4228] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1761.171353][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.191048][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1761.197666][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1761.248223][ T4228] usb 5-1: Product: syz [ 1761.285449][ T4228] usb 5-1: Manufacturer: syz [ 1761.290113][ T4228] usb 5-1: SerialNumber: syz [ 1761.383622][ T4228] usb 5-1: config 0 descriptor?? [ 1761.446385][ T4228] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1761.681742][ T4228] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1761.720773][ T4228] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1762.194139][ T4228] usb 5-1: USB disconnect, device number 14 [ 1762.211608][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 1762.241678][ T4228] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1762.280881][T23142] loop5: detected capacity change from 0 to 32768 [ 1762.345569][ T4228] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1762.450570][ T4228] quatech2 5-1:0.51: device disconnected [ 1762.567073][T23142] XFS (loop5): Mounting V5 Filesystem [ 1762.702507][T23142] XFS (loop5): Ending clean mount [ 1762.722220][T23142] XFS (loop5): Quotacheck needed: Please wait. [ 1762.827016][T23184] loop4: detected capacity change from 0 to 512 [ 1762.878416][T23142] XFS (loop5): Quotacheck: Done. [ 1762.922102][T23184] EXT4-fs (loop4): Ignoring removed oldalloc option [ 1763.006456][T23184] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 1763.059211][T23184] fscrypt (loop4, inode 18): Direct key flag not allowed with different contents and filenames modes [ 1763.075385][T23189] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1763.628669][T12786] XFS (loop5): Unmounting Filesystem [ 1763.803295][T23225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.810668][T23225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1763.818234][T23225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.825308][T23225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1763.872242][T23225] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1763.955448][T23225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1764.011579][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1764.234840][T23244] loop4: detected capacity change from 0 to 128 [ 1764.341516][T23244] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,sysvgroups,,errors=continue. Quota mode: none. [ 1764.366167][T23244] ext4 filesystem being mounted at /181/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1767.163556][T23310] loop8: detected capacity change from 0 to 512 [ 1767.309269][T23310] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1767.365902][T23310] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1767.940899][T23346] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1768.901975][T23349] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1769.088332][T23355] loop8: detected capacity change from 0 to 128 [ 1769.358214][T23364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1769.447244][T23364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1771.766271][T23415] loop4: detected capacity change from 0 to 64 [ 1771.875927][T23415] MINIX-fs: deleted inode referenced: 6 [ 1771.921426][T23415] MINIX-fs: deleted inode referenced: 6 [ 1772.613500][T13123] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1773.106008][T13123] usb 5-1: Using ep0 maxpacket: 8 [ 1773.287218][T13123] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1773.383625][T13123] usb 5-1: config 6 has an invalid interface number: 236 but max is 0 [ 1773.399692][T13123] usb 5-1: config 6 has no interface number 0 [ 1773.422027][T13123] usb 5-1: config 6 interface 236 has no altsetting 0 [ 1773.451260][T23456] device dummy0 entered promiscuous mode [ 1773.478873][T23456] device netdevsim0 entered promiscuous mode [ 1773.520547][T18094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 1773.607983][T13123] usb 5-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=e4.e9 [ 1773.633928][T13123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.662475][T13123] usb 5-1: Product: syz [ 1773.678718][T13123] usb 5-1: Manufacturer: syz [ 1773.697822][T13123] usb 5-1: SerialNumber: syz [ 1774.525459][T13123] usb 5-1: USB disconnect, device number 15 [ 1777.134673][T23524] netlink: 'syz.4.4253': attribute type 2 has an invalid length. [ 1780.579700][T23596] device pim6reg1 entered promiscuous mode [ 1782.842005][T23664] netlink: 112 bytes leftover after parsing attributes in process `syz.8.4285'. [ 1782.890451][T23664] netlink: 'syz.8.4285': attribute type 19 has an invalid length. [ 1784.837861][T23697] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4296'. [ 1784.924246][T23700] 9pnet: Insufficient options for proto=fd [ 1785.181448][T23712] sctp: [Deprecated]: syz.6.4301 (pid 23712) Use of int in max_burst socket option deprecated. [ 1785.181448][T23712] Use struct sctp_assoc_value instead [ 1785.202586][T23714] loop5: detected capacity change from 0 to 4095 [ 1785.243319][T23714] loop9: detected capacity change from 0 to 4094 [ 1785.329543][ C0] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1785.436663][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1785.447658][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1785.454195][ C0] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1785.466745][ C0] Buffer I/O error on dev loop5, logical block 480, async page read [ 1785.696688][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1785.707634][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1785.752394][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1785.763446][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1785.775938][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1785.786986][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1785.804755][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1785.815704][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1785.833065][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1785.844080][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1785.879493][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1785.890516][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1785.934232][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1785.943030][ C1] Buffer I/O error on dev loop5, logical block 480, async page read [ 1785.945388][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1785.976948][T23714] ldm_validate_partition_table(): Disk read failed. [ 1786.041090][T23714] Dev loop9: unable to read RDB block 0 [ 1786.087178][T23714] loop9: unable to read partition table [ 1786.147174][T23714] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1786.147174][T23714] ) failed (rc=-5) [ 1788.297095][ T9329] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1788.585334][ T9329] usb 5-1: Using ep0 maxpacket: 16 [ 1788.849274][T23787] loop8: detected capacity change from 0 to 256 [ 1788.874066][ T9329] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1788.917157][T23744] loop5: detected capacity change from 0 to 40427 [ 1788.982738][ T9329] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1788.996534][T23744] F2FS-fs (loop5): invalid crc value [ 1789.005952][T23787] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1789.028140][T23744] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1789.069879][ C1] ------------[ cut here ]------------ [ 1789.075429][ C1] WARNING: CPU: 1 PID: 17137 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 1789.085119][ C1] Modules linked in: [ 1789.089073][ C1] CPU: 1 PID: 17137 Comm: kworker/1:9 Not tainted syzkaller #0 [ 1789.096662][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1789.106900][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 1789.113110][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1789.119073][T23787] FAT-fs (loop8): error, corrupted file size (i_pos 196, 2048) [ 1789.119403][ C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1789.140066][T23787] FAT-fs (loop8): Filesystem has been set read-only [ 1789.147558][ C1] RSP: 0018:ffffc90000dd0858 EFLAGS: 00010246 [ 1789.147590][ C1] RAX: ffffffff81a08f90 RBX: 0000000000000000 RCX: ffff88802c503b80 [ 1789.147605][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1789.147618][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff203a818 [ 1789.147632][ C1] R10: dffffc0000000000 R11: fffffbfff203a819 R12: ffff88802c505308 [ 1789.147647][ C1] R13: dffffc0000000000 R14: ffffc90000dd08b8 R15: 0000000000000000 [ 1789.200802][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1789.209818][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1789.217328][ C1] CR2: 00007fadb7708000 CR3: 0000000051437000 CR4: 00000000003506e0 [ 1789.220509][T23744] F2FS-fs (loop5): Start checkpoint disabled! [ 1789.225347][ C1] Call Trace: [ 1789.225360][ C1] [ 1789.225374][ C1] bpf_probe_read_user+0x26/0x70 [ 1789.236372][T23801] FAT-fs (loop8): error, corrupted file size (i_pos 196, 2048) [ 1789.237676][ C1] bpf_prog_690f12e098ef46de+0x32/0xb04 [ 1789.237703][ C1] bpf_prog_run_clear_cb+0x94/0x1a0 [ 1789.237789][ C1] run_filter+0x12a/0x220 [ 1789.237807][ C1] packet_rcv+0x388/0x1210 [ 1789.237832][ C1] ? packet_sock_destruct+0x160/0x160 [ 1789.237854][ C1] __netif_receive_skb_core+0x2a56/0x3690 [ 1789.237912][ C1] ? set_rps_cpu+0x670/0x670 [ 1789.237941][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1789.238002][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1789.238024][ C1] ? lock_chain_count+0x20/0x20 [ 1789.238050][ C1] __netif_receive_skb+0x74/0x290 [ 1789.238092][ C1] process_backlog+0x370/0x790 [ 1789.238125][ C1] ? rps_trigger_softirq+0x210/0x210 [ 1789.287698][T23744] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1789.292948][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1789.292990][ C1] ? lock_chain_count+0x20/0x20 [ 1789.293018][ C1] __napi_poll+0xc0/0x430 [ 1789.293041][ C1] ? net_rx_action+0x307/0xa10 [ 1789.293067][ C1] net_rx_action+0x4d4/0xa10 [ 1789.293110][ C1] ? net_tx_action+0x880/0x880 [ 1789.293131][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1789.293159][ C1] ? lock_chain_count+0x20/0x20 [ 1789.293182][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 1789.372819][ C1] handle_softirqs+0x339/0x830 [ 1789.377738][ C1] ? do_softirq+0x142/0x210 [ 1789.382277][ C1] ? do_softirq+0x210/0x210 [ 1789.386954][ C1] do_softirq+0x142/0x210 [ 1789.391315][ C1] [ 1789.394271][ C1] [ 1789.397243][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1789.402698][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 1789.408738][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 1789.414130][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 1789.419581][ C1] ? wg_socket_send_skb_to_peer+0x167/0x1c0 [ 1789.425510][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 1789.430874][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1789.435938][ C1] ? do_raw_read_unlock+0x39/0x70 [ 1789.441031][ C1] wg_socket_send_skb_to_peer+0x167/0x1c0 [ 1789.447004][ C1] wg_packet_tx_worker+0x1d3/0x790 [ 1789.452228][ C1] process_one_work+0x85f/0x1010 [ 1789.457276][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1789.462996][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 1789.468319][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1789.473549][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1789.479137][ C1] ? wq_worker_running+0x97/0x170 [ 1789.484278][ C1] worker_thread+0xaa6/0x1290 [ 1789.489005][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1789.494978][ C1] kthread+0x436/0x520 [ 1789.499149][ C1] ? rcu_lock_release+0x20/0x20 [ 1789.504045][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1789.508705][ C1] ret_from_fork+0x1f/0x30 [ 1789.513199][ C1] [ 1789.516297][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1789.523847][ C1] CPU: 1 PID: 17137 Comm: kworker/1:9 Not tainted syzkaller #0 [ 1789.531508][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1789.541598][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 1789.547810][ C1] Call Trace: [ 1789.551201][ C1] [ 1789.554169][ C1] dump_stack_lvl+0x188/0x250 [ 1789.558912][ C1] ? show_regs_print_info+0x20/0x20 [ 1789.564170][ C1] ? load_image+0x400/0x400 [ 1789.568818][ C1] panic+0x2e5/0x810 [ 1789.572817][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1789.577365][ C1] ? ret_from_fork+0x1f/0x30 [ 1789.581994][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1789.587672][ C1] __warn+0x248/0x2b0 [ 1789.591690][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1789.597272][ C1] report_bug+0x1b7/0x2e0 [ 1789.601782][ C1] handle_bug+0x3a/0x70 [ 1789.606138][ C1] exc_invalid_op+0x16/0x40 [ 1789.610670][ C1] asm_exc_invalid_op+0x16/0x20 [ 1789.615748][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1789.621935][ C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1789.641574][ C1] RSP: 0018:ffffc90000dd0858 EFLAGS: 00010246 [ 1789.647767][ C1] RAX: ffffffff81a08f90 RBX: 0000000000000000 RCX: ffff88802c503b80 [ 1789.655864][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1789.663974][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff203a818 [ 1789.672063][ C1] R10: dffffc0000000000 R11: fffffbfff203a819 R12: ffff88802c505308 [ 1789.680256][ C1] R13: dffffc0000000000 R14: ffffc90000dd08b8 R15: 0000000000000000 [ 1789.688530][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1789.694130][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1789.699713][ C1] bpf_probe_read_user+0x26/0x70 [ 1789.704944][ C1] bpf_prog_690f12e098ef46de+0x32/0xb04 [ 1789.710519][ C1] bpf_prog_run_clear_cb+0x94/0x1a0 [ 1789.715764][ C1] run_filter+0x12a/0x220 [ 1789.720147][ C1] packet_rcv+0x388/0x1210 [ 1789.724692][ C1] ? packet_sock_destruct+0x160/0x160 [ 1789.730177][ C1] __netif_receive_skb_core+0x2a56/0x3690 [ 1789.735945][ C1] ? set_rps_cpu+0x670/0x670 [ 1789.740575][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1789.746685][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1789.752163][ C1] ? lock_chain_count+0x20/0x20 [ 1789.757108][ C1] __netif_receive_skb+0x74/0x290 [ 1789.762281][ C1] process_backlog+0x370/0x790 [ 1789.767228][ C1] ? rps_trigger_softirq+0x210/0x210 [ 1789.772674][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1789.778762][ C1] ? lock_chain_count+0x20/0x20 [ 1789.783742][ C1] __napi_poll+0xc0/0x430 [ 1789.788089][ C1] ? net_rx_action+0x307/0xa10 [ 1789.792861][ C1] net_rx_action+0x4d4/0xa10 [ 1789.797549][ C1] ? net_tx_action+0x880/0x880 [ 1789.802327][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1789.808313][ C1] ? lock_chain_count+0x20/0x20 [ 1789.813169][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 1789.819168][ C1] handle_softirqs+0x339/0x830 [ 1789.823934][ C1] ? do_softirq+0x142/0x210 [ 1789.828449][ C1] ? do_softirq+0x210/0x210 [ 1789.833013][ C1] do_softirq+0x142/0x210 [ 1789.837514][ C1] [ 1789.840450][ C1] [ 1789.843389][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1789.848770][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 1789.854872][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 1789.860245][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 1789.865851][ C1] ? wg_socket_send_skb_to_peer+0x167/0x1c0 [ 1789.871922][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 1789.877203][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1789.882055][ C1] ? do_raw_read_unlock+0x39/0x70 [ 1789.887119][ C1] wg_socket_send_skb_to_peer+0x167/0x1c0 [ 1789.892843][ C1] wg_packet_tx_worker+0x1d3/0x790 [ 1789.897960][ C1] process_one_work+0x85f/0x1010 [ 1789.902907][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1789.908544][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 1789.913832][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1789.918875][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1789.924421][ C1] ? wq_worker_running+0x97/0x170 [ 1789.929446][ C1] worker_thread+0xaa6/0x1290 [ 1789.934320][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1789.940217][ C1] kthread+0x436/0x520 [ 1789.944291][ C1] ? rcu_lock_release+0x20/0x20 [ 1789.949230][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1789.953830][ C1] ret_from_fork+0x1f/0x30 [ 1789.958277][ C1] [ 1789.961698][ C1] Kernel Offset: disabled [ 1789.966616][ C1] Rebooting in 86400 seconds..