last executing test programs: 7m53.575586033s ago: executing program 3 (id=102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000004c0)={[{@nojournal_checksum}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@nobarrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x41, 0x5b3, &(0x7f0000000780)="$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") openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 7m52.394955376s ago: executing program 3 (id=105): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x1, 0x1, 0xff, 0x1}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d300", 0x38}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000280)=""/69, 0x53}, {&(0x7f0000000200)=""/32, 0x20}], 0x3}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x1, 0x0, 0x1, [@generic="e0c364b6f371cad21b0bfd2f17736c06"]}]}]}, 0x2c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000004800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000006}, 0x94) 7m48.946882886s ago: executing program 3 (id=112): socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3e9, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x1, 0x1, 0x0, 0xd, 0x80, 0x2, 0x80000000, 0x0, 0x7, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(0x0, &(0x7f0000000140)={0x0, 0x2c4}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r2, 0x91502000) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_read_part_table(0x604, &(0x7f0000000000)="$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") 7m46.00209531s ago: executing program 3 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x40) 7m43.115796854s ago: executing program 3 (id=120): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x40, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10001}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044001}, 0x10) 7m42.309255723s ago: executing program 3 (id=122): syz_open_dev$radio(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000100)={[0x8]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c002400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 7m26.613710085s ago: executing program 32 (id=122): syz_open_dev$radio(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000100)={[0x8]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c002400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 5m21.167100498s ago: executing program 2 (id=470): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x2c, r2, 0xa11, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8810) 5m20.890491481s ago: executing program 2 (id=471): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setrlimit(0xa, &(0x7f0000000340)={0x8}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair(0x8, 0x5, 0x6, &(0x7f0000000040)) syz_clone3(&(0x7f0000000240)={0x200a40080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) rmdir(0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff7, 0xee1a, 0x8, 0xc80, 0x8, 0x1, 0x80000001, 0x5, 0xe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m18.653693017s ago: executing program 2 (id=475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000c1, 0x0) close(r0) close(0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) ioctl$TUNGETVNETLE(r0, 0x40107446, 0x0) 5m18.404951071s ago: executing program 2 (id=476): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$admmidi(0x0, 0xc000, 0x800) clock_gettime(0x0, 0x0) setitimer(0x0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) inotify_init1(0x800) fcntl$setown(r1, 0x8, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') 5m15.360604046s ago: executing program 2 (id=480): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) socket$rds(0x15, 0x5, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000200)={0x2, 0x1000, {0x0}, {0xee01}, 0x5, 0x81}) socket$netlink(0x10, 0x3, 0x4) syz_clone(0x200, &(0x7f0000000080)="94c573b1a2c208f6469c97fdf5391b970ab8907a90000b94d7871989078dc72bd2a6d7b3b7ad39a940923d246e7a368a5f1710f269974d7e6444c5d42eac59e482055942671883515b826fb33d40004ea09b58eee30aaab50a442775e1871b87756193faba742bc2ed", 0x69, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="96047eaa1ac6bee95012b876bdd5400364966b9f1eb3aaae3d0b6aa8f07da42168a59a7130e20472d4d2b7e6fc1b356ef1bcbedd9878b9dcb0803b474590e5a87e15fbb3a0502a376b524f12d5623d794eccaf2726ba") getuid() r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmmsg$unix(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001180)="dd9e", 0x2}, {&(0x7f0000000100)="e1bb8b644f160a00c085757f0b5a8fcc4e7ed0e9cad5c28ae93a830c900c66eb91f48528a6cf2222c7", 0x29}], 0x2, &(0x7f0000000240)=[@cred={{0x18, 0x1, 0x2, {r5, 0xee01}}}], 0x18, 0x20048885}}], 0x1, 0xc004) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x0) name_to_handle_at(r8, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x212c80) socket$nl_generic(0x10, 0x3, 0x10) 5m10.607726181s ago: executing program 2 (id=490): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setrlimit(0xa, &(0x7f0000000340)={0x8}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) syz_clone3(&(0x7f0000000240)={0x200a40080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) rmdir(0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff7, 0xee1a, 0x8, 0xc80, 0x8, 0x1, 0x80000001, 0x5, 0xe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m55.11154822s ago: executing program 33 (id=490): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setrlimit(0xa, &(0x7f0000000340)={0x8}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) syz_clone3(&(0x7f0000000240)={0x200a40080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) rmdir(0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff7, 0xee1a, 0x8, 0xc80, 0x8, 0x1, 0x80000001, 0x5, 0xe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10.374382639s ago: executing program 6 (id=1332): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008240)="89ead3984edf25521aeb23a980642f7a3bcdc826bb92b7013d21c32c6f26ba9b62d162444076fb9c59b9bfdffda1a2cbc97470fadb1fc57b4f168ebb5fc3fb6511efd6c3e84aff94696a139400e6692c073dc4688e5d240ac1fd86eda44a6ce94b52b04b49ed1bc6e328c14f49076553b3604d55ca1f294143fbfbd18e0601baf200014adad5e685a18d0a5d86fa4ccd6a5028fb7e82b9373c841403ec7cd94dc18fc8ddeec1d2edc0cd1c52309b65f1b139341ea56d8040379b27010c8508e4aa638ccb335c50a5da09d6bbc7dd358cb3b2f4cab6912f0362136da47c6f675fa7d8d436745f4f5143a407913b565b2f9db81639df85f6410b390d4e837516d38fe688a43c11db034c0b40d4d119fa721c41a97d2ae1e791e93fdd622a08c6204f4330d015a73a31342219ba25989e8fa0d6f8fe43ad05834e1279589ee636ba19f4789967c6085c082beb60e22ff760dd379f4b9bacc522f8e874e9218c6149adce7d0404840214b211e9c5c54fe0022fb52f5042198ba1d735ebcf905fbc89ce66520c4564a4f621fd60325ca2ed6da76308128241020385bd9c12f2574fd765b14773f11e2909a95e7d0bfd73d21cbf573e8367becc1fb5dc9e2a687ea6d17503a6e175912fde95b54261adb9044fb3ee7866563680cbdcb7caca5c0c3d8560cb966bdb55935ab01e1d47a07677929a7bed79c370a482e01f0c4748037e21a0e528b6de49dea217f697f0f39a2f2b5a4dc5fd59461d5095f85b78e31a46b531ac7cb568c475da79d1989930b26f920e628bfc9c7801a1b5d396a4180f9c623c37fb937aa8203b71fe7d9c81d93669d5060ddff56f68d61ddda14190b270804bb1d0ee2bc1ffdf0e1c92f54e50069d1775f43897bb853f36753d58eb80eb43d492f96fc73db6e55b9714e870322a86fd3e602d2b0adff30dafb8c0f65807fe5c7d27f15c81d66c6e99519df95c845715291ad5d11529ea062f4c22566a5c1e6f70a387718385af47772be831ced25931c35870019fd272d99187d068af74f74fb439523c3dbc2159e71551c4a8d9a7d589c715ed948cd0dfc52209c37ac339226359dc3b955e6550fc723ce2aef4305bd503ce245e8a163e3ff7a476fc7eda8ee719f85aaaebf75a6cb4235518a7fa672577324697c8d8eee77514099711166ae299ff5bebca4546bc64d1fa743f391b5371da1970e92b757e4d001297adc54f5eaa4af0d173b5e15eb1735a8a248dc1f42efacf1253e81fec7ebdfd147156e048450ae0d2edba624f2f62f18a0f8b1acc903d1cccc004f7d4efb3cea6ed447a75d8c7f43367e71ff8109bf0edb9e436fcc9c39e21a4cf55e38373295ba53125932e1e59d32adbfbf0f51172376c8cd39ec1e6a0fd245ce53246bb47ee57a0bf83cf9ed4a695f3703ac3e472551d1c5b58c6bb943f4141def5f907a814803e581cfdb834179d352f5dd11f7d9597839160e7c09a07b51442ee27dbba887f6a3301b7795f533d1fcb80a0a55d7b4c32c9074e702eda75c8af2536102f929e08c5fe905388d9f279f60c2e168a812aac92585c5d70006eaa655204add47896e01f44095023f71300220c6f419b42c30813155c04910d2208ad3dd6958da03f56393da996bf45edccbab786af6f6ca67fb96c44e282e273a28ef9f348728ded4bc315600be53c0732027570708d0410c24a8854cd375d0a85c4c139a04e616d049506ebf4849d01b2ebe7d8d1c330f8bda61acbc6d9df1360513848e1925d7b401ecd0e892356e380f4fa1bb6ee727555df20b1faa9b399a2a328fbba3d7a54799a8249233d6aabafda3093f3642c6b956873f1cece5d01a4647b7f278ad9b306f434e858431fb7fc8b6dd758a98de2b02d8c72b91832c616b153510954d2739be6025a8aadebfcceafc476fbb9093a73918c137de814aad23e1915f1904eba4c0feb3497f2cf66bea7d88ee65bc9a9f2b622122eafae0d513f1ab0e63e1a1c51ef2c0db6ae7d057c7462602cae359aa77bb170ef2e881edbb430cb8f4780831162536c9fce4c28b95ff2caedbdb2c7089e35ef797bce687cb0507683083aca6021f5d3459faa12ebe37634932a72ee2ff8c301ba07d786209e6aa5d5e53586d905ec24ac98c69975b0819b3a6ba1e9950daf0a2a55e45bdb55e3adea5ddcb6efcab7e7a62e119ab99ab3c4eba7f65e8a766345e744e23901925da3bd4e0a5d912897914ba2f839fd94598df15ff66687a5b51a8955687c9c2fd2291e47012ea234fc2b465fad2636517437c35f71eecff4adbdeec9ee2cdbc4a9cc1e0f394893908f4547948649d92f0f39928727d24bacf6abce9ea7e3a8adceb4496fda33ddf46e9b7282ecced9d2e0bf0e628a4ce6593e9c3c912445b4a2aa7290bf4c3d60a60b04f8c9210215e7e2465610712c1569beb0dda03df68e0c63a09f665393e64ca88513708fcf8b88209111c5cb43dd757dfa6453c1b3c029ba0bc2346ac8276ca15ac1fff4a440d8241914428bb5404649cfa78f0c69286ea3c90dc758edacaa6dbaef675d165e50c6543bef6d9f01781f851e0338965f7ad353124c15faf4916158ca85469425e96b2e67ed47c704abf45e6a2ab6588a36dd3b1f4fdb378454b33e3ee038e870964b891891bc560dc2e6f7d4faf84fca5f4c2f743eb3eb88513ed0fb59759e070c589c304a7bcfb106825e13a5962aae55af37c36c3b2ec680954eefee56a46f1684265ed6528b616a6627b4a548037f2d23e914e0d52632e8b3c84a278ef2f57918a62b99f9bfcfedba89ec0c74f3412efdd4d7a5cbbd3b019d56a2ac06fb9d679a4afb69104649095ed734c17ee00fa53907cf2be11d320a8333a8e1583e272289e6b9f8cf1244d8dd91884a1dd05870a4b46094c69c1893b3e99ef3b8c6c81b399187c08e618be19ae636becfd9c7aec6495d76b9cdc0f74b6524c9162479d5af677e853a44f3b8921c5fa20c67338f8e41149d7420cdf1d0a1f731c42b090bd217a6c0387144345ede94233b133e544435e6f448ac21c5a98c25e595b2ea7e2337d66b9c3e62ec972515dd92763164b015eb3ba70cf84997cd000bde94bf08e3a197b9d3c2d47c9b1ea4576bf2d4423fa36e5f04f4c05d95ac8661cc7e54f464e74986cfa41adfa6a29238546ab79f4536b565e28c4f5e32021e72564e225067905cff77166a31ac6cf44a90afa86b1be3bad69ded3ab7a5d159219058b2ef6547695977c87670a7bfc5cd270de0d29519a505352fb850ddd55aa94c33b73bb7fac5d2c1dc06d643908adbea46d22cbbd9f8db5375ae3467ae57c68d5a62e83fd70e28b997433df1afb8e57cd74d34e1719be94e62b09412531c53464d3f58a9a284a052b46617c07730049bec9aacd5e0deffade51bb1ef4d45f139996404a97f2554934925414bc88f5e7cf42cbdd13584ec6591d0c44462ab5b72b85f9c9318023203acb7eca802f8b66468cb9c4302f073f1571687bbdafedd40dc881fcb58342bb612b6a65569a77fb196dea023d925fd7258f658b0a1fb08d75b760f3c768131349393d2bc45a7b59d04a3d1882afd972d3d97ff809b5a4aee00c52d9279ba0c62fe57a0df5976a1240f85d6d97a283f80aab02939f1e753c01c86f878c1b39ec5051d73d9c9e2cf9c8d61b50f8fa0908ffddda32de63d91d787ad6c77b64208219c7e0d0b9c70d5a79c009cef0f03f046eba1c6719a911023a3fad71a9a696afb923b8e269b9d3a239fbee30c0a374a3d6a4819005e6ae9ca6308d43e5ca06d6139c7b698260c15cb01482a4e06f5de22544070a67091a683f6cadc2550babf30584a62e0a304b7c2a547eedda7b57753d09d888e9f33bde26d749db4eac329e4368c75654ffd3af07f30cc55b24c7cd8d8d75f327b4f3c319b1401d8fa44c23cd4448d7ec57f8e7f08c0272427b1293d2cdd2b9fbd51854a5c0d867220e4d05a01b9321e24f3c63dc34205d001d9be00225cec4d65ba42207903eabd2300f7e39a8a56cbcc2a3cbd77bbcc2f2e26962b15644f75f83c391dbfdec8456b8e17a7fa2f8a102130cd4080f3c950328ddff55b5423de64bd002e5a8c66e359687ab8bc5c49863667b81e04768ff1bfa09f9ab4e218648145ea6ddbda75ded2dcf82743418baa8b3a542f9d90c3ad3637f3e20f6e2f64efec996f2eea87025c2fae76659232205e560d7dd12aab4dc03a0821e1ed5cb6fcf74b0402fef1906148082bbae75effbfa3ceaa7d1a497e92ea710f00e87bc3ab4137d35583d94c7a06e0c6fd192328c2d9cb315e58e6375de6aa530c9888f02a21f246dfa5533f2759b4d5f519852d9774b6ee15f950896393d5277089750c1c0134a2c6e30d5d052c8fd0b7c9b156f4e46bd8fe1a26c4e2207250daf33af8c7d401983387f842b15f5b2abfe721951cadd93ec19167f24203bc553efab0266a6c1fcd06ad86420a3eefdd4dfc337c5406e20fb33066e00c98e92468e6963a6e8927d5a4fdef51a45e66a5b727bbe24650e278ce90ea047e626cf604e76e71e71c11dcdd09087aef3f5990611c7acbd5c5933670cad996054c759a182c03ccb16f7ab177a84446b72b359b5d6f13f854361aebc2e50bfbc7ac857373d4e8bc6aa86e32b25159a61e004babd6b680a2cfc00d381b7fd1df41592935076dbf93b9695dc1fb3a7e36f21c16039d6e782cf4e2e4978ecd82fbf59ead85737da8246155572462b3ad3a4d8c770bb4e6efc40a56f2b3d39238bfaa810568a816fc2ca5311606ed00f22008a45c47946872ff7855540a585bab1ff4da9d8807ea87dfe6a2f7354b470487d7125dbd0f7118d41931a9e20f0c7e871cc93f123a3949993697275b139eed89e0047c84aebfb26265aa479f91712c1d773b897b09079cb31e806da15696d55693950966258ef790a2b55c92d0a75a3a07cf35b4e484fbdf88d5f3edc2d6ae33ff7f0532f761b23a34698d7e27079903e657c6ea7d75d3953d3fa3f6c538c3ddd8c0d3c8b5ff7e73f7bed80bc375ff90de11e35b1a061b6f8e68303b23a3822e0ff0cf8fc7398e1ee9c6e62eeba7883e70fb3ef8f0fa25752340e6e6967f5de443feca676dd17c67c830ffd43eac314025bf9b77f330a99a06412a4837acdfb3c68b470281cb3ebe067062755fd3375007b3f868df1d589c216a9c33b0ac9ad379a9b092a28d171f539d900d2e9bd1671bac3ace47847e35d64ed36fc51d6983b4ac99f6dbec903e7ea26f25753962cfa953545677e8b7793767427b2689b3dd7dd36548632b9cb961f7be2e33be89185a4feb4860d5b562fdc183633f56ea6578f6ad82b118014fe56ae5a71e28b6bbcbe8a46d188d9b20c45c3f327b17583e614dfc7e1239571ae51fb77286b03d413f44b6d7b02470668f099bb515cbefefcf37a1457794d1f035229ea006fd3a877b848ae8bbcb063f8d63785ed72fed3f6aa6969b6804f27aab3e2ba9cba17b2590c9723e3b558ee60f3663b12698525040706a722e74d2795a137a46c7088c200defc04e70415ff82764325dafdd0a2a6c1eb695d7584a4d7e05022a0033a89071262e230f4ab17874abc1f2c0dbd61ff493b8eeb43648888cc901a602fedc1405ba14420dd719356f94a85d26685a6b74069ae9bfeae82fcf8b719ad6d1a8a8b81a5b6d33ea0a835b582d09763746602ab70dfaba78aacf93a7a3936fbede062eb809e7bcfab138e70cc6f8450bb297bf476d532ccaf001ca0bfbd0a3a834d07aebc80685afed769a53c10e085c07d0d749aadc66a7b5131bec9b6b5d6f06f7bf04ec86c9727359c629106176b5303a0780b782496d053aa91be2a0667133d496319114113b9a30b94f35f1e28f7e53e56392273db9c985a5e74126272628306124cb847849e461e28a4f9dea4a379c11dd7e8788ff6049bf0e921d04381c7b25ab16a790fccd6e8d65eb98a95d17ec8e3c8d9bf48cb17aa97380009ef21bfcde900bac1f5ed04fc9b7113853e2b1a2a04dbc960d4c961fa6d10a08305eb8621e6c6e7a07178709996bbe224771a5225168adfdfa4a095e21eb655ba5489f610d6485547e38ae811d671768b0d94192b2c7aee4d44c3830da57323b31a7db5ceb139ee53ce44428680d8621595786b2a3df342c3122684e6d5981f4cc9274611fc2920bb21b09b2d49e4fdbc147d57eee6c879d9fcbc259c4abd02e8a2d70fb22aceecf10e58ec997e84e5db7bfb0952193afa44d69567f4f70c1bca11fd1bd979c3b424cae20598e409d56f21715f868036943194a3a1983812b569a24d1b2209cc53a528e3eeead376d6a4df2778721bc477eac837679acb80fb7392582a8b5017ac9f18273c0b00c25a698f1425c6c48033920f1d82b6244fdd941e002be92609c2dd76d44be83d92fb9e53a882580d50246d25164060f9b95bf55ef011748808cbd47acc37d09e2de26377c6793f5c6533a8ac7c03a4b1e0d1a678ced474dc609bbbced82a8c583b458a38c134f6286fc5dcf251413b4daa85cf302ff3ecdff4c67163ca6c4a79a63f82c12f39f182cbd4c845dea9d5a7731bf99a04d0337f75443985103a9668aa316393cc52f438fff1b9a01e658d592b9f205ec8f2a81ea9935533bdff1d2117eca18a9efa8074278a2e901c13b452aacfac6f80ed4fd548a33b68da3004293e2a20bcb5ed932d71e0ea758c9e8098fd7d3db81c60eb8b3d058ba46b330c8e1a9f147b778680c4728b882ba0818a8f2334dcdc122a48038cd7b830552bab5b1e1e824787c149c10e8242c37b704cc16f734f102b5aed0977d9243a0bff16cfa333f1d6cdb9053d61b804af9266cf189e27d1953784523007272995b168af15d5761fc182f8d94095c1708520c297acf8ce4b65cee31bcd1000474572ead7e73fcefcd982451a77bfc47b2209ac7b00df60840cb7401039e813c8432de080471e0e298db33ffcbe5db288fd181de0099c5d5be1499b043e2743bffde294e665cb412498b9e3309b516ca57bc894c4a54054a5d8d0a0f6b994d2bbef3b495da95056e429b77fc4184f229fe79e668ab13c16dcf7cc7818520a72ef4362260d157ec8f928b16e8a167571ec111c603a08a9d4b1118750f0447897566a214975946492564e3b98aa7ea7ce6c6bd1ed63be1077c0df52a9db0614a3bb36b25643b398144276989d76a18162a15ba196ca97bb26d64a0159091ce9f0d03bdb9d77916307b6e5bb0e58e27399364718679cfef369841ffd7c1ee303734854c109002aa89721e3f816f07be17d355d95d3e49133251dfcfaf6cd1333844f3769da4a98e332e85a85f69c757d90b03456c2926128b476e852280c6d5a1971512794662b5f16961d164fb36403f446113f2de280eb8a71449ca6c32561d2d06fd8030e7ad4d325d502c233c28e6d188a9910f0d0c559e0e8f9faef395c78a7a02234df24e29fbaa95ac0a11853b422fda8ff7f38a4af27b22b597d23a9caa59a10299141e54b6f401c17c517dea737728de5ac10640101e72b8b7df321d327469be616a1e8313476bcf5c75ce70f2937d542ff3130d5cc5ed78428a3b70d071c9eae24d536df924dc0821d8ba8622c80cd662caac63fe3c9100311e5ba3bd98b72b3c2bb0d75a11be1373d2d655636c3c51dda7f9df7b74d4ed520684515a7314cbc9397d534fbeba5f0343edb4823d1ae38e2e8c0c4c82feed836a39c972661ad05e867e7487609e13b68923eda9ea223bf415ee99a8c5500320cd3644b49b8fc1705124fe8640389a71e72f9ed04da1c4313ddeb68dfdd15130c2bd646b0366b19680eeeeed79418f6b94cfbe575bfce024e6b824e7104345efed86c13b215929f553a79d937e1a55bf4de905f467e3ed4dee1a69b143fe102c169fa8a8672cbeb9efc67482ac956ff93bd25b1cac5bd26a742b8b53900eed557d1cfd6429b5de2587e0a29fe8dcd519a9e25932e237cc8a6ceb9e7e1299ec0c69612fedc5dca330a813d2c8e1f61ca81b9a42697bb78d671d332de4503b5bc3d51d1209cf91a08c16283e06e4feab576a1dae67148d807445ebeab7efd34bf1d1e3fbb840f7f15ca55e077aa832e37baaa3cd2ee4ed939f4dbd17b686385f01e7c15772f6fab23d9e9e60b8e847bf0adfe409998ef9ce0a848376dd55f0a56ca520739146eb456ebf710c3c355c3b18879bc968b16f90d8a90c365d739bc155403567d369d54343d9d82285b9743e7c302ccb224e133752030c4fb1dd488687166b160cf1e814d5fa3b4cc60170214d55fc703051f83bccc5446482124b44638f035cd61ecfa8c5b89d2735e83c19ffdbb95f2c3fb8add1b0d1d31dc29e74a854468db3d3e4d1e1a9c0a29280d3163e8a53d5a715a4366436e923f03b99adfbda39cdb6d23918f785a14675502098d0924510a58623c194a0248504f35c403693daee1f30ff70cec8b3e50f94f8f423ab5705c3c4175abb09095d440ca86301d74d6166e51029bf50251828749aab31d83d25c3af47d859377d19d58cd599c68e303f7dae59c30788d7d33497b5f3e8595aa3b1ab2a7a73facbbe8e3a23dfa552510e2f8381ce17561d9396fb86524b782ddf51f5a5c958317281e8d6bc950bb274e166b20f84897601938fea78ba6eb7b43c63adb61951b3b1c94a9853a1e30aba677397028fbbbab432dec3a1b6d8334d5ab8d3fff48f7edc8537782e2c06859cf4808669ad01794d655137175dc291593af496c131bffb1272e69090002cdd32fb3cd3d45d262baa6ccf86aa93e9ce35557912a5a38c2311f4d6833e7516ed8faa395b6548487543c46de0c976ea19ec0dd057fd89dcba6632f8a880055e85db44cba0674702cedbd23e3b28517f9c1ab6dc1d727746f27e096964cf5d814eea46f4554fd4ef827583fed3382d03e43d97540b2fce09f2728ec308e3a6c4cb5412e3a99d871fd2024667c01e9f8a49207ff31d17211bd56dd31ace5b883a0cd0a0d64ca8e268f7912a692f96c674f0bc0e6f60801a080deddfe87f8fe5608e2a45834ef324d8c3bfeeffa7d46c297fd42318e327da38c7f012a57984f7f70e9a21c48d1642cd67a0623eacb7aa5c3351bf4294bebbb10dc8fe439abe9f742ea7662cdcaa962cfb48d97457b2de56294d634c350ea0236b902c7e1bcb0e23ec2a0c7449ba6a5c2a4a46dd139c3d50cf4dbceaf10937f91a4861860b5571cb31a69fe0b428de339d5df8b2cbbfbf8fb15a825a6fd6cc7decf2cc0dd8e9242bb869d18916356afde739f35a89fda0f0c65e90cd1716e475130779775b146fc0ded25dc8537bfe96bcd88122bbfd07521cd118d7fb045890292f475210242076d7aa86650346d67240ed9647b47a8c617731934f1e240219e51167b73fc85d55a5303abdc92387a3e0e022779e73783eba31dcf1adc8671fa4824e2822877abf7a8d04a69ab13f31555b870d2ccccf7024eeec1669576f7440e98938fb41c35dd114b87152184732b3a058e9bb542c56286a0b13e3f6fc4addc49372c7f896e91090c1fa4fc4c95ad89d6eef20d2a3417147e3df743d4ae839b082bf0b3fa3c3edc3cd42539e0ab0467f9a999e691702246c9b35a2e5e8da460f438943ccec9cc1ac97552ecdfdf72858c252b86cd2f2610ee3e32ebac28d0edc107698ff138d7f7198ec32605f5ab8d7745a40d2fe88adeba2b4c6dd58b9fcefd02aa3c05b8c2d609cb83e4206276cfb6e827b61a4bc908d87a3d77b8dc8f04a56fa1712fbdb4cbd25e99ff314848f69103aef6ccb41933c8445ed972c7a156ea32a5a45374493cd15868e34e83a22ebe90f47c211c3dffa8021bdbbcd149e28765668b506dc40c5c439bf4cbf66066b52b8cfc2b5b41ae08418f26d21541f9289d878a0b4bb816eed5a0708cfbf0acbc43a47342115bd33a8a4222afc914bea43e87417c9b2db920c71f5b70ab2899cef2e77b59bd614ac0662000e50187945c235573ddd45aa8a9978df3912e3231f849a3b212215ea24f9cc63cef0698754d7de1ec68fbf1d6d822c9e9917ecd855b92313d54fe3da3b5b89f569597aa21a5e80afb19d302e4ccc57dda410f516f4a19cea624f0ce6b0bb0c8f0bc0f31a3809476c9f8c5c2562169ed941787401e4a5e0f8b702c23adc8b3d008468278b08e06b4e5f2daa13f005d8c0eb2de95397915f2861975415aca4118ae6c4126a693ef9336738e86e655f8467942e0e0135702bd0f5167d0dd414e35ec166a5786d2291802c175ae4549d4d3c7a1001344109284bf1df6fed5e609b236f27734158f4e6c1c1f39ca3c1da4356615b52edd2f76fb44488eea0c8a975c8642b4a9b12d5ea6f3a136debcc1e587a474103b8d12e7e89849306b0b59e7c6edc83f0a8b6924b93d20a33a5ab1f49912d29c906f544f7b0c2070106004df769e881519c5a14c562b7993da6a87eae28001aa0f93db3fce9c7b4c29cca826e3cc57f56055a7de468d6ff11b97d05e9da8d02e84bdc8bc1b33e91ed6b094545599bcf8651115b3ddf0b458233d2c9bd9e5fde21ff0062213e4de7da95b5a4cbb518a42ad823c2351f83eec5b5b265e353910e310ed8ecb95ad823c975f60937fff45c1f59582f873eccd0623b33bdb4d67245f50e88a812fe4c6daa97699a8ae469f52670d86c646d8335733c02e4eecf0ba94a5f2a673ba9d284d39624e297ff2475f97a63286025ba20c8b3650168c288cb31b5eecaa4ac25ef2d4d6fe511c69c9c609542a9a71f3e3f15749d0fa6843d9b8dbc6cf0d980b4e8c7674e5041738dbf74b34addb90f7a74e393127143ae749a0bed8b888b7bfe8dade9ac0a7fbd781893e5bc720a39c60d5e4d354262a74fa9a27689f4b9068bebe936b34a69b8cbf68a3c23bba98843fdae5bee35e3de7088a8db0b356e132fef1fbe8f5cbf27f8da813b5d8012d3db7d1627610c8270c50eba1f7ac0ac986f90d47570bff4ee13842869171f5859e734492b8c94e37977695e03fe39283e418f0b3fc671be383f99d1feeff4f6712bf7809b9d415b76125248be023894c605d74a1fe0146fd5941e14b39d249ba2e1bbf339f6a8492c2d32772eea8ff9563b382d9cc8485f29292d449fd8804bd0c480d381ebbd218bd69ed1a29f6af598fead2c73d4383216acb1dde6b053b29b73508b884191a7a2cedfac47abb992fd976815ac3c883aa7d9bf351ec276f8c68e6b7979080585c7fe7bd165133bfc8fcdccbd13ecb1b03e2b3f515909d5878c10be919555fcdb97e294fc80811b6b6b904404afa9e59fcb60c12503f0d09826ac6c95c83c3d84bf4198d4beef5a69d9879d1ae0aad04948f01c14159d5f2882978049527b5a9981f1fbd005f4d9d397ead5a05271d1ed7f49feba705e3c183483c3c2de09840f1e166099d16111324459068c364069f6741b3c2b6c80375717b4ca8cfd85c36700e4c52ceda0577e73c6ab30e9422ea83d884c8bd05e72cdc6279e73615a7c1fd26e1f3ccc47ea7e983d6e183c1b76a18a80fd0eaa0e03d878cd72ea2f57c3083ebff610084eecfc841f46e7b06ad991cb18c85a10700bde4c1d601b7aada54ac2730b7523e967221db5bbb9e85e19cb22635f11140fbb5a3bcee2415b239236edda", 0x2000, &(0x7f000000ab80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a500)={0x20, 0x0, 0x5, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0102, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$FUSE(r2, 0x0, 0x0) 10.035682764s ago: executing program 6 (id=1333): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000fee000), 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x5, 0x40, @empty, @loopback, 0x40, 0x8, 0xf, 0x6}}) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@bridge_getlink={0xb4, 0x12, 0x1, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x8000, 0x4}, [@IFLA_EVENT={0x8, 0x2c, 0xa}, @IFLA_PORT_SELF={0x58, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3e0b8619dd59ff3cb95bb39a077bd05a"}, @IFLA_PORT_VF={0x8, 0x1, 0xbfb000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b64b91e639f52b5f5c1a8e5c17075542"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "13bc1ac304e3c094862886ed27faee2f"}]}, @IFLA_IFALIAS={0x14, 0x14, 'syzkaller1\x00'}, @IFLA_MTU={0x8, 0x4, 0x2185dd4b}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_CARRIER={0x5, 0x21, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0x9}]}, 0xb4}, 0x1, 0x0, 0x0, 0x882}, 0x20000080) 9.078850615s ago: executing program 6 (id=1337): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000042c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20", @ANYRESOCT], 0x4b) 8.5996939s ago: executing program 1 (id=1342): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000004c0)={[{@nojournal_checksum}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@nobarrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x41, 0x5b3, &(0x7f0000000780)="$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") r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) read$FUSE(r1, &(0x7f0000001c40)={0x2020}, 0x2020) 7.943182008s ago: executing program 6 (id=1345): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 7.340809844s ago: executing program 1 (id=1348): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000fee000), 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x5, 0x40, @empty, @loopback, 0x40, 0x8, 0xf, 0x6}}) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@bridge_getlink={0xb4, 0x12, 0x1, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x8000, 0x4}, [@IFLA_EVENT={0x8, 0x2c, 0xa}, @IFLA_PORT_SELF={0x58, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3e0b8619dd59ff3cb95bb39a077bd05a"}, @IFLA_PORT_VF={0x8, 0x1, 0xbfb000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b64b91e639f52b5f5c1a8e5c17075542"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "13bc1ac304e3c094862886ed27faee2f"}]}, @IFLA_IFALIAS={0x14, 0x14, 'syzkaller1\x00'}, @IFLA_MTU={0x8, 0x4, 0x2185dd4b}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_CARRIER={0x5, 0x21, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0x9}]}, 0xb4}, 0x1, 0x0, 0x0, 0x882}, 0x20000080) 7.104789987s ago: executing program 5 (id=1350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1000, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x230}}], 0x1, 0x2008c0c0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f00000020c0)=""/171, &(0x7f0000000000)=0xab) 6.964610559s ago: executing program 5 (id=1351): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000200)={0x2, 0x1000, {0x0}, {0xee01}, 0x5, 0x81}) socket$netlink(0x10, 0x3, 0x4) syz_clone(0x200, &(0x7f0000000080)="94c573b1a2c208f6469c97fdf5391b970ab8907a90000b94d7871989078dc72bd2a6d7b3b7ad39a940923d246e7a368a5f1710f269974d7e6444c5d42eac59e482055942671883515b826fb33d40004ea09b58eee30aaab50a442775e1871b87756193faba742bc2ed", 0x69, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="96047eaa1ac6bee95012b876bdd5400364966b9f1eb3aaae3d0b6aa8f07da42168a59a7130e20472d4d2b7e6fc1b356ef1bcbedd9878b9dcb0803b474590e5a87e15fbb3a0502a376b524f12d5623d794eccaf2726ba") getuid() mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmmsg$unix(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001180)="dd9e", 0x2}, {&(0x7f0000000100)="e1bb8b644f160a00c085757f0b5a8fcc4e7ed0e9cad5c28ae93a830c900c66eb91f48528a6cf2222c7", 0x29}], 0x2, &(0x7f0000000240)=[@cred={{0x18, 0x1, 0x2, {r4, 0xee01}}}], 0x18, 0x20048885}}], 0x1, 0xc004) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x0) name_to_handle_at(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=ANY=[], &(0x7f0000000180), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010329bd7000fcefffff08000000"], 0x14}, 0x1, 0x0, 0x0, 0x448db}, 0x0) 6.964112969s ago: executing program 6 (id=1352): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x29}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb1000006890086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4881}, 0x4004000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000000)="76389e14050000007583ddd0569ba56a888e5505f600010000000000", 0x0, 0x1fd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.241966957s ago: executing program 0 (id=1353): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000122, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 6.174524768s ago: executing program 1 (id=1355): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x10000, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, @in6=@empty, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x33, 0x0, 0xee01}, {0x4000000, 0x7f, 0x10000000007, 0x3, 0x0, 0xfffffffffffffdfd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) syz_emit_ethernet(0x7c, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00462f00fe8000000000000000000000005fde695c"], 0x0) 5.193253069s ago: executing program 4 (id=1356): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5.18399435s ago: executing program 5 (id=1357): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008240)="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", 0x2000, &(0x7f000000ab80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a500)={0x20, 0x0, 0x5, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0102, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$FUSE(r2, 0x0, 0x0) 5.087805331s ago: executing program 1 (id=1358): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000004c0)={[{@nojournal_checksum}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@nobarrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x41, 0x5b3, &(0x7f0000000780)="$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") r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) read$FUSE(r1, &(0x7f0000001c40)={0x2020}, 0x2020) 4.984391572s ago: executing program 0 (id=1359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000040)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000440)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.864583853s ago: executing program 4 (id=1360): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x167) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="03020000008002ff", 0x8) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r4}, 0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4.853334274s ago: executing program 6 (id=1361): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x5b}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40002}, 0x94) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x400800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) 4.31590966s ago: executing program 4 (id=1362): syz_read_part_table(0x1065, &(0x7f00000010c0)="$eJzsz7FJBkEQBeC3x7+3e6mB9QjWYB+mRhragE1YgIHVCDZgLBwjpwZWoAbfl82bx8CEP9WTbO2UnNVIrcnNU3pLy/OxyV41f7TPkyVjnclI+0ze73pykWTdjvE2L/t395TMLMvs+bow0ivXD/eXb1VVR/Kaq8ff/hcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/qOPAAAA//+t+BVW") 4.141827232s ago: executing program 1 (id=1363): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0), 0x28c9c1, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f0000905030300000000000905"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.572725588s ago: executing program 0 (id=1364): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$admmidi(0x0, 0xc000, 0x800) clock_gettime(0x0, 0x0) setitimer(0x0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(0x0, 0x111) close(r1) inotify_init1(0x800) fcntl$setown(r1, 0x8, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') 3.523662219s ago: executing program 5 (id=1365): socket$kcm(0x10, 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4d}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) getsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000048000000060a010400000034000000000100000008000b4000000000200004801c000180090001007866726d000000000c00028005000300010000000900010073797a3000000000140000001100010000000000000000000000000add29eeaa5ad704e845c5cd67"], 0xbc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') truncate(&(0x7f0000000040)='./file0\x00', 0x30000000) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.963475666s ago: executing program 4 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.5772601s ago: executing program 4 (id=1367): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000200)={0x2, 0x1000, {0x0}, {0xee01}, 0x5, 0x81}) socket$netlink(0x10, 0x3, 0x4) syz_clone(0x200, &(0x7f0000000080)="94c573b1a2c208f6469c97fdf5391b970ab8907a90000b94d7871989078dc72bd2a6d7b3b7ad39a940923d246e7a368a5f1710f269974d7e6444c5d42eac59e482055942671883515b826fb33d40004ea09b58eee30aaab50a442775e1871b87756193faba742bc2ed", 0x69, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="96047eaa1ac6bee95012b876bdd5400364966b9f1eb3aaae3d0b6aa8f07da42168a59a7130e20472d4d2b7e6fc1b356ef1bcbedd9878b9dcb0803b474590e5a87e15fbb3a0502a376b524f12d5623d794eccaf2726ba") getuid() mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmmsg$unix(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001180)="dd9e", 0x2}, {&(0x7f0000000100)="e1bb8b644f160a00c085757f0b5a8fcc4e7ed0e9cad5c28ae93a830c900c66eb91f48528a6cf2222c7", 0x29}], 0x2, &(0x7f0000000240)=[@cred={{0x18, 0x1, 0x2, {r4, 0xee01}}}], 0x18, 0x20048885}}], 0x1, 0xc004) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x0) name_to_handle_at(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=ANY=[], &(0x7f0000000180), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010329bd7000fcefffff08000000"], 0x14}, 0x1, 0x0, 0x0, 0x448db}, 0x0) 1.868060928s ago: executing program 0 (id=1368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0xffff, 0x0, 0x0, 0x0, 0x6733, 0x401, 0x0, 0x0, 0xab5, 0x0, 0x3b9ac9ff, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1, 0xe52, 0x6}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f00000001c0)=[{0x6, 0x1}]}) 1.846671888s ago: executing program 5 (id=1369): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0xee01, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000400)={{0x2, @multicast2, 0x0, 0x3, 'wrr\x00', 0x0, 0x20, 0x10023}, {@local, 0x0, 0x10000, 0x0, 0x80000001, 0x6}}, 0x44) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) 756.775541ms ago: executing program 0 (id=1370): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 643.727442ms ago: executing program 1 (id=1371): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) shutdown(r0, 0x1) 552.550834ms ago: executing program 4 (id=1372): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x82, 0x0, &(0x7f0000000000)) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r2], 0x68}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x20000, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) madvise(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x10) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f0000000180)={{&(0x7f00003ff000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, r9, 0x80, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 58.677319ms ago: executing program 5 (id=1373): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000004c0)={[{@nojournal_checksum}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@nobarrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x41, 0x5b3, &(0x7f0000000780)="$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") r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) read$FUSE(r1, &(0x7f0000001c40)={0x2020}, 0x2020) 0s ago: executing program 0 (id=1374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000040)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000440)) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): found [ 211.842976][ T5864] hub 8-0:1.0: 1 port detected [ 211.862685][ T5864] loop1: detected capacity change from 0 to 2048 [ 211.919719][ T5864] loop1: p2 < > p4 [ 211.925019][ T5864] loop1: p4 size 262144 extends beyond EOD, truncated [ 212.031209][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 212.058796][ T4532] udevd[4532]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 212.061647][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 212.162310][ T5868] device syzkaller0 entered promiscuous mode [ 214.341463][ T4320] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 214.450663][ T5891] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 214.492274][ T5891] netlink: 'syz.0.329': attribute type 2 has an invalid length. [ 214.541199][ T4320] usb 3-1: Using ep0 maxpacket: 32 [ 214.556690][ T4320] usb 3-1: config 0 has no interfaces? [ 214.582845][ T4320] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 214.595515][ T5897] tipc: Enabled bearer , priority 0 [ 214.626868][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.640586][ T5897] device syzkaller0 entered promiscuous mode [ 214.661731][ T4320] usb 3-1: Product: syz [ 214.678284][ T4320] usb 3-1: Manufacturer: syz [ 214.691052][ T4320] usb 3-1: SerialNumber: syz [ 214.699254][ T5897] tipc: Resetting bearer [ 214.723812][ T4320] usb 3-1: config 0 descriptor?? [ 214.729745][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 214.910227][ T5899] tipc: Resetting bearer [ 215.128346][ T5906] futex_wake_op: syz.2.326 tries to shift op by 144; fix this program [ 217.208520][ T128] usb 3-1: USB disconnect, device number 5 [ 220.451890][ T5965] siw: device registration error -23 [ 220.906791][ T5971] loop5: detected capacity change from 0 to 1024 [ 220.916915][ T5971] EXT4-fs: Ignoring removed oldalloc option [ 221.024716][ T5971] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 221.061680][ T5971] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.323861][ T5077] EXT4-fs (loop5): unmounting filesystem. [ 223.729153][ T6000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.355'. [ 223.787461][ T52] block nbd5: Attempted send on invalid socket [ 223.794476][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 223.811342][ T6002] efs: cannot read volume header [ 223.965106][ T6010] netlink: 48 bytes leftover after parsing attributes in process `syz.1.359'. [ 224.337682][ T6019] loop4: detected capacity change from 0 to 1024 [ 224.420353][ T6019] EXT4-fs: Ignoring removed oldalloc option [ 224.546583][ T6019] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 224.578426][ T6019] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.836473][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 226.889428][ T6014] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.969531][ T6058] netlink: 36 bytes leftover after parsing attributes in process `syz.0.368'. [ 227.119799][ T6014] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.302644][ T6014] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.519982][ T6014] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.381754][ T1043] block nbd0: Attempted send on invalid socket [ 228.388005][ T1043] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.398983][ T6070] efs: cannot read volume header [ 228.500815][ T6014] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.558316][ T6014] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.584697][ T6014] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.678173][ T6014] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.695059][ T6073] loop4: detected capacity change from 0 to 1024 [ 228.732499][ T6073] EXT4-fs: Ignoring removed oldalloc option [ 228.904486][ T6073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 228.921456][ T6073] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.248139][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 230.356157][ T6103] netlink: 36 bytes leftover after parsing attributes in process `syz.0.381'. [ 230.902441][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 231.613375][ T6131] loop2: detected capacity change from 0 to 1024 [ 231.717843][ T6131] EXT4-fs: Ignoring removed oldalloc option [ 231.886593][ T6131] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 231.901068][ T6131] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.272755][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 233.229261][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 234.375072][ T6173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.394'. [ 237.782340][ T6203] hub 8-0:1.0: USB hub found [ 237.831528][ T6203] hub 8-0:1.0: 1 port detected [ 237.965171][ T6208] loop4: detected capacity change from 0 to 2048 [ 238.068276][ T6208] loop4: p2 < > p4 [ 238.141074][ T6208] loop4: p4 size 262144 extends beyond EOD, truncated [ 238.265129][ T6215] fuse: Bad value for 'fd' [ 242.037312][ T6238] netlink: 36 bytes leftover after parsing attributes in process `syz.2.410'. [ 243.505237][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 243.522907][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 243.948742][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 245.471453][ T4279] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 245.478081][ T48] Bluetooth: hci4: command 0x1003 tx timeout [ 245.815206][ T6297] netlink: 36 bytes leftover after parsing attributes in process `syz.0.425'. [ 253.259153][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 254.159367][ T6359] netlink: 36 bytes leftover after parsing attributes in process `syz.5.439'. [ 256.042846][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.049326][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.620477][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 258.359333][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 258.531327][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 258.588375][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 258.854605][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 259.171543][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 259.199197][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 259.220736][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 259.254283][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 259.278948][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 259.311269][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 259.332574][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 259.357813][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 259.368858][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 259.376825][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 259.385866][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 259.393965][ T4750] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 259.415860][ T4750] hid-generic 0006:0008:0001.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 261.470120][ T6416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.452'. [ 261.800478][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 262.611915][ T6423] fido_id[6423]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 268.354546][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 274.148529][ T6533] loop4: detected capacity change from 0 to 1024 [ 274.157070][ T6533] EXT4-fs: inline encryption not supported [ 274.194298][ T6533] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.479: lblock 2 mapped to illegal pblock 2 (length 1) [ 274.320853][ T6533] EXT4-fs (loop4): Remounting filesystem read-only [ 274.370990][ T6533] __quota_error: 26 callbacks suppressed [ 274.371044][ T6533] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 274.386280][ T6533] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.479: lblock 0 mapped to illegal pblock 48 (length 1) [ 274.414348][ T6533] EXT4-fs (loop4): Remounting filesystem read-only [ 274.431696][ T6533] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 274.517992][ T6533] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.479: Failed to acquire dquot type 0 [ 276.141877][ T6533] EXT4-fs (loop4): Remounting filesystem read-only [ 276.334935][ T6533] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 276.663848][ T6533] EXT4-fs (loop4): Remounting filesystem read-only [ 276.788355][ T6533] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.479: mark_inode_dirty error [ 277.004402][ T6533] EXT4-fs (loop4): Remounting filesystem read-only [ 277.149488][ T6533] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 277.374569][ T6533] EXT4-fs (loop4): 1 orphan inode deleted [ 277.516526][ T6533] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 277.746534][ T4502] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 278.035582][ T4502] EXT4-fs (loop4): Remounting filesystem read-only [ 278.042885][ T4502] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 278.066996][ T4502] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:26: Failed to release dquot type 0 [ 278.122646][ T4502] EXT4-fs (loop4): Remounting filesystem read-only [ 278.142892][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 278.162626][ T4282] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 278.206716][ T4282] EXT4-fs (loop4): Remounting filesystem read-only [ 278.221183][ T4282] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 278.259285][ T4282] EXT4-fs (loop4): Remounting filesystem read-only [ 278.267444][ T4282] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 278.296827][ T4282] EXT4-fs (loop4): Remounting filesystem read-only [ 278.742825][ T6569] tipc: Enabled bearer , priority 0 [ 278.780865][ T6569] device syzkaller0 entered promiscuous mode [ 279.003397][ T6569] tipc: Resetting bearer [ 279.062236][ T6567] tipc: Resetting bearer [ 279.118673][ T6567] tipc: Disabling bearer [ 279.864961][ T6584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.493'. [ 280.208734][ T6594] netlink: 'syz.4.496': attribute type 4 has an invalid length. [ 280.222583][ T6592] loop0: detected capacity change from 0 to 1024 [ 280.258123][ T6592] EXT4-fs: inline encryption not supported [ 280.264242][ T6594] netlink: 'syz.4.496': attribute type 4 has an invalid length. [ 280.358415][ T6592] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.497: lblock 2 mapped to illegal pblock 2 (length 1) [ 280.361827][ T6594] tipc: Started in network mode [ 280.381316][ T6592] EXT4-fs (loop0): Remounting filesystem read-only [ 280.383075][ T6594] tipc: Node identity ac14140f, cluster identity 4711 [ 280.388794][ T6592] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 280.448117][ T6594] tipc: New replicast peer: 255.255.255.255 [ 280.458426][ T6594] tipc: Enabled bearer , priority 10 [ 280.465660][ T6592] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.497: lblock 0 mapped to illegal pblock 48 (length 1) [ 280.523629][ T6592] EXT4-fs (loop0): Remounting filesystem read-only [ 280.530231][ T6592] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 280.601169][ T6592] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.497: Failed to acquire dquot type 0 [ 280.698063][ T6592] EXT4-fs (loop0): Remounting filesystem read-only [ 280.745281][ T6592] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 280.830712][ T6592] EXT4-fs (loop0): Remounting filesystem read-only [ 280.839889][ T6592] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.497: mark_inode_dirty error [ 280.944107][ T6592] EXT4-fs (loop0): Remounting filesystem read-only [ 281.002163][ T6592] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 281.105740][ T6592] EXT4-fs (loop0): 1 orphan inode deleted [ 281.146147][ T4499] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 281.169194][ T6592] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 282.424840][ T4499] EXT4-fs (loop0): Remounting filesystem read-only [ 282.462654][ T4499] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 282.514045][ T4499] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:25: Failed to release dquot type 0 [ 282.615533][ T4499] EXT4-fs (loop0): Remounting filesystem read-only [ 282.638573][ T6625] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 16: comm syz.0.497: lblock 0 mapped to illegal pblock 16 (length 1) [ 282.663054][ T6625] EXT4-fs (loop0): Remounting filesystem read-only [ 283.249802][ T41] tipc: Node number set to 2886997007 [ 283.322554][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 283.328589][ T4274] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 283.369842][ T4274] EXT4-fs (loop0): Remounting filesystem read-only [ 283.390231][ T4274] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 283.419524][ T4274] EXT4-fs (loop0): Remounting filesystem read-only [ 283.438201][ T4274] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 283.467696][ T4274] EXT4-fs (loop0): Remounting filesystem read-only [ 283.706509][ T52] block nbd0: Attempted send on invalid socket [ 283.712912][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.741744][ T6634] efs: cannot read volume header [ 283.868361][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 284.850130][ T6648] netlink: 36 bytes leftover after parsing attributes in process `syz.1.506'. [ 286.660246][ T6663] netlink: 'syz.0.510': attribute type 4 has an invalid length. [ 286.702531][ T6663] netlink: 'syz.0.510': attribute type 4 has an invalid length. [ 286.723874][ T6663] tipc: Enabling of bearer rejected, already enabled [ 288.385213][ T6677] loop0: detected capacity change from 0 to 1024 [ 288.420131][ T6677] EXT4-fs: inline encryption not supported [ 288.642259][ T6677] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.513: lblock 2 mapped to illegal pblock 2 (length 1) [ 288.723536][ T6677] EXT4-fs (loop0): Remounting filesystem read-only [ 288.730192][ T6677] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 288.792914][ T6677] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.513: lblock 0 mapped to illegal pblock 48 (length 1) [ 288.842799][ T6677] EXT4-fs (loop0): Remounting filesystem read-only [ 288.866023][ T6677] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 288.883630][ T6677] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.513: Failed to acquire dquot type 0 [ 288.956613][ T6677] EXT4-fs (loop0): Remounting filesystem read-only [ 289.006222][ T6677] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 289.132648][ T6677] EXT4-fs (loop0): Remounting filesystem read-only [ 289.139205][ T6677] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.513: mark_inode_dirty error [ 289.190415][ T6677] EXT4-fs (loop0): Remounting filesystem read-only [ 289.257704][ T6677] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 289.297029][ T6677] EXT4-fs (loop0): 1 orphan inode deleted [ 289.305076][ T6677] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 289.322306][ T4495] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 289.496824][ T4495] EXT4-fs (loop0): Remounting filesystem read-only [ 289.556684][ T6693] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 16: comm syz.0.513: lblock 0 mapped to illegal pblock 16 (length 1) [ 289.574821][ T6693] EXT4-fs (loop0): Remounting filesystem read-only [ 289.997590][ T4495] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 290.042009][ T6684] mmap: syz.4.515 (6684) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 290.053961][ T4495] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:23: Failed to release dquot type 0 [ 290.071349][ T4495] EXT4-fs (loop0): Remounting filesystem read-only [ 290.109101][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 290.119072][ T4274] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 290.161514][ T4274] EXT4-fs (loop0): Remounting filesystem read-only [ 290.169475][ T4274] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 290.477871][ T4274] EXT4-fs (loop0): Remounting filesystem read-only [ 290.564440][ T4274] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 290.676846][ T4274] EXT4-fs (loop0): Remounting filesystem read-only [ 290.960413][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'. [ 294.823208][ T6715] netlink: 'syz.4.523': attribute type 4 has an invalid length. [ 294.868145][ T6715] netlink: 'syz.4.523': attribute type 4 has an invalid length. [ 295.074918][ T6715] tipc: Enabling of bearer rejected, already enabled [ 295.542428][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.554746][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.563572][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.575831][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.659347][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 295.669189][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.024191][ T6720] lo speed is unknown, defaulting to 1000 [ 297.741386][ T4319] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 297.791641][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 298.042162][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 298.247017][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.267085][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 298.304084][ T4319] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 298.333766][ T6720] chnl_net:caif_netlink_parms(): no params data found [ 298.351319][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.359560][ T4319] usb 1-1: Product: syz [ 298.408313][ T4319] usb 1-1: Manufacturer: syz [ 298.413623][ T4319] usb 1-1: SerialNumber: syz [ 298.438187][ T4319] usb 1-1: config 0 descriptor?? [ 298.595218][ T4482] tipc: Disabling bearer [ 298.601870][ T4482] tipc: Left network mode [ 298.741359][ T4319] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 298.758981][ T6734] capability: warning: `syz.1.526' uses deprecated v2 capabilities in a way that may be insecure [ 298.773618][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.780781][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.889516][ T6720] device bridge_slave_0 entered promiscuous mode [ 298.999289][ T3653] usb 1-1: USB disconnect, device number 6 [ 299.200924][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.219231][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.266791][ T6720] device bridge_slave_1 entered promiscuous mode [ 299.471745][ T6720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.514795][ T6720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.839527][ T6720] team0: Port device team_slave_0 added [ 299.871421][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 300.054393][ T6720] team0: Port device team_slave_1 added [ 300.326656][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.397543][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.501568][ T6720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.793900][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.812647][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.912753][ T6720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.951249][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 302.156188][ T6776] netlink: 'syz.4.533': attribute type 4 has an invalid length. [ 302.185051][ T6777] netlink: 'syz.4.533': attribute type 4 has an invalid length. [ 302.321063][ T6779] tipc: Enabling of bearer rejected, already enabled [ 303.074016][ T6720] device hsr_slave_0 entered promiscuous mode [ 303.091778][ T6720] device hsr_slave_1 entered promiscuous mode [ 303.104098][ T6720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.115529][ T6720] Cannot create hsr debugfs directory [ 303.461496][ T4965] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 303.652280][ T4965] usb 5-1: Using ep0 maxpacket: 8 [ 303.670134][ T4965] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.731443][ T4965] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.765907][ T4965] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 60960, setting to 1024 [ 303.871047][ T4965] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 303.981949][ T4965] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.031232][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 304.053330][ T4965] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 304.077875][ T4965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.112589][ T4482] device hsr_slave_0 left promiscuous mode [ 304.137218][ T4482] device hsr_slave_1 left promiscuous mode [ 305.362214][ T4965] usb 5-1: GET_CAPABILITIES returned 0 [ 305.368008][ T4965] usbtmc 5-1:16.0: can't read capabilities [ 306.404939][ T22] usb 5-1: USB disconnect, device number 2 [ 309.605569][ T6823] 9pnet_virtio: no channels available for device syz [ 311.857886][ T4482] bond0 (unregistering): Released all slaves [ 313.477008][ T6824] netlink: 'syz.1.543': attribute type 9 has an invalid length. [ 313.491876][ T6824] netlink: 'syz.1.543': attribute type 7 has an invalid length. [ 313.499875][ T6824] netlink: 'syz.1.543': attribute type 8 has an invalid length. [ 313.509212][ T6830] netlink: 'syz.5.544': attribute type 4 has an invalid length. [ 313.530662][ T6831] netlink: 'syz.5.544': attribute type 4 has an invalid length. [ 313.564066][ T6834] tipc: Enabling of bearer rejected, already enabled [ 313.842600][ T6720] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.870222][ T6720] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.918635][ T6851] loop1: detected capacity change from 0 to 1024 [ 313.928878][ T6720] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.953348][ T6851] EXT4-fs: Ignoring removed oldalloc option [ 313.990131][ T6720] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 314.023683][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 314.789198][ T6851] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 314.827117][ T6851] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.247021][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 316.732926][ T6720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.772662][ T6720] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.779714][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.205737][ T6880] random: crng reseeded on system resumption [ 317.337082][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.368209][ T6875] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 317.473914][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.480301][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.569920][ T6885] program syz.0.553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.658774][ T6875] device bond1 entered promiscuous mode [ 317.677380][ T6875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.816832][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.844339][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.873281][ T4499] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.880644][ T4499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.932022][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.970942][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.998926][ T4499] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.006211][ T4499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.661887][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.567580][ T6875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.638608][ T6875] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 319.728581][ T6875] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 319.779613][ T6875] bond1: (slave vti0): making interface the new active one [ 319.797227][ T6875] device vti0 entered promiscuous mode [ 319.805365][ T6875] bond1: (slave vti0): Enslaving as an active interface with an up link [ 319.935034][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.012843][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.046090][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 320.112732][ T6904] netlink: 'syz.5.559': attribute type 4 has an invalid length. [ 320.138298][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.154367][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.166954][ T6907] loop1: detected capacity change from 0 to 1024 [ 320.174522][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.189222][ T6907] EXT4-fs: Ignoring removed oldalloc option [ 320.207839][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.222789][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.235123][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.247245][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.280633][ T6720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.331018][ T6907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 320.341021][ T6720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.350636][ T6907] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.364827][ T6908] netlink: 'syz.5.559': attribute type 4 has an invalid length. [ 320.374916][ T6912] tipc: Enabled bearer , priority 0 [ 320.397565][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.417504][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.524258][ T6905] tipc: Resetting bearer [ 320.664761][ T6903] tipc: Disabling bearer [ 320.700630][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 322.630285][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.640819][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.681795][ T6720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.013225][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.562'. [ 328.332666][ T6981] loop5: detected capacity change from 0 to 1024 [ 328.409189][ T6981] EXT4-fs: Ignoring removed oldalloc option [ 328.467123][ T6988] tipc: Enabled bearer , priority 0 [ 328.809926][ T6981] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 328.921375][ T6981] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.262474][ T6985] tipc: Disabling bearer [ 329.270098][ T5077] EXT4-fs (loop5): unmounting filesystem. [ 329.311410][ T6997] siw: device registration error -23 [ 329.788405][ T6720] device veth0_vlan entered promiscuous mode [ 329.796701][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 329.869687][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.922097][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 329.962906][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.992392][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.020220][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.080393][ T6720] device veth1_vlan entered promiscuous mode [ 330.153411][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 330.175848][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 330.218789][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.231747][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.252979][ T6720] device veth0_macvtap entered promiscuous mode [ 330.256840][ T6720] device veth1_macvtap entered promiscuous mode [ 330.355078][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.355099][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.355106][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.355114][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.355119][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.355127][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.355134][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.355141][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.357593][ T6720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.360239][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.361035][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 330.361876][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.362508][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.366943][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.366966][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.366974][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.366982][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.366988][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.366996][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.367004][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.367012][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.368804][ T6720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.368931][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 330.369800][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 330.380750][ T6720] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.380844][ T6720] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.380875][ T6720] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.380905][ T6720] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.533840][ T4502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.533865][ T4502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.534185][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 334.151657][ T4497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.151684][ T4497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.214398][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 334.358924][ T7036] loop1: detected capacity change from 0 to 1024 [ 334.451509][ T7036] EXT4-fs: Ignoring removed oldalloc option [ 334.523418][ T7036] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 334.523544][ T7036] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.762539][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 336.878978][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 336.890555][ T7074] device bond0 entered promiscuous mode [ 336.890615][ T7074] device bond_slave_0 entered promiscuous mode [ 336.890766][ T7074] device bond_slave_1 entered promiscuous mode [ 336.926403][ T7074] device gretap0 entered promiscuous mode [ 336.952410][ T7074] device hsr1 entered promiscuous mode [ 336.953416][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 338.468146][ T7093] loop6: detected capacity change from 0 to 1024 [ 338.480148][ T7093] EXT4-fs: Ignoring removed oldalloc option [ 338.488541][ T7095] 9pnet_virtio: no channels available for device syz [ 338.490595][ T7095] netlink: 'syz.5.587': attribute type 1 has an invalid length. [ 338.595083][ T7093] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 338.595220][ T7093] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.662877][ T6720] EXT4-fs (loop6): unmounting filesystem. [ 339.705328][ T7095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.737774][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.5.587'. [ 339.740995][ T7105] device bond1 entered promiscuous mode [ 339.836539][ T7095] bond1: (slave dummy0): making interface the new active one [ 339.836567][ T7095] device dummy0 entered promiscuous mode [ 339.838186][ T7095] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 339.861661][ T7111] device syzkaller0 entered promiscuous mode [ 339.861838][ T7095] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.587'. [ 342.085934][ T7147] loop1: detected capacity change from 0 to 1024 [ 342.140320][ T7147] EXT4-fs: Ignoring removed oldalloc option [ 342.348762][ T7147] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 342.394508][ T7147] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.195285][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 343.311919][ T7178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.617'. [ 344.781820][ T7206] loop4: detected capacity change from 0 to 1024 [ 344.790084][ T7206] EXT4-fs: Ignoring removed oldalloc option [ 344.853758][ T7206] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 344.968901][ T7206] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.295148][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 345.703486][ T7220] netlink: 36 bytes leftover after parsing attributes in process `syz.4.629'. [ 347.211169][ T4317] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 347.446120][ T4317] usb 2-1: Using ep0 maxpacket: 16 [ 347.463631][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 347.764656][ T4317] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 348.023789][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.071157][ T4317] usb 2-1: Product: syz [ 348.091366][ T4317] usb 2-1: Manufacturer: syz [ 348.113271][ T4317] usb 2-1: SerialNumber: syz [ 348.134460][ T4317] usb 2-1: config 0 descriptor?? [ 348.162091][ T4317] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 348.216382][ T4317] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 348.652931][ T7269] netlink: 68 bytes leftover after parsing attributes in process `syz.4.640'. [ 348.753570][ T4317] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 349.108227][ T7275] loop4: detected capacity change from 0 to 1024 [ 349.166273][ T7275] EXT4-fs: inline encryption not supported [ 349.361487][ T7275] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.641: lblock 2 mapped to illegal pblock 2 (length 1) [ 349.390807][ T4317] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 349.412768][ T4317] em28xx 2-1:0.0: board has no eeprom [ 349.426670][ T7275] EXT4-fs (loop4): Remounting filesystem read-only [ 349.434217][ T7275] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 349.443946][ T7275] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.641: lblock 0 mapped to illegal pblock 48 (length 1) [ 349.461673][ T7275] EXT4-fs (loop4): Remounting filesystem read-only [ 349.468896][ T7275] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 349.510099][ T7275] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.641: Failed to acquire dquot type 0 [ 349.571222][ T7275] EXT4-fs (loop4): Remounting filesystem read-only [ 349.618591][ T7275] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 349.649024][ T7275] EXT4-fs (loop4): Remounting filesystem read-only [ 349.670796][ T7275] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.641: mark_inode_dirty error [ 349.711374][ T4317] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 349.719975][ T7275] EXT4-fs (loop4): Remounting filesystem read-only [ 349.734842][ T4317] em28xx 2-1:0.0: dvb set to bulk mode. [ 349.747023][ T7275] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 349.763261][ T4965] em28xx 2-1:0.0: Binding DVB extension [ 349.809013][ T4317] usb 2-1: USB disconnect, device number 2 [ 349.848172][ T7275] EXT4-fs (loop4): 1 orphan inode deleted [ 349.872212][ T4317] em28xx 2-1:0.0: Disconnecting em28xx [ 349.888743][ T7275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 349.908173][ T4479] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 350.003882][ T4479] EXT4-fs (loop4): Remounting filesystem read-only [ 350.038180][ T4479] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 350.193592][ T7287] netlink: 36 bytes leftover after parsing attributes in process `syz.0.643'. [ 350.194543][ T4965] em28xx 2-1:0.0: Registering input extension [ 350.243902][ T4317] em28xx 2-1:0.0: Closing input extension [ 350.261404][ T7290] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 16: comm syz.4.641: lblock 0 mapped to illegal pblock 16 (length 1) [ 350.685061][ T4317] em28xx 2-1:0.0: Freeing device [ 350.691309][ T7290] EXT4-fs (loop4): Remounting filesystem read-only [ 350.784035][ T4479] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:17: Failed to release dquot type 0 [ 350.911494][ T4479] EXT4-fs (loop4): Remounting filesystem read-only [ 350.935781][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 350.949233][ T4282] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 351.052526][ T7298] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 351.071388][ T4282] EXT4-fs (loop4): Remounting filesystem read-only [ 351.101859][ T4282] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 351.165834][ T4282] EXT4-fs (loop4): Remounting filesystem read-only [ 351.182985][ T4282] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 351.210891][ T4282] EXT4-fs (loop4): Remounting filesystem read-only [ 351.279664][ T7302] device syzkaller0 entered promiscuous mode [ 351.626552][ T7310] overlayfs: './file0' not a directory [ 353.836095][ T7329] netlink: 68 bytes leftover after parsing attributes in process `syz.1.651'. [ 354.219457][ T7339] loop1: detected capacity change from 0 to 1024 [ 354.282631][ T7339] EXT4-fs: inline encryption not supported [ 354.390959][ T7339] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.655: lblock 2 mapped to illegal pblock 2 (length 1) [ 354.471581][ T7339] EXT4-fs (loop1): Remounting filesystem read-only [ 354.482033][ T7339] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 354.492016][ T7339] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.655: lblock 0 mapped to illegal pblock 48 (length 1) [ 354.507903][ T7339] EXT4-fs (loop1): Remounting filesystem read-only [ 354.515025][ T7339] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 354.524701][ T7339] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.655: Failed to acquire dquot type 0 [ 354.579738][ T7339] EXT4-fs (loop1): Remounting filesystem read-only [ 354.593405][ T7339] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 354.652630][ T7339] EXT4-fs (loop1): Remounting filesystem read-only [ 354.664985][ T7339] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.655: mark_inode_dirty error [ 354.720041][ T7339] EXT4-fs (loop1): Remounting filesystem read-only [ 354.797294][ T7339] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 354.825664][ T7339] EXT4-fs (loop1): 1 orphan inode deleted [ 354.843089][ T46] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 354.875312][ T7339] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 354.906034][ T46] EXT4-fs (loop1): Remounting filesystem read-only [ 354.969219][ T46] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 355.169392][ T46] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 355.223607][ T7360] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 16: comm syz.1.655: lblock 0 mapped to illegal pblock 16 (length 1) [ 356.457522][ T7360] EXT4-fs (loop1): Remounting filesystem read-only [ 356.484651][ T46] EXT4-fs (loop1): Remounting filesystem read-only [ 357.001816][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 357.007782][ T4275] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 357.021668][ T4275] EXT4-fs (loop1): Remounting filesystem read-only [ 357.028316][ T4275] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 357.105556][ T4275] EXT4-fs (loop1): Remounting filesystem read-only [ 357.124046][ T4275] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 357.153505][ T4275] EXT4-fs (loop1): Remounting filesystem read-only [ 357.873605][ T7387] lo speed is unknown, defaulting to 1000 [ 358.282984][ T7400] netlink: 68 bytes leftover after parsing attributes in process `syz.5.665'. [ 358.381288][ T22] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 358.582993][ T22] usb 7-1: config 0 has no interfaces? [ 358.591777][ T22] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 358.698149][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.733952][ T22] usb 7-1: Product: syz [ 358.751416][ T22] usb 7-1: Manufacturer: syz [ 358.771270][ T22] usb 7-1: SerialNumber: syz [ 358.792211][ T22] usb 7-1: config 0 descriptor?? [ 359.662607][ T41] usb 7-1: USB disconnect, device number 2 [ 359.683839][ T7412] device syzkaller0 entered promiscuous mode [ 361.590371][ T7444] netlink: 68 bytes leftover after parsing attributes in process `syz.6.677'. [ 361.725430][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 361.750156][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 361.803141][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 361.835364][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 361.851496][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 361.878296][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 361.913005][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 361.943419][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 361.959328][ T7435] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 361.984138][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 362.019740][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 362.041743][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 362.063509][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 362.066843][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 362.069340][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 362.069919][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 362.069946][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 362.069967][ T4965] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 362.081347][ T4965] hid-generic 0006:0008:0001.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 362.442164][ T7456] fido_id[7456]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 366.191443][ T7498] netlink: 68 bytes leftover after parsing attributes in process `syz.0.690'. [ 367.613234][ T7522] loop4: detected capacity change from 0 to 1024 [ 367.651750][ T7522] EXT4-fs: Ignoring removed oldalloc option [ 367.746517][ T7522] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 367.771446][ T7522] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.798963][ T7513] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 369.481533][ T7551] netlink: 68 bytes leftover after parsing attributes in process `syz.5.703'. [ 371.882517][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 372.023649][ T7580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.869408][ T7604] netlink: 68 bytes leftover after parsing attributes in process `syz.6.714'. [ 374.141759][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.717'. [ 374.184928][ T7610] netlink: 24 bytes leftover after parsing attributes in process `syz.6.717'. [ 374.306187][ T7599] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 375.098469][ T7627] loop6: detected capacity change from 0 to 1024 [ 375.126751][ T7627] EXT4-fs: Ignoring removed oldalloc option [ 375.202292][ T7631] netlink: 'syz.1.721': attribute type 4 has an invalid length. [ 375.232155][ T7627] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 375.261521][ T7627] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.296965][ T7631] netlink: 'syz.1.721': attribute type 4 has an invalid length. [ 375.339969][ T7631] tipc: Enabling of bearer rejected, already enabled [ 375.579188][ T6720] EXT4-fs (loop6): unmounting filesystem. [ 375.858785][ T7641] tipc: Started in network mode [ 375.871165][ T7641] tipc: Node identity 1e113146c9bc, cluster identity 4711 [ 375.891571][ T7641] tipc: Enabled bearer , priority 0 [ 375.905660][ T7641] tipc: Resetting bearer [ 376.968181][ T7640] tipc: Disabling bearer [ 376.978849][ T4965] tipc: Node number set to 3618451782 [ 377.293603][ T7659] netlink: 68 bytes leftover after parsing attributes in process `syz.4.727'. [ 378.917703][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.924666][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.115953][ T7675] loop1: detected capacity change from 0 to 1024 [ 379.129093][ T7680] netlink: 'syz.4.734': attribute type 4 has an invalid length. [ 379.147320][ T7680] netlink: 'syz.4.734': attribute type 4 has an invalid length. [ 379.170277][ T7675] EXT4-fs: Ignoring removed oldalloc option [ 379.208082][ T7680] tipc: Enabling of bearer rejected, already enabled [ 379.246982][ T7675] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 379.296985][ T7675] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.647880][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 381.265056][ T7709] tipc: Enabled bearer , priority 0 [ 381.377894][ T7711] tipc: Resetting bearer [ 381.543508][ T7707] tipc: Disabling bearer [ 381.628081][ T7713] netlink: 68 bytes leftover after parsing attributes in process `syz.1.741'. [ 381.645730][ T7696] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 383.086747][ T7732] netlink: 'syz.6.746': attribute type 4 has an invalid length. [ 383.112596][ T7732] netlink: 'syz.6.746': attribute type 4 has an invalid length. [ 383.166448][ T7735] loop4: detected capacity change from 0 to 1024 [ 383.175185][ T7732] tipc: New replicast peer: 255.255.255.255 [ 383.203406][ T7732] tipc: Enabled bearer , priority 10 [ 383.210117][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 383.252301][ T7735] EXT4-fs: Ignoring removed oldalloc option [ 383.554485][ T7735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 384.112984][ T7735] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.489270][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 385.486585][ T7768] tipc: Enabled bearer , priority 0 [ 385.527626][ T7768] tipc: Resetting bearer [ 385.705139][ T7762] tipc: Disabling bearer [ 385.821980][ T7774] netlink: 32 bytes leftover after parsing attributes in process `syz.6.755'. [ 385.903555][ T1043] block nbd6: Attempted send on invalid socket [ 385.909796][ T1043] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 385.941340][ T7774] efs: cannot read volume header [ 387.835590][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 389.009793][ T7812] loop6: detected capacity change from 0 to 1024 [ 389.155286][ T7812] EXT4-fs: Ignoring removed oldalloc option [ 389.186197][ T7819] siw: device registration error -23 [ 390.438483][ T7812] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 390.475279][ T7812] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.737153][ T6720] EXT4-fs (loop6): unmounting filesystem. [ 391.320817][ T7843] tipc: Enabled bearer , priority 0 [ 391.362664][ T7843] tipc: Resetting bearer [ 392.214944][ T7842] tipc: Disabling bearer [ 392.440935][ T7853] 9pnet_virtio: no channels available for device syz [ 392.570365][ T7853] loop5: detected capacity change from 0 to 7 [ 392.642422][ T7853] loop5: [POWERTEC] p1 p2 p3 [ 392.657156][ T7853] loop5: p1 size 8716288 extends beyond EOD, truncated [ 392.686937][ T7853] loop5: p2 start 1376256 is beyond EOD, truncated [ 392.746825][ T7853] loop5: p3 size 206372864 extends beyond EOD, truncated [ 392.956151][ T26] audit: type=1800 audit(1777999577.055:43): pid=7869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.777" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 393.123313][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 393.277499][ T6868] udevd[6868]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 393.720720][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 393.739342][ T6868] udevd[6868]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 394.135139][ T7887] siw: device registration error -23 [ 396.550578][ T7910] tipc: Enabled bearer , priority 0 [ 396.797407][ T7910] tipc: Resetting bearer [ 396.935438][ T7909] tipc: Disabling bearer [ 398.434142][ T26] audit: type=1800 audit(1777999584.536:44): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.791" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 403.905539][ T7977] tipc: Enabled bearer , priority 0 [ 403.950443][ T7977] tipc: Resetting bearer [ 404.019897][ T7976] tipc: Disabling bearer [ 404.391840][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 406.228035][ T8004] tipc: Resetting bearer [ 406.478069][ T8003] [U]  [ 406.538957][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 408.624751][ T8029] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 410.324582][ T8047] loop1: detected capacity change from 0 to 1024 [ 410.452169][ T8047] EXT4-fs: Ignoring removed oldalloc option [ 411.306459][ T8051] overlayfs: conflicting options: userxattr,metacopy=on [ 411.360509][ T8051] netlink: 40 bytes leftover after parsing attributes in process `syz.0.813'. [ 411.401294][ T8047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 411.421382][ T8047] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.456184][ T8051] syz.0.813 uses obsolete (PF_INET,SOCK_PACKET) [ 412.079041][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 419.802610][ T8102] loop1: detected capacity change from 0 to 1024 [ 419.812075][ T8102] EXT4-fs: Ignoring removed oldalloc option [ 420.478354][ T8102] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 420.541716][ T8102] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.424427][ T26] audit: type=1800 audit(1777999612.480:45): pid=8117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.829" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 421.502175][ T8118] hub 8-0:1.0: USB hub found [ 421.507170][ T8118] hub 8-0:1.0: 1 port detected [ 421.532771][ T8118] loop0: detected capacity change from 0 to 2048 [ 421.793599][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 421.951914][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 422.109932][ T8109] 0x0000fffffffd-0x00010000fffd : "" [ 422.346461][ T8118] loop0: p2 < > p4 [ 422.351936][ T8118] loop0: p4 size 262144 extends beyond EOD, truncated [ 422.389885][ T8109] mtd: partition "" is out of reach -- disabled [ 422.466509][ T3638] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.476345][ T8109] ftl_cs: FTL header not found. [ 422.501159][ T3638] Buffer I/O error on dev loop0, logical block 0, async page read [ 422.529076][ T3638] ldm_validate_partition_table(): Disk read failed. [ 422.558009][ T3638] Dev loop0: unable to read RDB block 0 [ 422.590325][ T3638] loop0: unable to read partition table [ 422.607808][ T3638] loop0: partition table beyond EOD, truncated [ 422.661742][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.832'. [ 422.713455][ T1043] block nbd4: Attempted send on invalid socket [ 422.719882][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.746622][ T8126] efs: cannot read volume header [ 422.755239][ T8120] udevd[8120]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 423.869408][ T8016] udevd[8016]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 426.145228][ T8154] loop5: detected capacity change from 0 to 1024 [ 426.180179][ T8154] EXT4-fs: Ignoring removed oldalloc option [ 426.261178][ T4317] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 426.273655][ T8154] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 426.286830][ T8154] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.481113][ T4317] usb 5-1: Using ep0 maxpacket: 32 [ 427.104104][ T4317] usb 5-1: config 0 has no interfaces? [ 427.114695][ T5077] EXT4-fs (loop5): unmounting filesystem. [ 427.175910][ T4317] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 427.218522][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.258876][ T4317] usb 5-1: Product: syz [ 427.277924][ T4317] usb 5-1: Manufacturer: syz [ 427.305803][ T4317] usb 5-1: SerialNumber: syz [ 427.318110][ T4317] usb 5-1: config 0 descriptor?? [ 428.447852][ T8174] hub 8-0:1.0: USB hub found [ 428.454135][ T8174] hub 8-0:1.0: 1 port detected [ 428.490903][ T8174] loop1: detected capacity change from 0 to 2048 [ 429.007768][ T5075] usb 5-1: USB disconnect, device number 3 [ 429.335768][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 429.384322][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 429.401753][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 429.409444][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 429.420573][ T8184] input: syz1 as /devices/virtual/input/input6 [ 429.441913][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 429.550382][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 429.586827][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 429.619283][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 430.322606][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 430.383355][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 430.453181][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 430.512476][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 430.571199][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 430.586150][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 430.617866][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 430.655124][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 430.675669][ T5075] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 430.715618][ T26] audit: type=1326 audit(1777999623.816:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.850" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3761f9cdd9 code=0x0 [ 430.717854][ T5075] hid-generic 0006:0008:0001.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 430.739076][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.069978][ T8199] loop4: detected capacity change from 0 to 1024 [ 431.106359][ T8199] EXT4-fs: Ignoring removed oldalloc option [ 431.209408][ T8199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 431.255667][ T8199] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.338041][ T8197] fido_id[8197]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 432.015903][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 432.192549][ T8214] device syzkaller0 left promiscuous mode [ 432.222923][ T8213] [U]  [ 433.042028][ T8226] siw: device registration error -23 [ 433.565089][ T8234] process 'syz.0.859' launched '/dev/fd/10' with NULL argv: empty string added [ 434.538484][ T8246] netlink: 'syz.1.862': attribute type 4 has an invalid length. [ 435.336304][ T8246] tipc: Enabling of bearer rejected, already enabled [ 435.711181][ T4970] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 436.638243][ T26] audit: type=1326 audit(1777999629.736:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.4.867" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc41e59cdd9 code=0x0 [ 436.771119][ T4970] usb 1-1: Using ep0 maxpacket: 32 [ 436.779120][ T4970] usb 1-1: config 0 has no interfaces? [ 436.798398][ T4970] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 436.828337][ T4970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.866716][ T4970] usb 1-1: Product: syz [ 436.879166][ T4970] usb 1-1: Manufacturer: syz [ 436.902792][ T4970] usb 1-1: SerialNumber: syz [ 436.992684][ T4970] usb 1-1: config 0 descriptor?? [ 437.924283][ T8267] [U]  [ 439.964829][ T4970] usb 1-1: USB disconnect, device number 7 [ 440.208102][ T8293] netlink: 'syz.1.877': attribute type 4 has an invalid length. [ 440.363877][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.370339][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.820193][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.827537][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.341294][ T8311] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 442.469826][ T8291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.538859][ T8311] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 442.564764][ T8311] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 442.580877][ T8311] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 442.602192][ T8291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.627074][ T8311] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 442.640030][ T8311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.654946][ T8311] usb 7-1: Product: syz [ 442.659301][ T8311] usb 7-1: Manufacturer: syz [ 442.669542][ T8311] usb 7-1: SerialNumber: syz [ 442.696921][ T8311] usb 7-1: config 0 descriptor?? [ 442.913593][ T8311] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 443.082699][ T8291] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.092140][ T8291] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.101635][ T8291] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.110647][ T8291] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.124684][ T5071] usb 7-1: USB disconnect, device number 3 [ 443.207432][ T8291] device bond1 left promiscuous mode [ 443.212897][ T8291] device vti0 left promiscuous mode [ 443.237097][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.878'. [ 443.248979][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.878'. [ 443.258094][ T8293] tipc: Enabling of bearer rejected, already enabled [ 443.588070][ T8334] 8021q: VLANs not supported on vcan0 [ 443.870241][ T8330] [U]  [ 444.001375][ T4318] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 444.211335][ T4318] usb 2-1: Using ep0 maxpacket: 32 [ 444.230277][ T4318] usb 2-1: config 0 has no interfaces? [ 444.268802][ T4318] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 444.341769][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.350357][ T4318] usb 2-1: Product: syz [ 444.355003][ T4318] usb 2-1: Manufacturer: syz [ 444.359790][ T4318] usb 2-1: SerialNumber: syz [ 444.424000][ T4318] usb 2-1: config 0 descriptor?? [ 445.386604][ T8349] hub 9-0:1.0: USB hub found [ 445.404443][ T8349] hub 9-0:1.0: 1 port detected [ 446.771216][ T4318] usb 2-1: USB disconnect, device number 3 [ 446.850862][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.892'. [ 447.187945][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.892'. [ 447.813379][ T8376] device syzkaller0 entered promiscuous mode [ 448.113229][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 448.151456][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 448.329728][ T8384] [U]  [ 448.498233][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.521204][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.559186][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.597360][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.628746][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.667153][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.675524][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.688254][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.699597][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.858445][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.868857][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.877307][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.885398][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.893691][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.901787][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.909620][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.918742][ T4965] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 448.935171][ T4965] hid-generic 0006:0008:0001.0004: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 449.092419][ T8403] fido_id[8403]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 449.212089][ T8404] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 449.272658][ T8406] overlayfs: conflicting options: userxattr,metacopy=on [ 449.480277][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.905'. [ 449.705099][ T8413] loop4: detected capacity change from 0 to 1024 [ 450.294707][ T8404] rdma_rxe: rxe_register_device failed with error -23 [ 450.302414][ T8404] rdma_rxe: failed to add wg2 [ 450.320810][ T8413] EXT4-fs: inline encryption not supported [ 450.462366][ T8413] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.907: lblock 2 mapped to illegal pblock 2 (length 1) [ 450.496435][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'. [ 450.530925][ T8413] EXT4-fs (loop4): Remounting filesystem read-only [ 450.551693][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 450.578433][ T8413] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 450.627651][ T8413] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.907: lblock 0 mapped to illegal pblock 48 (length 1) [ 450.687378][ T8413] EXT4-fs (loop4): Remounting filesystem read-only [ 450.711330][ T8413] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 450.802476][ T8413] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.907: Failed to acquire dquot type 0 [ 450.827360][ T8413] EXT4-fs (loop4): Remounting filesystem read-only [ 450.845079][ T8413] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 450.859378][ T8413] EXT4-fs (loop4): Remounting filesystem read-only [ 450.867714][ T8413] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.907: mark_inode_dirty error [ 450.887214][ T8413] EXT4-fs (loop4): Remounting filesystem read-only [ 450.915660][ T8413] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 450.945078][ T8413] EXT4-fs (loop4): 1 orphan inode deleted [ 450.968124][ T8413] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 450.968653][ T4475] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 450.995416][ T8421] 9pnet_virtio: no channels available for device syz [ 451.025139][ T4475] EXT4-fs (loop4): Remounting filesystem read-only [ 451.037997][ T4475] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 451.190756][ T4475] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:15: Failed to release dquot type 0 [ 451.217268][ T4475] EXT4-fs (loop4): Remounting filesystem read-only [ 451.374633][ T8425] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 16: comm syz.4.907: lblock 0 mapped to illegal pblock 16 (length 1) [ 451.407507][ T8425] EXT4-fs (loop4): Remounting filesystem read-only [ 451.425601][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 451.461403][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 452.827506][ T8430] [U]  [ 452.874322][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 452.887432][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 452.909092][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 452.927505][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 452.937614][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 452.965671][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 452.983740][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 453.004837][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 453.028515][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 453.046764][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 453.066328][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 453.089085][ T8446] netlink: 68 bytes leftover after parsing attributes in process `syz.5.918'. [ 453.098784][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 453.120505][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 453.154177][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 453.181533][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 453.209653][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 453.231485][ T4318] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 453.247058][ T4318] hid-generic 0006:0008:0001.0005: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 455.198810][ T8450] fido_id[8450]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 455.485633][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.922'. [ 455.533761][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.922'. [ 455.778611][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 455.818025][ T4282] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 455.928223][ T4282] EXT4-fs (loop4): Remounting filesystem read-only [ 455.945696][ T4282] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 455.957857][ T4282] EXT4-fs (loop4): Remounting filesystem read-only [ 455.967978][ T4282] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 455.992466][ T4282] EXT4-fs (loop4): Remounting filesystem read-only [ 456.118072][ T8467] [U]  [ 456.307168][ T8476] netlink: 68 bytes leftover after parsing attributes in process `syz.6.929'. [ 457.651092][ T5073] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 458.541144][ T5073] usb 1-1: Using ep0 maxpacket: 32 [ 458.548398][ T5073] usb 1-1: config 0 has no interfaces? [ 458.611731][ T5073] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 458.651206][ T5073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.679845][ T5073] usb 1-1: Product: syz [ 458.691711][ T5073] usb 1-1: Manufacturer: syz [ 458.696488][ T5073] usb 1-1: SerialNumber: syz [ 458.731840][ T5073] usb 1-1: config 0 descriptor?? [ 458.827171][ T26] audit: type=1800 audit(1777999651.926:48): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.935" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 459.159741][ T8499] futex_wake_op: syz.0.930 tries to shift op by 144; fix this program [ 460.086216][ T8509] loop6: detected capacity change from 0 to 1024 [ 460.087495][ T8504] loop1: detected capacity change from 0 to 2048 [ 460.124524][ T8509] EXT4-fs: inline encryption not supported [ 460.213754][ T8504] loop1: p2 < > p4 [ 460.229897][ T8509] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 2: comm syz.6.938: lblock 2 mapped to illegal pblock 2 (length 1) [ 460.327177][ T8509] EXT4-fs (loop6): Remounting filesystem read-only [ 460.345898][ T8504] loop1: p4 size 262144 extends beyond EOD, truncated [ 460.362858][ T8509] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 460.387449][ T8509] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 48: comm syz.6.938: lblock 0 mapped to illegal pblock 48 (length 1) [ 460.458152][ T8509] EXT4-fs (loop6): Remounting filesystem read-only [ 460.501173][ T8509] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 460.569728][ T8509] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.938: Failed to acquire dquot type 0 [ 460.649846][ T8509] EXT4-fs (loop6): Remounting filesystem read-only [ 460.674807][ T8509] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 460.708514][ T8509] EXT4-fs (loop6): Remounting filesystem read-only [ 460.735004][ T8509] EXT4-fs error (device loop6): ext4_evict_inode:281: inode #11: comm syz.6.938: mark_inode_dirty error [ 460.787894][ T8509] EXT4-fs (loop6): Remounting filesystem read-only [ 460.837296][ T8509] EXT4-fs warning (device loop6): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 460.919915][ T8509] EXT4-fs (loop6): 1 orphan inode deleted [ 460.931394][ T4371] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 460.962409][ T8509] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 460.986733][ T4371] EXT4-fs (loop6): Remounting filesystem read-only [ 461.007248][ T4371] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 461.145475][ T8509] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #2: block 16: comm syz.6.938: lblock 0 mapped to illegal pblock 16 (length 1) [ 461.161824][ T8509] EXT4-fs (loop6): Remounting filesystem read-only [ 461.260432][ T4371] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 0 [ 461.290757][ T4371] EXT4-fs (loop6): Remounting filesystem read-only [ 461.322857][ T6720] EXT4-fs (loop6): unmounting filesystem. [ 461.328916][ T6720] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 461.337508][ T8520] netlink: 68 bytes leftover after parsing attributes in process `syz.4.941'. [ 461.384769][ T5073] usb 1-1: USB disconnect, device number 8 [ 461.442302][ T6720] EXT4-fs (loop6): Remounting filesystem read-only [ 461.475650][ T6720] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 461.532129][ T6720] EXT4-fs (loop6): Remounting filesystem read-only [ 461.557073][ T6720] EXT4-fs error (device loop6): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 461.711907][ T6720] EXT4-fs (loop6): Remounting filesystem read-only [ 462.048354][ T8529] [U]  [ 466.648382][ T8548] hub 8-0:1.0: USB hub found [ 466.653606][ T8548] hub 8-0:1.0: 1 port detected [ 466.670885][ T8548] loop6: detected capacity change from 0 to 2048 [ 466.706074][ T8547] loop1: detected capacity change from 0 to 1024 [ 466.762428][ T8547] EXT4-fs: inline encryption not supported [ 466.855031][ T8547] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.950: lblock 2 mapped to illegal pblock 2 (length 1) [ 466.905026][ T8548] loop6: p2 < > p4 [ 466.910019][ T8548] loop6: p4 size 262144 extends beyond EOD, truncated [ 466.988452][ T8547] EXT4-fs (loop1): Remounting filesystem read-only [ 467.133937][ T8547] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 467.138027][ T8557] netlink: 68 bytes leftover after parsing attributes in process `syz.4.953'. [ 467.320513][ T8555] hub 9-0:1.0: USB hub found [ 467.376322][ T8547] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.950: lblock 0 mapped to illegal pblock 48 (length 1) [ 467.471182][ T8547] EXT4-fs (loop1): Remounting filesystem read-only [ 467.477865][ T8547] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 467.502394][ T8555] hub 9-0:1.0: 1 port detected [ 467.538203][ T8547] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.950: Failed to acquire dquot type 0 [ 467.578801][ T8547] EXT4-fs (loop1): Remounting filesystem read-only [ 467.593531][ T8547] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 467.644002][ T8547] EXT4-fs (loop1): Remounting filesystem read-only [ 467.669576][ T8547] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.950: mark_inode_dirty error [ 467.728276][ T8547] EXT4-fs (loop1): Remounting filesystem read-only [ 467.755053][ T8547] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 467.785336][ T8016] udevd[8016]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 467.803746][ T8120] udevd[8120]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 467.830697][ T8547] EXT4-fs (loop1): 1 orphan inode deleted [ 467.841408][ T4475] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 467.877352][ T8547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 467.904736][ T4475] EXT4-fs (loop1): Remounting filesystem read-only [ 467.928724][ T4475] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 467.971613][ T4475] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:15: Failed to release dquot type 0 [ 468.104234][ T8547] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 16: comm syz.1.950: lblock 0 mapped to illegal pblock 16 (length 1) [ 468.119231][ T8547] EXT4-fs (loop1): Remounting filesystem read-only [ 468.250512][ T4475] EXT4-fs (loop1): Remounting filesystem read-only [ 468.318594][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 468.328213][ T4275] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 468.360909][ T8561] [U]  [ 468.382426][ T4275] EXT4-fs (loop1): Remounting filesystem read-only [ 468.401961][ T4275] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 468.432874][ T4275] EXT4-fs (loop1): Remounting filesystem read-only [ 468.453746][ T4275] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 468.584553][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 468.746250][ T4275] EXT4-fs (loop1): Remounting filesystem read-only [ 468.906091][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 469.045339][ T8586] loop1: detected capacity change from 0 to 2048 [ 471.143372][ T8605] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 471.412591][ T8607] netlink: 68 bytes leftover after parsing attributes in process `syz.0.965'. [ 472.203728][ T8615] loop4: detected capacity change from 0 to 1024 [ 472.230057][ T8615] EXT4-fs: inline encryption not supported [ 472.290662][ T8615] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.968: lblock 2 mapped to illegal pblock 2 (length 1) [ 472.330032][ T8615] EXT4-fs (loop4): Remounting filesystem read-only [ 472.350979][ T8615] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 472.361200][ T8615] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.968: lblock 0 mapped to illegal pblock 48 (length 1) [ 472.432007][ T8615] EXT4-fs (loop4): Remounting filesystem read-only [ 472.439907][ T8615] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 472.478272][ T8615] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.968: Failed to acquire dquot type 0 [ 472.550310][ T8615] EXT4-fs (loop4): Remounting filesystem read-only [ 472.601318][ T8615] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 472.658757][ T8615] EXT4-fs (loop4): Remounting filesystem read-only [ 472.700988][ T8615] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.968: mark_inode_dirty error [ 472.730719][ T8618] [U]  [ 472.743103][ T8615] EXT4-fs (loop4): Remounting filesystem read-only [ 472.796558][ T8615] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 472.852561][ T8615] EXT4-fs (loop4): 1 orphan inode deleted [ 472.861147][ T8615] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 473.078313][ T8615] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 16: comm syz.4.968: lblock 0 mapped to illegal pblock 16 (length 1) [ 473.103068][ T8615] EXT4-fs (loop4): Remounting filesystem read-only [ 473.337295][ T4475] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 474.011439][ T4475] EXT4-fs (loop4): Remounting filesystem read-only [ 474.018109][ T4475] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 474.090276][ T4475] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:15: Failed to release dquot type 0 [ 474.120290][ T4475] EXT4-fs (loop4): Remounting filesystem read-only [ 474.130294][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 474.137617][ T4282] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 474.155298][ T4282] EXT4-fs (loop4): Remounting filesystem read-only [ 474.162401][ T4282] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 474.197607][ T4282] EXT4-fs (loop4): Remounting filesystem read-only [ 474.211327][ T4282] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 474.225674][ T4282] EXT4-fs (loop4): Remounting filesystem read-only [ 474.351780][ T8636] loop0: detected capacity change from 0 to 2048 [ 474.407989][ T8636] loop0: p2 < > p4 [ 474.413814][ T8636] loop0: p4 size 262144 extends beyond EOD, truncated [ 475.614409][ T8656] siw: device registration error -23 [ 475.646315][ T8654] netlink: 68 bytes leftover after parsing attributes in process `syz.1.978'. [ 477.882832][ T26] audit: type=1326 audit(1777999672.980:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.5.982" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56f599cdd9 code=0x0 [ 478.608902][ T8673] dlm: Unknown command passed to DLM device : 3 [ 478.608902][ T8673] [ 478.773609][ T8674] random: crng reseeded on system resumption [ 480.699706][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.987'. [ 480.718864][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.987'. [ 481.921362][ T8689] netlink: 36 bytes leftover after parsing attributes in process `syz.6.989'. [ 482.246646][ T8696] netlink: 68 bytes leftover after parsing attributes in process `syz.6.992'. [ 482.608891][ T8702] loop6: detected capacity change from 0 to 16 [ 482.639717][ T8702] erofs: Unknown parameter './cgroup/syz1' [ 482.779164][ T8702] loop6: detected capacity change from 0 to 512 [ 482.828503][ T8702] EXT4-fs: Mount option(s) incompatible with ext3 [ 484.391628][ T8722] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1002'. [ 487.825933][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1011'. [ 487.913246][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1011'. [ 488.690440][ T8760] device syzkaller0 entered promiscuous mode [ 488.866515][ T8764] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 488.974986][ T8762] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1015'. [ 490.557129][ T8766] tty tty23: ldisc open failed (-12), clearing slot 22 [ 490.684561][ T8774] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1020'. [ 490.788464][ T8776] loop4: detected capacity change from 0 to 2048 [ 490.892948][ T8776] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 490.957614][ T8776] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.615054][ T8819] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1033'. [ 497.802900][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1040'. [ 497.902115][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1040'. [ 500.069963][ T8860] device syzkaller0 left promiscuous mode [ 500.092560][ T8857] [U]  [ 501.793400][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.799728][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.145960][ T8908] [U]  [ 506.362430][ T8911] loop6: detected capacity change from 0 to 1024 [ 506.436800][ T8911] EXT4-fs: Ignoring removed oldalloc option [ 506.635114][ T8911] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 506.651228][ T8911] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.800510][ T8933] netlink: 'syz.4.1069': attribute type 4 has an invalid length. [ 508.840193][ T8933] netlink: 'syz.4.1069': attribute type 4 has an invalid length. [ 508.958069][ T8935] loop0: detected capacity change from 0 to 2048 [ 509.108142][ T8935] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 509.218459][ T8935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 511.324478][ T6720] EXT4-fs (loop6): unmounting filesystem. [ 511.553358][ T8968] overlayfs: conflicting options: userxattr,metacopy=on [ 511.588307][ T8968] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1078'. [ 511.753817][ T8965] lo speed is unknown, defaulting to 1000 [ 512.065817][ T8973] loop6: detected capacity change from 0 to 512 [ 512.098140][ T8975] netlink: 'syz.0.1081': attribute type 4 has an invalid length. [ 512.157533][ T8977] netlink: 'syz.0.1081': attribute type 4 has an invalid length. [ 512.203417][ T8973] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 512.450540][ T8975] tipc: Enabling of bearer rejected, already enabled [ 514.389892][ T8986] [U]  [ 514.874483][ T9003] loop0: detected capacity change from 0 to 1024 [ 514.906811][ T9003] EXT4-fs: Ignoring removed oldalloc option [ 515.020088][ T9003] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 515.049300][ T9003] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.108604][ T9012] overlayfs: conflicting options: userxattr,metacopy=on [ 515.148411][ T9012] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1091'. [ 515.277837][ T9016] loop6: detected capacity change from 0 to 1024 [ 515.320087][ T9016] EXT4-fs: Ignoring removed oldalloc option [ 515.403268][ T9016] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 515.441271][ T5075] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 515.449631][ T9016] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.603214][ T6720] EXT4-fs (loop6): unmounting filesystem. [ 517.811251][ T5075] usb 2-1: Using ep0 maxpacket: 32 [ 517.830415][ T5075] usb 2-1: config 0 has no interfaces? [ 517.840412][ T5075] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 517.856052][ T5075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.910908][ T5075] usb 2-1: Product: syz [ 517.946979][ T5075] usb 2-1: Manufacturer: syz [ 518.009037][ T5075] usb 2-1: SerialNumber: syz [ 518.058813][ T5075] usb 2-1: config 0 descriptor?? [ 518.216388][ T9029] fuse: Bad value for 'fd' [ 518.220155][ T5075] usb 2-1: can't set config #0, error -71 [ 518.299757][ T5075] usb 2-1: USB disconnect, device number 4 [ 520.360429][ T9050] loop5: detected capacity change from 0 to 2048 [ 520.432565][ T9050] loop5: p2 < > p4 [ 520.441954][ T9052] rdma_rxe: rxe_register_device failed with error -23 [ 520.454154][ T9052] rdma_rxe: failed to add wg2 [ 520.469868][ T9050] loop5: p4 size 262144 extends beyond EOD, truncated [ 520.936480][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 521.133021][ T9056] loop1: detected capacity change from 0 to 1024 [ 521.179006][ T9056] EXT4-fs: Ignoring removed oldalloc option [ 521.351856][ T9056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 521.413388][ T9056] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.713418][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 521.995262][ T9066] overlayfs: conflicting options: userxattr,metacopy=on [ 522.104493][ T9066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1107'. [ 522.471127][ T5071] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 522.656997][ T5071] usb 2-1: Using ep0 maxpacket: 32 [ 522.677490][ T5071] usb 2-1: config 0 has no interfaces? [ 522.713704][ T5071] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 522.747335][ T5071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.791537][ T5071] usb 2-1: Product: syz [ 522.810370][ T5071] usb 2-1: Manufacturer: syz [ 522.825441][ T5071] usb 2-1: SerialNumber: syz [ 522.902083][ T5071] usb 2-1: config 0 descriptor?? [ 523.015447][ T9084] loop5: detected capacity change from 0 to 8192 [ 523.185957][ T9085] futex_wake_op: syz.1.1108 tries to shift op by 144; fix this program [ 523.916918][ T9092] loop6: detected capacity change from 0 to 1024 [ 523.956894][ T9092] EXT4-fs: Ignoring removed oldalloc option [ 524.058250][ T9092] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 524.081404][ T9092] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.101106][ T4965] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 524.293585][ T4965] usb 1-1: unable to get BOS descriptor or descriptor too short [ 524.316221][ T4965] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 524.349290][ T4965] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 524.371081][ T9105] loop5: detected capacity change from 0 to 512 [ 524.377582][ T4965] usb 1-1: config 63 has no interface number 0 [ 524.397329][ T4965] usb 1-1: config 63 interface 66 has no altsetting 0 [ 524.416252][ T4965] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 524.444825][ T4965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.469518][ T4965] usb 1-1: Product: syz [ 524.477152][ T9105] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 524.487148][ T9105] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 524.504269][ T4965] usb 1-1: Manufacturer: syz [ 524.509021][ T4965] usb 1-1: SerialNumber: syz [ 524.648874][ T5077] EXT4-fs (loop5): unmounting filesystem. [ 524.971465][ T4965] usb 1-1: Found UVC 0.07 device syz (174f:8acf) [ 524.978156][ T4965] usb 1-1: No valid video chain found. [ 524.996001][ T4965] usb 1-1: USB disconnect, device number 9 [ 525.095588][ T9114] overlayfs: conflicting options: userxattr,metacopy=on [ 525.178634][ T6720] EXT4-fs (loop6): unmounting filesystem. [ 525.388874][ T4965] usb 2-1: USB disconnect, device number 5 [ 525.592213][ T9121] loop6: detected capacity change from 0 to 2048 [ 525.712698][ T9121] loop6: p2 < > p4 [ 525.756640][ T9121] loop6: p4 size 262144 extends beyond EOD, truncated [ 526.789559][ T9135] rdma_rxe: rxe_register_device failed with error -23 [ 526.846194][ T9135] rdma_rxe: failed to add wg2 [ 527.267400][ T9145] loop5: detected capacity change from 0 to 1024 [ 527.281436][ T9147] loop1: detected capacity change from 0 to 512 [ 527.338510][ T9145] EXT4-fs: Ignoring removed oldalloc option [ 527.348054][ T9139] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 527.393516][ T9147] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 527.402238][ T9145] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 527.424976][ T9147] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 527.442537][ T9145] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.496294][ T9147] EXT4-fs (loop1): 1 truncate cleaned up [ 527.502086][ T9147] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 527.598452][ T9147] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 527.749374][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 527.919595][ T9154] tipc: Enabling of bearer rejected, already enabled [ 528.154583][ T9156] overlayfs: conflicting options: userxattr,metacopy=on [ 528.401304][ T9159] loop0: detected capacity change from 0 to 2048 [ 528.423042][ T9159] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 528.682792][ T9159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.908557][ T9166] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1137'. [ 529.112724][ T5077] EXT4-fs (loop5): unmounting filesystem. [ 529.191249][ T4966] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 529.552371][ T4966] usb 7-1: Using ep0 maxpacket: 32 [ 529.765107][ T4966] usb 7-1: config 0 has no interfaces? [ 529.801989][ T4966] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 529.834689][ T4966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.848219][ T9182] tipc: Enabling of bearer rejected, already enabled [ 529.856787][ T4966] usb 7-1: Product: syz [ 529.861673][ T4966] usb 7-1: Manufacturer: syz [ 529.867591][ T4966] usb 7-1: SerialNumber: syz [ 529.881609][ T4966] usb 7-1: config 0 descriptor?? [ 530.082569][ T9191] overlayfs: conflicting options: userxattr,metacopy=on [ 530.089884][ T9188] loop1: detected capacity change from 0 to 512 [ 530.100083][ T9188] EXT4-fs: Ignoring removed bh option [ 530.164995][ T9193] loop0: detected capacity change from 0 to 2048 [ 530.379295][ T9193] loop0: p2 < > p4 [ 530.384021][ T9193] loop0: p4 size 262144 extends beyond EOD, truncated [ 530.462116][ T9194] futex_wake_op: syz.6.1136 tries to shift op by 144; fix this program [ 531.027858][ T9188] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 531.127455][ T9188] EXT4-fs (loop1): 1 truncate cleaned up [ 531.222725][ T9188] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 531.336985][ T9188] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 531.456847][ T8016] udevd[8016]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 531.482671][ T8120] udevd[8120]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 531.520455][ T9184] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 531.783532][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 531.892310][ T9213] loop1: detected capacity change from 0 to 1024 [ 531.933483][ T9213] EXT4-fs: Ignoring removed oldalloc option [ 532.012691][ T5071] usb 7-1: USB disconnect, device number 4 [ 532.036144][ T9213] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 532.046731][ T9213] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.360600][ T9224] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 532.817579][ T9229] rdma_rxe: rxe_register_device failed with error -23 [ 532.857868][ T9229] rdma_rxe: failed to add wg2 [ 532.878031][ T9234] tipc: Enabled bearer , priority 0 [ 532.903278][ T9234] device syzkaller0 entered promiscuous mode [ 533.025001][ T9236] device syzkaller0 entered promiscuous mode [ 533.146210][ T9238] loop6: detected capacity change from 0 to 128 [ 534.414613][ T9200] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 534.630612][ T9247] loop6: detected capacity change from 0 to 2048 [ 534.897376][ T9247] loop6: p2 < > p4 [ 534.903083][ T9247] loop6: p4 size 262144 extends beyond EOD, truncated [ 535.132583][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 535.369303][ T9251] loop1: detected capacity change from 0 to 256 [ 535.684377][ T8140] udevd[8140]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 535.740963][ T8016] udevd[8016]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 535.859485][ T8140] udevd[8140]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 535.864176][ T8016] udevd[8016]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 537.059397][ T9265] loop5: detected capacity change from 0 to 512 [ 537.862510][ T9265] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 538.159054][ T9265] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 538.492938][ T9265] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.731707][ T9265] EXT4-fs error (device loop5): ext4_validate_inode_bitmap:106: comm syz.5.1168: Corrupt inode bitmap - block_group = 0, inode_bitmap = 18 [ 538.789508][ T8120] udevd[8120]: incorrect ext4 checksum on /dev/loop5 [ 538.829288][ T9265] EXT4-fs (loop5): Remounting filesystem read-only [ 538.850185][ T9282] loop0: detected capacity change from 0 to 128 [ 538.872770][ T9282] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 538.939260][ T9282] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 538.941180][ T5077] EXT4-fs (loop5): unmounting filesystem. [ 539.353300][ T4482] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 539.521145][ T4966] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 540.131069][ T4966] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 991 [ 540.168729][ T4966] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 540.192096][ T4966] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 540.249322][ T4966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.281069][ T4966] usb 6-1: Product: syz [ 540.301944][ T4966] usb 6-1: Manufacturer: х [ 540.306532][ T4966] usb 6-1: SerialNumber: syz [ 540.536738][ T4966] cdc_ncm 6-1:1.0: bind() failure [ 540.588946][ T4966] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 540.619962][ T4966] cdc_ncm 6-1:1.1: bind() failure [ 540.683408][ T4966] usb 6-1: USB disconnect, device number 3 [ 541.032409][ T9305] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 541.198568][ T9307] netlink: 'syz.0.1181': attribute type 4 has an invalid length. [ 541.218489][ T9307] netlink: 'syz.0.1181': attribute type 4 has an invalid length. [ 541.254027][ T9307] tipc: Enabling of bearer rejected, already enabled [ 541.345980][ T9309] loop5: detected capacity change from 0 to 1024 [ 541.380230][ T9309] EXT4-fs: inline encryption not supported [ 541.419322][ T9309] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.1182: lblock 2 mapped to illegal pblock 2 (length 1) [ 541.442124][ T9309] EXT4-fs (loop5): Remounting filesystem read-only [ 541.461617][ T9309] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 541.485668][ T9309] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.1182: lblock 0 mapped to illegal pblock 48 (length 1) [ 541.531440][ T9309] EXT4-fs (loop5): Remounting filesystem read-only [ 541.539721][ T9309] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 541.601530][ T9309] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1182: Failed to acquire dquot type 0 [ 541.623139][ T9309] EXT4-fs (loop5): Remounting filesystem read-only [ 541.629970][ T9309] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 541.658199][ T9309] EXT4-fs (loop5): Remounting filesystem read-only [ 541.666664][ T9309] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.1182: mark_inode_dirty error [ 541.680149][ T9309] EXT4-fs (loop5): Remounting filesystem read-only [ 541.688019][ T9309] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 541.718937][ T9309] EXT4-fs (loop5): 1 orphan inode deleted [ 541.821380][ T9309] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 541.834889][ T4502] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 542.115727][ T9320] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 16: comm syz.5.1182: lblock 0 mapped to illegal pblock 16 (length 1) [ 542.550380][ T9320] EXT4-fs (loop5): Remounting filesystem read-only [ 542.641930][ T4502] EXT4-fs (loop5): Remounting filesystem read-only [ 542.648613][ T4502] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 542.901098][ T4502] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:26: Failed to release dquot type 0 [ 542.913465][ T4502] EXT4-fs (loop5): Remounting filesystem read-only [ 542.923409][ T5077] EXT4-fs (loop5): unmounting filesystem. [ 542.929569][ T5077] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 542.951314][ T5077] EXT4-fs (loop5): Remounting filesystem read-only [ 542.957971][ T5077] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 542.968162][ T5077] EXT4-fs (loop5): Remounting filesystem read-only [ 542.975200][ T5077] EXT4-fs error (device loop5): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 543.013018][ T5077] EXT4-fs (loop5): Remounting filesystem read-only [ 543.118825][ T9326] loop1: detected capacity change from 0 to 256 [ 543.218211][ T9328] fuse: Bad value for 'fd' [ 543.983845][ T9341] loop1: detected capacity change from 0 to 512 [ 544.065030][ T9347] hub 8-0:1.0: USB hub found [ 544.071115][ T9347] hub 8-0:1.0: 1 port detected [ 544.098588][ T9347] loop0: detected capacity change from 0 to 2048 [ 544.902604][ T9341] EXT4-fs (loop1): 1 truncate cleaned up [ 544.951322][ T9341] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 545.001307][ T9341] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 545.171326][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 546.051105][ T5075] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 546.080815][ T9367] loop6: detected capacity change from 0 to 128 [ 546.146395][ T9367] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 546.173428][ T9367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.241167][ T5075] usb 1-1: Using ep0 maxpacket: 16 [ 546.252811][ T5075] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 546.299942][ T5075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.347718][ T5075] usb 1-1: Product: syz [ 546.367984][ T5075] usb 1-1: Manufacturer: syz [ 546.392925][ T5075] usb 1-1: SerialNumber: syz [ 546.419522][ T5075] usb 1-1: config 0 descriptor?? [ 546.450902][ T5075] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 546.528429][ T5075] usb 1-1: Detected FT232H [ 546.857041][ T5075] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 546.875230][ T5075] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 546.909204][ T5075] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 546.928658][ T9374] loop6: detected capacity change from 0 to 1024 [ 546.990528][ T5075] usb 1-1: USB disconnect, device number 10 [ 547.077897][ T5075] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 547.093640][ T9375] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 547.126098][ T5075] ftdi_sio 1-1:0.0: device disconnected [ 547.136112][ T9374] hfsplus: invalid length 32517 has been corrected to 255 [ 547.374211][ T26] audit: type=1800 audit(1777999746.478:50): pid=9374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1204" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 547.494017][ T4371] hfsplus: b-tree write err: -5, ino 20 [ 551.209855][ T9411] loop0: detected capacity change from 0 to 128 [ 552.585923][ T9425] loop5: detected capacity change from 0 to 7 [ 552.652601][ T9425] support for the xor transformation has been removed. [ 552.759297][ T9421] hub 9-0:1.0: USB hub found [ 552.896459][ T9421] hub 9-0:1.0: 1 port detected [ 552.974636][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 554.083504][ T9446] loop5: detected capacity change from 0 to 512 [ 554.124351][ T9446] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 555.589815][ T9463] hub 8-0:1.0: USB hub found [ 555.599354][ T9466] loop6: detected capacity change from 0 to 256 [ 555.603656][ T9463] hub 8-0:1.0: 1 port detected [ 555.630690][ T9463] loop1: detected capacity change from 0 to 2048 [ 555.672359][ T9466] exfat: Deprecated parameter 'utf8' [ 555.677800][ T9466] exfat: Deprecated parameter 'utf8' [ 555.712931][ T9463] loop1: p2 < > p4 [ 555.777941][ T9463] loop1: p4 size 262144 extends beyond EOD, truncated [ 555.797414][ T9466] exFAT-fs (loop6): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119abd2) [ 555.811327][ T9466] exFAT-fs (loop6): invalid boot region [ 555.817106][ T9466] exFAT-fs (loop6): failed to recognize exfat type [ 556.041215][ T4965] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 556.206472][ T9476] tipc: Enabled bearer , priority 0 [ 556.261308][ T4965] usb 6-1: Using ep0 maxpacket: 32 [ 556.281365][ T4965] usb 6-1: config 0 has no interfaces? [ 556.289281][ T4965] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 556.327182][ T4965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.343941][ T4965] usb 6-1: Product: syz [ 556.356502][ T4965] usb 6-1: Manufacturer: syz [ 556.367244][ T4965] usb 6-1: SerialNumber: syz [ 556.406553][ T4965] usb 6-1: config 0 descriptor?? [ 556.844959][ T9468] futex_wake_op: syz.5.1235 tries to shift op by 144; fix this program [ 557.633929][ T9491] loop6: detected capacity change from 0 to 8192 [ 559.007396][ T4965] usb 6-1: USB disconnect, device number 4 [ 559.023415][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'. [ 559.182455][ T9506] netlink: 'syz.4.1248': attribute type 4 has an invalid length. [ 559.222625][ T9506] netlink: 'syz.4.1248': attribute type 4 has an invalid length. [ 559.365237][ T9506] tipc: Enabling of bearer rejected, already enabled [ 559.388878][ T9511] overlayfs: conflicting options: userxattr,metacopy=on [ 559.653986][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1253'. [ 559.685215][ T9525] fuse: Bad value for 'group_id' [ 560.065707][ T9538] hub 8-0:1.0: USB hub found [ 560.092558][ T9538] hub 8-0:1.0: 1 port detected [ 560.145797][ T9538] loop1: detected capacity change from 0 to 2048 [ 560.159449][ T9532] loop0: detected capacity change from 0 to 8192 [ 560.488960][ T9538] loop1: p2 < > p4 [ 560.531624][ T4750] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 560.545617][ T9538] loop1: p4 size 262144 extends beyond EOD, truncated [ 560.640946][ T9546] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1260'. [ 560.732993][ T4750] usb 6-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 560.753396][ T4750] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 560.798632][ T4750] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 560.843899][ T4750] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 560.871245][ T4750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.895280][ T4750] usb 6-1: Product: syz [ 560.903804][ T4750] usb 6-1: Manufacturer: syz [ 560.912839][ T4750] usb 6-1: SerialNumber: syz [ 560.939339][ T4750] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 560.947821][ T4750] cdc_ncm 6-1:1.0: bind() failure [ 561.143779][ T4750] usb 6-1: USB disconnect, device number 5 [ 561.182243][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1264'. [ 561.323194][ T5075] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 561.626757][ T5075] usb 1-1: Using ep0 maxpacket: 32 [ 561.635658][ T5075] usb 1-1: config 0 has no interfaces? [ 561.656343][ T5075] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 561.696286][ T5075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.711322][ T5075] usb 1-1: Product: syz [ 561.715844][ T5075] usb 1-1: Manufacturer: syz [ 561.720547][ T5075] usb 1-1: SerialNumber: syz [ 561.746037][ T5075] usb 1-1: config 0 descriptor?? [ 561.774341][ T9560] loop6: detected capacity change from 0 to 128 [ 561.819583][ T9560] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 561.886412][ T9560] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 561.902597][ T9560] ext2 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.973352][ T9550] futex_wake_op: syz.0.1261 tries to shift op by 144; fix this program [ 562.169054][ T6720] EXT4-fs (loop6): unmounting filesystem. [ 562.189375][ T9572] loop1: detected capacity change from 0 to 1024 [ 562.233213][ T9572] EXT4-fs: Ignoring removed oldalloc option [ 562.299714][ T9572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 562.416436][ T9572] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.598787][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1270'. [ 563.011571][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 563.067016][ T9588] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1272'. [ 563.233869][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.240430][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.367890][ T9595] loop5: detected capacity change from 0 to 512 [ 563.412088][ T9595] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 564.493301][ T4959] usb 1-1: USB disconnect, device number 11 [ 565.241144][ T9616] loop6: detected capacity change from 0 to 1024 [ 565.258352][ T9619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1284'. [ 565.262057][ T9616] EXT4-fs: Ignoring removed oldalloc option [ 565.772413][ T9616] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 565.782092][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.789351][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.887316][ T9616] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.357546][ T6720] EXT4-fs (loop6): unmounting filesystem. [ 567.701095][ T4965] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 567.865087][ T9647] siw: device registration error -23 [ 567.901436][ T4965] usb 1-1: Using ep0 maxpacket: 32 [ 568.401673][ T4965] usb 1-1: config 0 has no interfaces? [ 568.468650][ T4965] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 568.535882][ T4965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.583310][ T4965] usb 1-1: Product: syz [ 568.614389][ T4965] usb 1-1: Manufacturer: syz [ 568.640760][ T4965] usb 1-1: SerialNumber: syz [ 568.676944][ T4965] usb 1-1: config 0 descriptor?? [ 568.909310][ T9641] futex_wake_op: syz.0.1290 tries to shift op by 144; fix this program [ 568.979865][ T9655] loop6: detected capacity change from 0 to 512 [ 568.993559][ T9655] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 569.200928][ T9601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.232172][ T9601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.517188][ T9601] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.525884][ T9601] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.534864][ T9601] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.543716][ T9601] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.564240][ T9601] device syzkaller0 left promiscuous mode [ 569.587926][ T9601] device hsr1 left promiscuous mode [ 569.603493][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1287'. [ 569.605986][ T5071] lo speed is unknown, defaulting to 1000 [ 571.082475][ T4750] usb 1-1: USB disconnect, device number 12 [ 571.126005][ T9674] loop6: detected capacity change from 0 to 1024 [ 571.171713][ T9674] EXT4-fs: Ignoring removed oldalloc option [ 571.243278][ T9674] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 571.254547][ T9674] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.759196][ T9691] siw: device registration error -23 [ 572.114744][ T6720] EXT4-fs (loop6): unmounting filesystem. [ 572.178333][ T9697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1303'. [ 572.348880][ T9687] hub 9-0:1.0: USB hub found [ 572.404653][ T9687] hub 9-0:1.0: 1 port detected [ 573.225537][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.233089][ T9701] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.812882][ T9717] loop1: detected capacity change from 0 to 512 [ 573.828655][ T9717] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 574.134714][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.153820][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.341218][ T4959] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 574.534187][ T9701] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.543694][ T4959] usb 6-1: Using ep0 maxpacket: 32 [ 574.554762][ T4959] usb 6-1: unable to get BOS descriptor or descriptor too short [ 574.562726][ T9701] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.572668][ T9701] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.582420][ T9701] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.582823][ T4959] usb 6-1: config 1 has an invalid descriptor of length 91, skipping remainder of the config [ 574.602603][ T4959] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.642758][ T4959] usb 6-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 574.661851][ T4959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.672113][ T4959] usb 6-1: Product: syz [ 574.676326][ T4959] usb 6-1: Manufacturer: syz [ 574.688648][ T4959] usb 6-1: SerialNumber: syz [ 574.771210][ T9701] device syzkaller0 left promiscuous mode [ 574.784876][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 574.839544][ T9726] device syzkaller0 entered promiscuous mode [ 574.962540][ T4959] usb 6-1: 0:1 : does not exist [ 574.991916][ T4959] usb 6-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 575.393257][ T4959] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 575.411408][ T4959] usb 6-1: USB disconnect, device number 6 [ 575.664552][ T8120] udevd[8120]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.857106][ T9750] siw: device registration error -23 [ 576.816865][ T9757] loop0: detected capacity change from 0 to 512 [ 576.819749][ T9759] loop6: detected capacity change from 0 to 256 [ 576.881579][ T9759] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 576.924895][ T9761] device syzkaller0 left promiscuous mode [ 576.941164][ T9757] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 577.108630][ T26] audit: type=1800 audit(1777999777.207:51): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1317" name="file1" dev="loop6" ino=1048612 res=0 errno=0 [ 577.237829][ T26] audit: type=1800 audit(1777999777.247:52): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1317" name="file1" dev="loop6" ino=1048612 res=0 errno=0 [ 577.246326][ T9764] FAT-fs (loop6): error, invalid FAT chain (i_pos 196, last_block 8200) [ 577.402371][ T9764] FAT-fs (loop6): Filesystem has been set read-only [ 577.680439][ T9770] device syzkaller0 entered promiscuous mode [ 577.790764][ T9776] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 578.210226][ T9784] futex_wake_op: syz.1.1326 tries to shift op by 32; fix this program [ 578.298988][ T9787] loop6: detected capacity change from 0 to 1024 [ 578.326881][ T9787] EXT4-fs: Ignoring removed oldalloc option [ 578.456253][ T9787] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 578.518866][ T9787] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.903422][ T9795] 9pnet_virtio: no channels available for device syz [ 578.915840][ T9795] loop5: detected capacity change from 0 to 7 [ 578.923071][ T9795] Dev loop5: unable to read RDB block 7 [ 578.928680][ T9795] loop5: AHDI p1 p2 p3 [ 578.933781][ T9795] loop5: partition table partially beyond EOD, truncated [ 578.942413][ T9795] loop5: p1 start 1601398130 is beyond EOD, truncated [ 578.949391][ T9795] loop5: p2 start 1702059890 is beyond EOD, truncated [ 578.987499][ T3638] Dev loop5: unable to read RDB block 7 [ 579.080754][ T6720] EXT4-fs (loop6): unmounting filesystem. [ 579.091168][ T3638] loop5: AHDI p1 p2 p3 [ 579.181086][ T3638] loop5: partition table partially beyond EOD, truncated [ 579.218307][ T3638] loop5: p1 start 1601398130 is beyond EOD, truncated [ 579.234431][ T3638] loop5: p2 start 1702059890 is beyond EOD, truncated [ 579.249164][ T9801] fuse: Unknown parameter 'grou00000000000000000000' [ 580.437924][ T9812] device syzkaller0 entered promiscuous mode [ 580.583474][ T9817] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1338'. [ 580.632276][ T9817] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.639707][ T9817] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.919613][ T9830] fuse: Unknown parameter 'grou00000000000000000000' [ 581.583002][ T9832] loop1: detected capacity change from 0 to 1024 [ 581.590331][ T9832] EXT4-fs: Ignoring removed oldalloc option [ 581.726309][ T9832] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 581.763276][ T9832] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.932862][ T9843] 9pnet_virtio: no channels available for device syz [ 581.946387][ T9843] loop5: detected capacity change from 0 to 7 [ 581.955264][ T8016] Dev loop5: unable to read RDB block 7 [ 581.961755][ T8016] loop5: AHDI p1 p2 p3 [ 581.966333][ T8016] loop5: partition table partially beyond EOD, truncated [ 581.975576][ T8016] loop5: p1 start 1601398130 is beyond EOD, truncated [ 581.983039][ T8016] loop5: p2 start 1702059890 is beyond EOD, truncated [ 581.990643][ T9843] Dev loop5: unable to read RDB block 7 [ 581.998040][ T9843] loop5: AHDI p1 p2 p3 [ 582.010458][ T9843] loop5: partition table partially beyond EOD, truncated [ 582.022268][ T9843] loop5: p1 start 1601398130 is beyond EOD, truncated [ 582.029544][ T9843] loop5: p2 start 1702059890 is beyond EOD, truncated [ 582.128187][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 582.280381][ T9850] device syzkaller0 left promiscuous mode [ 584.455998][ T9877] loop1: detected capacity change from 0 to 1024 [ 584.538571][ T9877] EXT4-fs: Ignoring removed oldalloc option [ 584.653206][ T9877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 584.671571][ T9877] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.332516][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 585.842815][ T9900] fuse: Bad value for 'fd' [ 585.980466][ T9904] 9pnet_virtio: no channels available for device syz [ 586.016583][ T9903] loop5: detected capacity change from 0 to 7 [ 586.043344][ T9903] loop5: [POWERTEC] p1 p2 p3 [ 586.056357][ T9903] loop5: p1 size 8716288 extends beyond EOD, truncated [ 586.131049][ T3653] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 586.259834][ T9903] loop5: p2 start 1376256 is beyond EOD, truncated [ 586.321339][ T9903] loop5: p3 size 206372864 extends beyond EOD, truncated [ 586.410417][ T3653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 586.423897][ T3653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 586.434985][ T3653] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 586.459300][ T3653] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 586.469431][ T3653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.481063][ T3653] usb 2-1: Product: syz [ 586.485370][ T3653] usb 2-1: Manufacturer: syz [ 586.492394][ T3653] usb 2-1: SerialNumber: syz [ 586.515516][ T3653] usb 2-1: config 0 descriptor?? [ 586.545947][ T3653] adutux 2-1:0.0: interrupt endpoints not found [ 586.798161][ T8016] udevd[8016]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 586.803902][ T8120] udevd[8120]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 587.726029][ T9920] loop5: detected capacity change from 0 to 256 [ 587.755546][ T9920] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 587.791198][ T9920] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 588.632069][ T4750] usb 2-1: USB disconnect, device number 6 [ 588.711743][ T9920] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 589.645960][ T9937] [ 589.648364][ T9937] ====================================================== [ 589.655485][ T9937] WARNING: possible circular locking dependency detected [ 589.662547][ T9937] syzkaller #0 Not tainted [ 589.666958][ T9937] ------------------------------------------------------ [ 589.673967][ T9937] syz.0.1374/9937 is trying to acquire lock: [ 589.679941][ T9937] ffff8880737e53d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 589.689961][ T9937] [ 589.689961][ T9937] but task is already holding lock: [ 589.697337][ T9937] ffff88807afa0f30 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 589.708250][ T9937] [ 589.708250][ T9937] which lock already depends on the new lock. [ 589.708250][ T9937] [ 589.718741][ T9937] [ 589.718741][ T9937] the existing dependency chain (in reverse order) is: [ 589.727768][ T9937] [ 589.727768][ T9937] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 589.736462][ T9937] down_write+0x36/0x60 [ 589.741158][ T9937] process_measurement+0x3a2/0x1c30 [ 589.746874][ T9937] ima_file_mmap+0x102/0x150 [ 589.752098][ T9937] __se_sys_remap_file_pages+0x559/0x7b0 [ 589.758365][ T9937] do_syscall_64+0x4c/0xa0 [ 589.763319][ T9937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.769764][ T9937] [ 589.769764][ T9937] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 589.777423][ T9937] __lock_acquire+0x2d07/0x7d10 [ 589.782821][ T9937] lock_acquire+0x1bb/0x4a0 [ 589.787856][ T9937] down_read_killable+0x4c/0x340 [ 589.793326][ T9937] mmap_read_lock_killable+0x1d/0x60 [ 589.799567][ T9937] lock_mm_and_find_vma+0x2b1/0x2f0 [ 589.805284][ T9937] do_user_addr_fault+0x2db/0xb10 [ 589.810828][ T9937] exc_page_fault+0x60/0x100 [ 589.815937][ T9937] asm_exc_page_fault+0x22/0x30 [ 589.821325][ T9937] fault_in_readable+0x13e/0x1f0 [ 589.826970][ T9937] fault_in_iov_iter_readable+0xbb/0x2e0 [ 589.833149][ T9937] generic_perform_write+0x1f1/0x5c0 [ 589.838963][ T9937] __generic_file_write_iter+0x148/0x2a0 [ 589.845118][ T9937] generic_file_write_iter+0xab/0x2e0 [ 589.851019][ T9937] vfs_write+0x4b1/0xa30 [ 589.855800][ T9937] ksys_write+0x14c/0x250 [ 589.860753][ T9937] do_syscall_64+0x4c/0xa0 [ 589.865721][ T9937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.872140][ T9937] [ 589.872140][ T9937] other info that might help us debug this: [ 589.872140][ T9937] [ 589.882364][ T9937] Possible unsafe locking scenario: [ 589.882364][ T9937] [ 589.889835][ T9937] CPU0 CPU1 [ 589.895203][ T9937] ---- ---- [ 589.900676][ T9937] lock(&sb->s_type->i_mutex_key#13); [ 589.906158][ T9937] lock(&mm->mmap_lock); [ 589.913101][ T9937] lock(&sb->s_type->i_mutex_key#13); [ 589.921186][ T9937] lock(&mm->mmap_lock); [ 589.925514][ T9937] [ 589.925514][ T9937] *** DEADLOCK *** [ 589.925514][ T9937] [ 589.933886][ T9937] 3 locks held by syz.0.1374/9937: [ 589.939013][ T9937] #0: ffff88807b706ae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 589.948241][ T9937] #1: ffff888074746460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 [ 589.957132][ T9937] #2: ffff88807afa0f30 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 589.968621][ T9937] [ 589.968621][ T9937] stack backtrace: [ 589.974513][ T9937] CPU: 1 PID: 9937 Comm: syz.0.1374 Not tainted syzkaller #0 [ 589.981942][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 589.991992][ T9937] Call Trace: [ 589.995269][ T9937] [ 589.998214][ T9937] dump_stack_lvl+0x188/0x24e [ 590.002921][ T9937] ? load_image+0x400/0x400 [ 590.007424][ T9937] ? show_regs_print_info+0x12/0x12 [ 590.012627][ T9937] ? print_circular_bug+0x12b/0x1a0 [ 590.018020][ T9937] check_noncircular+0x296/0x330 [ 590.022979][ T9937] ? add_chain_block+0x940/0x940 [ 590.028029][ T9937] ? lockdep_lock+0xf1/0x1f0 [ 590.032645][ T9937] ? _find_first_zero_bit+0xcf/0x100 [ 590.037955][ T9937] __lock_acquire+0x2d07/0x7d10 [ 590.042935][ T9937] ? verify_lock_unused+0x140/0x140 [ 590.048164][ T9937] ? cgroup_rstat_updated+0xd7/0x350 [ 590.053472][ T9937] ? verify_lock_unused+0x140/0x140 [ 590.058681][ T9937] ? verify_lock_unused+0x140/0x140 [ 590.063898][ T9937] ? mark_lock+0x94/0x320 [ 590.068233][ T9937] lock_acquire+0x1bb/0x4a0 [ 590.072756][ T9937] ? mmap_read_lock_killable+0x1d/0x60 [ 590.078255][ T9937] ? read_lock_is_recursive+0x10/0x10 [ 590.083723][ T9937] ? cmp_ex_search+0x1a/0x70 [ 590.088316][ T9937] ? bsearch+0x8a/0xb0 [ 590.092396][ T9937] ? fault_in_readable+0x13e/0x1f0 [ 590.097509][ T9937] ? search_extable+0x8c/0xd0 [ 590.102183][ T9937] ? trim_init_extable+0x3b0/0x3b0 [ 590.107287][ T9937] ? mmap_read_lock_killable+0x1d/0x60 [ 590.112744][ T9937] down_read_killable+0x4c/0x340 [ 590.117772][ T9937] ? mmap_read_lock_killable+0x1d/0x60 [ 590.123242][ T9937] mmap_read_lock_killable+0x1d/0x60 [ 590.128544][ T9937] lock_mm_and_find_vma+0x2b1/0x2f0 [ 590.133774][ T9937] do_user_addr_fault+0x2db/0xb10 [ 590.139001][ T9937] ? _raw_spin_unlock_irq+0x1f/0x40 [ 590.144215][ T9937] exc_page_fault+0x60/0x100 [ 590.148944][ T9937] asm_exc_page_fault+0x22/0x30 [ 590.154167][ T9937] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 590.159921][ T9937] Code: d8 57 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 b7 57 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 9a 57 [ 590.179801][ T9937] RSP: 0018:ffffc900038afab0 EFLAGS: 00050287 [ 590.185880][ T9937] RAX: ffffffff81be1d99 RBX: 0000000000001000 RCX: 0000000000080000 [ 590.193883][ T9937] RDX: ffffc9000f7cd000 RSI: 000000000003a02d RDI: 000000000003a02e [ 590.201866][ T9937] RBP: 0000000000000000 R08: ffff88801b359dc0 R09: 0000000000000002 [ 590.209854][ T9937] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000202000 [ 590.217835][ T9937] R13: 0000000000000000 R14: 0000200000200100 R15: 0000200000201000 [ 590.225807][ T9937] ? fault_in_readable+0x139/0x1f0 [ 590.230944][ T9937] fault_in_iov_iter_readable+0xbb/0x2e0 [ 590.236620][ T9937] generic_perform_write+0x1f1/0x5c0 [ 590.241926][ T9937] ? generic_file_direct_write+0x330/0x330 [ 590.247787][ T9937] ? __file_remove_privs+0x5f0/0x5f0 [ 590.253165][ T9937] ? rwsem_write_trylock+0x135/0x1c0 [ 590.258475][ T9937] ? clear_nonspinnable+0x60/0x60 [ 590.263603][ T9937] ? generic_write_checks_count+0x3d9/0x4c0 [ 590.269510][ T9937] __generic_file_write_iter+0x148/0x2a0 [ 590.275156][ T9937] generic_file_write_iter+0xab/0x2e0 [ 590.280641][ T9937] vfs_write+0x4b1/0xa30 [ 590.284891][ T9937] ? file_end_write+0x250/0x250 [ 590.289771][ T9937] ? __fget_files+0x43d/0x4b0 [ 590.294495][ T9937] ? __fdget_pos+0x2ae/0x360 [ 590.299098][ T9937] ? ksys_write+0x71/0x250 [ 590.303616][ T9937] ksys_write+0x14c/0x250 [ 590.307955][ T9937] ? __ia32_sys_read+0x80/0x80 [ 590.312734][ T9937] ? lockdep_hardirqs_on+0x94/0x140 [ 590.317972][ T9937] do_syscall_64+0x4c/0xa0 [ 590.322392][ T9937] ? clear_bhb_loop+0x60/0xb0 [ 590.327071][ T9937] ? clear_bhb_loop+0x60/0xb0 [ 590.331853][ T9937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.337802][ T9937] RIP: 0033:0x7f3761f9cdd9 [ 590.342226][ T9937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.361846][ T9937] RSP: 002b:00007f3762eb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 590.370273][ T9937] RAX: ffffffffffffffda RBX: 00007f3762216090 RCX: 00007f3761f9cdd9 [ 590.378255][ T9937] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000005 [ 590.386224][ T9937] RBP: 00007f3762032d69 R08: 0000000000000000 R09: 0000000000000000 [ 590.394194][ T9937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.402168][ T9937] R13: 00007f3762216128 R14: 00007f3762216090 R15: 00007ffdea645038 [ 590.410240][ T9937] [ 590.427538][ T9935] loop5: detected capacity change from 0 to 1024 [ 590.441314][ T9935] EXT4-fs: Ignoring removed oldalloc option [ 590.473766][ T9935] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 590.494576][ T9935] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.781864][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 590.905582][ T5077] EXT4-fs (loop5): unmounting filesystem.