last executing test programs: 10.197642053s ago: executing program 2 (id=528): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0xc4c85513, &(0x7f0000000040)={0xb}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0xc1105511, &(0x7f0000000040)) connect$can_bcm(r7, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00'/15, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000040000000000000000000000b8ee0816756b62187804752330b2b55830d7228ef1593c06"], 0x80}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040f0400001b04"], 0x7) 9.552463537s ago: executing program 3 (id=534): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1810714, &(0x7f00000003c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@jqfmt_vfsold}, {@grpid}, {@prjquota}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0xfffffffffffffff9}}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x48d, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x80000000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4f}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KDSKBENT(r6, 0x4b52, &(0x7f0000000000)) 8.562619062s ago: executing program 2 (id=536): socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x32315559}}) r1 = creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000200), 0xa) setxattr$security_ima(&(0x7f0000000240)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), &(0x7f0000000180)=ANY=[], 0x2, 0x0) r2 = open(&(0x7f0000000080)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000001140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xa}, "026bf0f266981f591ef1"}}, 0xd) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x0, {0x2, 0x530f, 0x1, 0xfffffffa}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) syz_open_pts(r3, 0x141601) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x180, 0x1}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0xdc, "c0546296a2765815054fb4ac67d9068a1edb23a1939ffb14ec9e69b9182a4ec73cfee80068a6a06a4821f5c55751358ca786b9f4973d9aa902a8c30d6b1228cb348a037d9023d1f7f9c9df68745436fe9f8cdae84498871e00b3e95d8d742d14b2b76186c89f371f6a949d5227b01e7ff2858b4bd4d23ec5651e67f0aeac1dff5bfb78848f42d37af65ce801f851eca26d16ceaee0c1d154d86bb7a0acd8f986aa36a76311c039322f084120c0ee0d31fa87f114a40d1ea2c0caaca2773cba99bffbbacd57eaa199e93cfe1b3e8175764e3ac5d86d46e3e2e0090d04"}, &(0x7f0000000440)=0x100) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) socket$inet_udplite(0x2, 0x2, 0x88) 8.540377544s ago: executing program 0 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x1) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000c00)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) writev(r3, &(0x7f0000000540)=[{&(0x7f00000000c0)='u', 0x1}], 0x1) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_SET_STATION(r5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000200)=0x10005, 0x4) r7 = accept4(r2, 0x0, 0x0, 0x0) close(r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r9, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xec}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x2020080) recvfrom$ax25(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 8.134654768s ago: executing program 0 (id=541): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000580)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000001b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES16=r0], 0xff, 0x2e7, &(0x7f0000000280)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000180)={0x201, 0xd000000, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll(&(0x7f0000000540)=[{r5}], 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000500)=0x401) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x1f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = mq_open(&(0x7f00000001c0)='.(:[}%^', 0x1, 0x70, 0x0) mq_timedsend(r6, 0x0, 0x5cd8, 0x0, &(0x7f0000008040)) read$dsp(r5, &(0x7f0000000200)=""/108, 0x6c) syz_mount_image$ext4(&(0x7f0000001140)='ext2\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f00000000c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@data_ordered}, {@prjquota}, {@noacl}]}, 0x1, 0x775, &(0x7f0000001180)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000580)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r8, 0x0, 0x1800, 0x10000) 7.590950514s ago: executing program 2 (id=543): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000040)={'virt_wifi0\x00', @random="000007000100"}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x7ffffffff002, 0x7ffffffff000, 0x0, &(0x7f0000000000/0x4000)=nil) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r5}, {r3, 0x200}], 0x2, &(0x7f0000000140)={r6, r7+10000000}, &(0x7f0000000240), 0x8) socket$inet_dccp(0x2, 0x6, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='f2fs_gc_begin\x00', r8}, 0x10) memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xb6\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0) r9 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QGROUP_LIMIT(r9, 0xc4009420, &(0x7f0000000040)) r10 = socket$netlink(0x10, 0x3, 0x1) sendmsg$SOCK_DESTROY(r10, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5400000015000100000000000000000023000000"], 0x14}}, 0x0) setreuid(0x0, 0xee01) r11 = getpid() sched_setaffinity(r11, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="79408ec3004c410b00012319c6a502980fd78906f311dda17577a450cc0b218d", 0x20}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="21dc6244dbe91a69cba300887c", 0xd}], 0x1}}], 0x1, 0x0) 7.461950555s ago: executing program 0 (id=545): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1a1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x22020400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x15, 0x0, "94ac873f1692ddbc702d69407eca10eedeb5dcd05446c2b07ec23159acd334e8058957bcee65a1721541ac7db2be2af67fd949859fc48a758e5d9ec2dc28f3fb330ea6b887a32239b1f039ba45bc1bc1"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3d, 0x0, "2e52f463273974700fa6345b251d8975a34ce626db167dbf6e168d9e7f0000000000000043ff6a8a6123980b1d34d6932fac4bcaeba676b4b24488db18f9f12d733e613a3a1ff56300110b87c85d9831"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x19, 0x0, "41d2989d48db1764d991250db913d6dfbb2f5caa40b6ed2b6456aa8bb8a90f0c731f71573c64d277eeebae965ed6036a31420eb51c739e71e500c814c07f5659e1e1721bccc9b4894588115461cf0776"}, 0xd8) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e8000000210001000000000000000000fc0100"/64, @ANYBLOB], 0xe8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x18}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="00000047226690f0b56611f3178aea9eb1fd0000000000b7080000000000007b8af8ff00000000bfa2000000000000070200cd3001b3bae0317d0008000000f38646b72700000000000085000000d90500000000000000000000efd081d46f71a93eec70dcf1578001000000f3e9ec2867903e73f721adf826aa210c28224fc705633d11aee9ee4e0ca0a815b1d8209355"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000280)="2209b886c0d562c87eedf80ed6302bdf3a11fe7c53f13a7454e74af43e3e811dfd6db89eb36b0b7c54cace31a6c89a8bac9395731ea90f08f9442ce6c0ddd9a88453864a7380c73a7ea77b3c", 0x0, &(0x7f0000000200), &(0x7f0000000080), 0xce, r4}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00'}, 0x10) mlockall(0x7) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d105012000090102"], 0x0) close_range(r7, 0xffffffffffffffff, 0x0) getdents(r0, 0x0, 0x58) 6.800653392s ago: executing program 3 (id=547): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0xc4c85513, &(0x7f0000000040)={0xb}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0xc1105511, &(0x7f0000000040)) connect$can_bcm(r7, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00'/15, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000040000000000000000000000b8ee0816756b62187804752330b2b55830d7228ef1593c06"], 0x80}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040f0400001b04"], 0x7) 5.469611735s ago: executing program 3 (id=552): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3, 0x4}, 0x20) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000140)) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006000364bc24eab556a705251e618294ffd4938037e786a690001000000e4509c5bbcd72c6c953", 0x55}, {&(0x7f0000001e40)="dceddd02a62da3", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x6d}}}]}}]}, 0x60}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$can_j1939(0x1d, 0x2, 0x7) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x9}, 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007"], 0xd) 4.652628924s ago: executing program 2 (id=557): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1810714, &(0x7f00000003c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@jqfmt_vfsold}, {@grpid}, {@prjquota}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0xfffffffffffffff9}}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x48d, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x80000000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4f}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KDSKBENT(r6, 0x4b52, &(0x7f0000000000)) 4.566765972s ago: executing program 3 (id=558): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@norecovery}]}, 0x9, 0x60c, &(0x7f00000001c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000c00)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0x9, 0x10}, {0x5, 0xffe1}}, [{0x8, 0xb, 0x3ff8}, {0x8, 0xb, 0x2005}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xab4}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00'}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0xfe4e94ed14dfc11b, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000800)={{0x7, 0x8000}, 0x100, './file0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) lseek(r3, 0xeed5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 4.537935244s ago: executing program 4 (id=559): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3e8, 0x178, 0x178, 0x3e8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x200, 0x220, 0xc, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'syzkaller1\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setpriority(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0}, 0x90) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0}, 0x90) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x3d, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1f, 0x6, 0x200, 0x632d, 0x952, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000200000000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x0) r8 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r5, &(0x7f0000002200)={0x50, 0x0, r9}, 0x50) read$FUSE(r5, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r5, &(0x7f0000002140)={0x20, 0x0, r10}, 0x20) read$FUSE(r5, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) getdents64(r8, 0x0, 0x300) write$FUSE_INTERRUPT(r5, &(0x7f0000000080)={0x10, 0x0, r11}, 0x10) socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.22546392s ago: executing program 0 (id=560): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x128}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x3b0, 0x65, 0x800, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8, 0xb, 0x1f}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x31c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x55}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x300, 0x6, [@m_tunnel_key={0xc4, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x75, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x104, 0x0, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x80000000, 0x4, 0x927a, 0xfffff920}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc}}}, @m_sample={0x40, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x88, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x3c, 0x0, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x3b0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x364, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x2e4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x264, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_nat={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x2d, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199"}, {0xc}, {0xc}}}, @m_connmark={0x128, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xbd, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7da0dc8795f6ad32634b6b66cf821e93079c15dda212b0b37b761850342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e64d73a30fc4e9a29d250104fa297e7a7f17405df935efe7e4806b65a797a850f6a8d8e2c8a8b9f56953d1262211f307b4af9617b04c9c48dea9e41ef304ac3365b6d8846ba792c335b4b2b956f87"}, {0xc}, {0xc}}}]}]}}]}, 0x364}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0x7, 0x101, {{0x37, 0x4, 0x3, 0x2, 0xdc, 0x64, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x24, 0x21, 0x1, 0xb, [{@empty, 0x1}, {@rand_addr=0x64010101, 0x401}, {@empty, 0x7f}, {@local, 0x430}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x56, 0x3, 0x4, [{@private=0xa0100fd, 0x646c}, {@multicast2, 0x7}, {@empty, 0xffffffcb}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x9}, {@remote, 0x3}, {@multicast2, 0x7}]}, @cipso={0x86, 0x26, 0x3, [{0x7, 0x6, "85af75e3"}, {0x2, 0x7, "4529948f41"}, {0x5, 0x6, "3d9003fd"}, {0x7, 0xd, "387e0ddd884ddd0532d175"}]}, @timestamp_addr={0x44, 0x2c, 0x64, 0x1, 0x3, [{@rand_addr=0x64010101, 0x9}, {@remote, 0x1ff}, {@loopback, 0x3}, {@private=0xa010101, 0x8001}, {@local, 0x2}]}, @ssrr={0x89, 0x13, 0x4c, [@remote, @local, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2]}]}}}}}) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000080)) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf7c}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000380)=0x0) io_submit(r7, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000340), 0x41}]) r8 = dup2(r6, r6) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_getnetconf={0x24, 0x52, 0x0, 0x0, 0x0, {}, [@NETCONFA_PROXY_NEIGH={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000480)=@deltfilter={0x24}, 0x24}}, 0x0) bind$can_raw(r0, &(0x7f0000000000), 0x1e) 3.796702967s ago: executing program 4 (id=562): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) accept4$alg(r1, 0x0, 0x0, 0x100000) r5 = dup(r4) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000011"]) pread64(r1, &(0x7f00000000c0)=""/204, 0xcc, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000280)={0x3f, 0x0, 0x10000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="8209000902000000fc00000000000000"], 0x10}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x0, 0xffff}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f00000000c0)={0x80, 0x1, 0x6, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="64000000000101040000000000000000642171c1240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c000280050001000000000014000180080001007f00000108000200ac43db207d29d70adff014140008000740fffffffe"], 0x64}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) close_range(0xffffffffffffffff, r8, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) 3.656618819s ago: executing program 0 (id=564): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) setfsgid(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110b2000000000095000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0xc7, &(0x7f00000002c0)=""/199}, 0x90) sendfile(r3, r1, 0x0, 0x1001) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4, @none, 0x7}, 0xe) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0xc9, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810031000004fef82adc4ed0585a590c36f127427de5b96294d1baad1ac61501d084a1fa12bed98858631d239259e4cfc55fae47f96665c88faf90b6c31ce1e4c01f549c16cfdc39235604b6"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000a40)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x300}}, {@noload}, {@journal_ioprio}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@fowner_eq}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@fowner_eq}], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00') 3.631872271s ago: executing program 3 (id=565): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000740)=""/73, 0x49}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) 3.474156735s ago: executing program 4 (id=568): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000320, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={0x0, 0x24}}, 0x20000000) pipe2(0x0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000000480)=ANY=[]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) 2.755291836s ago: executing program 1 (id=569): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80804120, &(0x7f0000000100)) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020400050e000000000000000000000005000600000000000a00000000000000fe80000000000000000000000000000000000000000000000200010000000000000000000000000005", @ANYRES8=r0, @ANYRES8=r1, @ANYRESHEX], 0x70}, 0x1, 0x7}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000000)="714bb498ea3437756cc367c39fd66c2896735216e2216e6bbd3b19361c3b1d9e0326e5224e6f24d98f7d72e61e2a7e8c9be09e70cd14f0ae9fbf6fafebeb", 0x3e) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000002c40), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r9 = syz_open_pts(r8, 0x141601) fcntl$setstatus(r9, 0x4, 0x102800) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000180)=0x14) r10 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) close_range(r7, 0xffffffffffffffff, 0x0) 2.484336579s ago: executing program 3 (id=570): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1a1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x22020400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x15, 0x0, "94ac873f1692ddbc702d69407eca10eedeb5dcd05446c2b07ec23159acd334e8058957bcee65a1721541ac7db2be2af67fd949859fc48a758e5d9ec2dc28f3fb330ea6b887a32239b1f039ba45bc1bc1"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3d, 0x0, "2e52f463273974700fa6345b251d8975a34ce626db167dbf6e168d9e7f0000000000000043ff6a8a6123980b1d34d6932fac4bcaeba676b4b24488db18f9f12d733e613a3a1ff56300110b87c85d9831"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x19, 0x0, "41d2989d48db1764d991250db913d6dfbb2f5caa40b6ed2b6456aa8bb8a90f0c731f71573c64d277eeebae965ed6036a31420eb51c739e71e500c814c07f5659e1e1721bccc9b4894588115461cf0776"}, 0xd8) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e8000000210001000000000000000000fc0100"/64, @ANYBLOB], 0xe8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x18}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="00000047226690f0b56611f3178aea9eb1fd0000000000b7080000000000007b8af8ff00000000bfa2000000000000070200cd3001b3bae0317d0008000000f38646b72700000000000085000000d90500000000000000000000efd081d46f71a93eec70dcf1578001000000f3e9ec2867903e73f721adf826aa210c28224fc705633d11aee9ee4e0ca0a815b1d8209355"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000280)="2209b886c0d562c87eedf80ed6302bdf3a11fe7c53f13a7454e74af43e3e811dfd6db89eb36b0b7c54cace31a6c89a8bac9395731ea90f08f9442ce6c0ddd9a88453864a7380c73a7ea77b3c", 0x0, &(0x7f0000000200), &(0x7f0000000080), 0xce, r4}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00'}, 0x10) mlockall(0x7) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d105012000090102"], 0x0) close_range(r7, 0xffffffffffffffff, 0x0) getdents(r0, 0x0, 0x58) 2.483584089s ago: executing program 4 (id=571): rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_mr_vif\x00') preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000580)=""/240, 0xf0}], 0x1, 0x47, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x90) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='affs\x00', 0x0, &(0x7f0000000140)='grpquota') r5 = socket$inet6(0x10, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000940)={'#! ', './cgroup/../file0', [{0x20, '\x00\xff\xe7\xe0\x97Y\xff\xff\xff*qm\xc3~\xa2\xb9\x96\x92\xc7\xd3\x0fR\x99\xc80\xf4\x9e\x05\x13(q\x1e\xcd\xd1d\x8a8c\x98N\x96\xc0\b\x02\b\xd1\xfb#mC\xb3\x17R\xb7\xaf\x90C\r\xdd\xd9`\x9eu8\xc7b\xbc\n\x1dr\x9b\xb7W\xdb\xb5\xe0t\xfd\x97\xa0\x1fm\x964\xef'}, {0x20, '\xad'}, {0x20, '/de\xf6/kvm\x00'}, {0x20, '-.^'}, {0x20, 'syzkaller\x00\x8b\xdcK\x80\xa8\x1e4\x1d{\xe7\b\xb3~y\t[&\xcf/\xc0\xd8\xd3\xcb\x01m\xf2\xcc\xbfM\xc3\xe57[\xaa\x10\xe2p\xd6w:[y\xb8\xb0\xb7\x10}j\xe0\xfe_X\xf3\xc7y\xfc\x90U8\x86R\xf3H\xe2\xdeWh\xe3\x82\xf1\xa2W~\xf8\xa2km\xa2rN\xe8\xdc\xa8\xcd\x80\x7f\xb7\x8b\xde\xec\va:]8T0\xc9~\f\x94\xba#5\xcb\xcd\xd4\xa0\x9a\x1a,\x95\x0e\xd5r\x89P\x84cI'}, {0x20, '/#&#:@:(^*,){!@.):'}, {0x20, '[//'}, {0x20, '/dev/kvm\x00'}, {0x20, 'net/ip_mr_vif\x00'}, {0x20, 'mc\xa6\xa4^\xbb\xcfR\x92\x03\\\n\xd9\xdf5\aZ\xb8\xad\x93\xc1\xb6bW{]\xad\xd1\xc7\xc0\xdc\x8bd\xf6B\xbe\xd9)\x85(\xb7\xf6:\x03\xc4\xe0\n.|\xf3C\x8b \xe3\xa1\xce\xfe\xc9$h\xb4d\x01\xe6n\xbd\v\x96\x18R\xd1\xe3t\xe9x\x94t\xd3M^\xb7s\xd1i\xa0\x02\x897\xc6\xbe\xd4\x9f>9\x04\x10\xd0\"\xb1\xd9z\xdf\xa4y\xbf\x13pe%{;\xc8~}\xcb\x19V3o\xdc\xda\xdea?\xe3\xd1oh\x9cP-\xbe'}], 0xa, "0eaebd01cd2ea397f100ccd60290808a0fe711"}, 0x1c6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r5, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee100", 0x1b) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x6000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {}, {0x1000}, {}, {0x0, 0x0, 0x0, 0xf2}, {}, {}, 0xddfdffdb, 0x0, 0x0, 0x100130}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04230500c9"], 0x10) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f00000000c0)={0x5000, 0x6000, 0xfe}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000a800000000000070000000014000100fe"], 0x30}}, 0x800) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0c00262040ad8a02000000844d908ac28506dd7ff86b4e75c64a6f73a7113c2cd2af1e0a28f6"], 0xf) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.295202584s ago: executing program 1 (id=572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x1) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000c00)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) writev(r3, &(0x7f0000000540)=[{&(0x7f00000000c0)='u', 0x1}], 0x1) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_SET_STATION(r5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000200)=0x10005, 0x4) r7 = accept4(r2, 0x0, 0x0, 0x0) close(r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r9, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xec}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x2020080) recvfrom$ax25(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 2.089758642s ago: executing program 4 (id=573): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002980), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2a, &(0x7f0000000040)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000180)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r3 = socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/shm\x00', 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2.086899853s ago: executing program 0 (id=574): syz_emit_ethernet(0x8e, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000440)=ANY=[], 0x84, 0x1505, &(0x7f0000002180)="$eJzs3Au4jtW2OPAx5pwvi6QvyX2OOV6+5DJJklwSEkmSJEluCUmSJCGxyC0JScg9yT0kt1jJ/X7LPUm2JElCQpL5f7Q7x9mnfU77/Pc+23n2Gr/nmc+aY73fmN+Ya6zn+973Xc/6vu04uGr9apXrMjP8XfDPX1IBIAUA+gHANQAQAUCpbKWyAS6fnklj6t/3JOIf66FpV7oCcSVJ/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0TfovRHq2dXrua2Wk3/HPu/8PIPf//6+R9/9/IYeLjflyfbHrO/0PUqT/6Zv0P32T/qdv0v/0Tfqfvkn//8VFAJX+m8PS/39Nf+ttFum/EOnZlb7//E8YKQBwpWv4Pzuu9O+fEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQoj04Vy4zADAv82vdF1CCCGEEEIIIYT4xwkZr3QFQgghhBBCCCGE+N+HoECDgQgyQEZIgUyQGa6CLHA1ZIVrIAHXQja4DrLD9ZADckIuyA15IC/kAwsEDhhiyA8FIAk3QEG4EQpBYSgCRcFDMSgON0EJuBlKwi1QCm6F0nAblIGyUA7Kw+1QAe6AilAJKsOdUAXugqpQDe6G6nAP1IB7oSbcB7XgfqgND0AdeBDqwkNQDx6G+vAINIBHoSE0gsbQBJr+f+W/CF3hJegG3SEVekBPeBl6QW/oA32hH7wC/eFVGACvwUAYBIPhdRgCb8BQeBOGwXAYAW/BSBgFo2EMjIVxMB7ehgnwDkyEd2ESTIYpMBWmwXSYAe/BTJgFs+F9mAMfwFyYB/NhASyED2ERLIY0+AiWwMewFJbBclgBK2EVrIY1sBbWwXrYABthE2yGLbAVPoFtsB12wE7YBbthD3wKe+Ez2Aefw3744n+Yf/Y/5XdCQECFCg0azIAZMAVTMDNmxiyYBbNiVkxgArNhNsyO2TEH5sBcmAvzYB7Mh/mQkJCRMT/mxyQmsSAWxEJYCItgEfTosTgWxxJ4M5bEklgKS2FpLI1lsCyWxfJYHitgBayIFbEyVsYqWAWrYlW8G+/Ge7AG1sCaWBNrYS2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBtjY2yKTbEZNsPm2BxbYktsha2wNbbGNtgG22JbbIftsD22xw7YATtiR+yEnbEzvogv4kv4EnbHKqoH9sSe2At7YR/si33xFeyPr+Kr+BoOxEE4GF/H1/ENHIpncBgOxxE4AiuoUTgaxyCrcTgex+MEnIATcSJOwsk4GafiNJyOM3AGzsRZOAvfxzn4AX6A83AeLsCFuBAX4WJMwzRcgmdxKS7D5bgCV+IqXIlrcC2uwfW4AdfjJtyEW3ALfoKf4HbcjjtxJ+7G3fgpfoqf4Wc4EPfjfjyAB/AgHsRDeAgP42E8gkfwKB7FY3gMj+NxPIEn8RSexNN4Gs/gWTyH5/A8nscL+Hyer+vtLrxuIKhLjDIqg8qgUlSKyqwyqywqi8qqsqqESqhsKpvKrrKrHCqHyqVyqTwqj8qn8ilSpFjFKr/Kr5IqqQqqgqqQKqSKqCLKK6+Kq+KqhCqhSqqSqpS6VZVWt6kyqqxq4cur8qqCaukrqkqqsqqsqqi7VFVVTVVT1VV1VUPVUDVVTVVL1VK11QOqjuqBffAhdakz9dUgbKAGY0PVSDVWTdQb+JhqpoZic9VCtVRPqOE4DFurZr6Nelq1VaOxnXpWjcHnVAc1DjuqF1Qn1Vl1US+qrqq575bht5dANRV7qd6qj+qrZuJd6lLHqqrX1EA1SA1Wr6sF+IYaqt5Uw9RwNUK9pUaqUWq0GqPGqnFqvHpbTVDvqInqXTVJTVZT1FQ1TU1XM9R7aqaapWar99Uc9YGaq+ap+WqBWqg+VIvUYpWmPlJL1MdqqVqmlqsVaqVapVarNWqtWqfWqw1qo9qkNqstaqv6RG1T29UOtVPtUrvVHvWp2qs+U/vU52q/+kIdUH9SB9WX6pD6Sh1WX6sj6ht1VH2rjqnv1HH1vTqhTqpT6gd1Wv2ozqiz6pz6SZ1XP6sL6hd1UQUFGrXSWhsd6Qw6o07RmXRmfZXOoq/WWfU1OqGv1dn0dTq7vl7n0Dl1Lp1b59F5dT5tNWmnWcc6vy6gk/oGXVDfqAvpwrqILqq9LqaL65t0CX2zLqlv0aX0rbq0vk2X0WV1OV1e364r6Dt0RV1JV9Z36ir6Ll1VV9N36+r6Hl1D36tr6vt0LX2/rq0f0HX0g7qufkjX0w/r+voR3UA/qhvqRrqxbqKb6sd0M/24bq5b6Jb6Cd1KP6lb66d0G/20bquf0e30s7q9fk530M/rjvoF3Ul31l30L/qiDrqb7q5TdQ/dU7+se+neuo/uq/vpV3R//aoeoF/TA/UgPVi/rofoN/RQ/aYepofrEfotPVKP0qP1GD1Wj9Pj9dt6gn5HT9Tv6kl6sp6ip+pperru89tKs/+G/Hf+Sv6AX599i96qP9Hb9Ha9Q+/Uu/RuvUfv0Xv1Xr1P79P79X59QB/QB/VBfUgf0of1YX1EH9FH9VF9TB/Tx/VxfUKf1D/pH/Rp/aM+o8/qs/onfV6f1xd++xmAQaOMNsZEJoPJaFJMJpPZXGWymKtNVnONSZhrTTZznclurjc5TE6Ty+Q2eUxek89YQ8YZNrHJbwqYpLnBFDQ3mkKmsCliihpvipni5qa/O/+P6mtqmppmpplpbpqblqalaWVamdamtWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lkOpkupovparqabqabSTWppqd52fQyvU0f09f0M6+Y/qa/GWAGmIFmoBlsBpshZogZaoaaYWaYGWFGmJFmpBltRpuxZqwZb8abCWaCmWgmmklmkplipphpZpqZYWaYmWammW1mmzlmjplr5pr5Zr5ZaBaaRWaRSTNpZolZYpaaZWaZWWFWmFVmlVlj1ph1Zp3ZYDaYTWaTWWq2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX1mv9lvDpgD5qA5aA6ZQ+awOWyOmCPmqDlqjplj5rg5bk6YE+aUOWVOm9PmjDljzplz5rw5by6YC+aiuXjptC9SkYpMZKIMUYYoJUqJMkeZoyxRlihrlDVKRIkoW5Qtyh5dH+WIcka5otxRnihvlC+yEUUu4iiO8kcFomR0Q1QwujEqFBWOikRFIx8Vi4pHN0UlopujktEtUano1qh0dFtUJioblYvKR7dHFaI7oopRpahydGdUJborqhpVi+6Oqkf3RDWie6Oa0X1Rrej+qHb0QFQnejCqGz0U1YsejupHj0QNokejhlGjqHHUJGr6D10/hDM5H/fdbHebanvYnvZl28v2tn1sX9vPvmL721ftAPuaHWgH2cH2dTvEvmGH2jftMDvcjrBv2ZF2lB1tx9ixdpwdb9+2E+w7dqJ9106yk+0UO9VOs9PtDPuenWln2dn2fTvHfmDn2nl2vl1gF9oP7SK72KbZj+wS+7FdapfZ5XaFXWlX2dV2jV1r19n1doPdaDfZzXaL3Wo/sdvsdrvD7rS77G67x35q99rP7D77ud1vv7AH7J/sQfulPWS/soft1/aI/cYetd/aY/Y7e9x+b0/Yk/aU/cGetj/aM/asPWd/suftz/aC/cVetOHSyf2lt3cyZCgDZaAUSqHMlJmyUBbKSlkpQQnKRtkoO2WnHJSDclEuykN5KB/lo0uYmPJTfkpSkgpSQSpEhagIFSFPnopTcSpBJagklaRSVIpKU2kqQ2WoHJWj2+l2uoPuoEpUie6kO+kuuouqUTWqTtWpBtWgmlSTalEtqk21qQ7VobpUl+pRPapP9akBNaCG1JAaU2NqSk2pGTWj5tScWlJLakWtqDW1pjbUhtpSW2pH7ag9tacO1IE6UkfqRJ2oC3WhrtSVulE3SqVU6kk9qRf1oj7Uh/pRP+pP/WkADaCBNJAG02AaQkNoKA2lYTScRtBbNJJG0WgaQ2NpHI2n8TSBJtBEmkiTaBJNoSk0jabRDJpBM2kmzabZNIfm0FyaS/NpPi2khbSIFlEapdESWkJLaSktp+W0klbSalpNa2ktraf1tJE20mbaTFtpK22jbbSDdtAu2kV7aA/tpb20j/bRftpPB+gAHaSDdIgO0WE6TEfoCB2lo3SMjtFxOk4n6ASdolN0mk7TGTpD5+gcnaef6QL9QhcpUIpTkNld5bK4q11Wd41LcZncpTgCgEtxLpfb5XF5XT5nXQ6X8y9ics4VcoVdEVfUeVfMFXc3/S4u48q6cq68u91VcHe4ir+Lq7t7XA13r6vp7nPV3N1/Eddy97va7hFXxz3q6rpGrp5r4uq7R1wD96hr6Bq5xq6Ja+WedK3dU66Ne9q1dc/8Ll7kFru1bp1b7za4ve4zd8795I66b91597Pr5rq7fu4V19+96ga419xAN+h38Qj3lhvpRrnRbowb68b9Lp7iprppbrqb4d5zM92s38UL3Ydujktzc908N98t+DW+VFOa+8gtcR+7pW6ZW+5WuJVulVvt1vx7rSvcJrfZbXF73Kdum9vudridbpfb/Wt8aR/73Oduv/vCHXHfuIPuS3fIHXOH3de/xpf2d8x95467790Jd9Kdcj+40+5Hd8ad/XX/l/b+g/vFXXTBASMr1mw44gyckVM4E2fmqzgLX81Z+RpO8LWcja/j7Hw95+CcnItzcx7Oy/nYMrFj5pjzcwFO8g1ckG/kQlyYi3BR9lyMi/NNXIJv5pJ8C5fiW7k038ZluCyX4/J8O1fgO7giV+LKfCdXCYGrcjW+m6vzPVyD7+WafB/X4vu5Nj/AdfhBrssPcT1+mOvzI9yAH+WG3IgbcxNuyo9xM36cm3MLbslPcCt+klvzU9yGn+a2/Ay342e5PT/HHfh57sgvcCfuzF34Re7KL3E37s6p3IN78svci3tzH+7L/fgV7s+v8gB+jQfyIB7Mr/MQfoOH8ps8jIfzCH6LR/IoHs1jeCyP4/H8Nk/gd3giv8uTeDJP4ak8jafzDH6PZ/Isns3v8xz+gOfyPJ7PC3ghf8iLeDGn8Ue8hD/mpbyMl/MKXsmreDWv4bW8jtfzBt7Im3gzb+Gt/Alv4+28g3fyLt7Ne/hT3suf8T7+nPfzF3yA/8QH+Us+xF/xYf6aj/A3fJS/5WP8HR/n7/kEn+RT/AOf5h/5DJ/lc/wTn+ef+QL/whc5MMQYq1jHJo7iDHHGOCXOFGeOr4qzxFfHWeNr4kR8bZwtvi7OHl8f54hzxrni3HGeOG+cL7YxxS7mOI7zxwXiZHxDXDC+MS4UF46LxEVjHxeLi8c3xSXim+OS8S1xqfjWuHR8W1wmLhs/cl/5+Pa4QnxHXDGuFFeO74yrxHfFVeNq8d1x9fieuEZ8b1wzvi8uGd8f144fiOvED8Z144fievHDcf34kbhB/GjcMG4UN46bxE3jx+Jm8eNx87hF3DJ+Im4VPxm3jp+K28RPx23jZ/7weGrcI+4Zvxy/HIdwr56fXJBcmPwwuSi5OJmW/Ci5JPlxcmlyWXJ5ckVyZXJVcnVyTXJtcl1yfXJDcmNyU3JzcksyhGoZwaNXXnvjI5/BZ/QpPpPP7K/yWfzVPqu/xif8tT6bv85n99f7HD6nz+Vz+zw+r8/nrSfvPPvY5/cFfNLf4Av6G30hX9gX8UW998V8cd/EN/VNfTP/uG/uW/iW/gn/hH/SP+mf8k/5p31b/4xv55/17f1zvoN/3j/vX/CdfGffxb/ou/qXfDff3af6VN/T9/S9fC/fx/fx/Xw/39/39wP8AD/QD/SD/WA/xA/xQ/1QP8wP8yP8CD/Sj/Sj/Wg/1o/14/14P8FP8BP9RD/JT/JT/BQ/zU/zM/wMP9PP9LP9bD+n0Bw/18/18/18v9Av9Iv8Ip/m0/wSv8Qv9Uv9cr/cr/Qr/Wq/2q/1a/16v95v9Bv9Zr/Zb/Vb/Ta/ze/wO/wuv8vv8Xv8Xr/X7/P7/H6/3x/wB/xBf9Af8l/5w/5rf8R/44/6b/0x/50/7r/3J/xJf8r/4E/7H/0Zf9af8z/58/5nf8H/4i/64Mcn3k5MSLyTmJh4NzEpMTkxJTE1MS0xPTEj8V5iZmJWYnbi/cScxAeJuYl5ifmJBYmFiQ8TixKLE2mJjxJLEh8nliaWJZYnViRWJlYlQsi7LQ75Q4GQDDeEguHGUCgUDkVC0eBDsVA83BRKhJtDyXBLKBVuDaXDbaFMKBvKhUdDw9AoNA5NQtPwWGgWHg/NQ4vQMjwRWoUnQ+vwVGgTng5twzOhXXg2tA/PhQ7h+dAxvBA6hc6hS3gxdA0vhW6he0gNPULP8HLoFXqHPqFv6BdeCf3Dq2FAeC0MDIPC4PB6GBLeCEPDm2FYGB5GhLfCyDAqjA5jwtgwLowPb4cJ4Z0wMbwbJoXJYUqYGqaF6WFGeC/MDLPC7PB+mBM+CHPDvDA/LAgLw4dhUVgc0sJHYUn4OCwNy8LysCKsDKvC6rAmrA3rwvqwIWwMm8LmsCVsDZ+EbWF72BF2hl1hd9gTPg17w2dhX/g87A9fhAPhT+Fg+DIcCl+Fw+HrcCR8E46Gb8Ox8F04Hr4PJ8LJcCr8EE6HH8OZcDacCz+F8+HncCH8Ei7K/6wJIYQQQvxN9B8c7/FXvqd+G5f0BICrt+c+/J/X3Jjjz/PeKk+rBAA83b3jQ/82qlRJTU397bFLNUQF5gFA4nL+r3+W+y1eBi3hSWgDLaDEX62vt+p8nv9g/eStAJn/Q04KXI4vr3/zf7H+Y0+MWFQ6Ppftv1l/HkChApdzMsHl+PL6Jf+L9XM2+4P6M305HqD5f8jJApfjy+sXh8fhGWjzF48UQgghhBBCCCH+rLcq1/6Prp8vXZ/nMZdzMsLl+I+uz4UQQgghhBBCCHHlPde5y1OPtWnTor1MZCITmfz75Eq/MgkhhBBCCCH+0S6f9F/pSoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiPTrn/FxYld6j0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIcSV9v8CAAD//4H6O6c=") r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffffc, 0x0, &(0x7f0000000340)={0x4b5a9da54893e123, 0x1}, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r3, 0x0, 0xf3a, 0x0) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) tee(r2, r7, 0xaf5, 0x0) write$binfmt_elf64(r5, &(0x7f0000003380)=ANY=[], 0x18c6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r8, 0xc00c5512, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x5, 0x4) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000180)={0x200000}) open(&(0x7f00000000c0)='./bus\x00', 0x60142, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x1, 0x4800003e, r9, 0x0) 1.378119862s ago: executing program 2 (id=575): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@norecovery}]}, 0x9, 0x60c, &(0x7f00000001c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000c00)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00'}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0xfe4e94ed14dfc11b, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000800)={{0x7, 0x8000}, 0x100, './file0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) lseek(r2, 0xeed5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1.376233343s ago: executing program 4 (id=576): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2ad, &(0x7f0000000740)="$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") r1 = syz_mount_image$fuse(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x30c407e, &(0x7f0000000780)=ANY=[], 0x1, 0x0, 0x0) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/81) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) fchown(r2, 0x0, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="660a00000000000061117a000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000440)='./control\x00', 0x0) r6 = open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') rmdir(&(0x7f0000000040)='./control\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) rmdir(&(0x7f000001f7c0)='./control\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) execve(&(0x7f0000000400)='./control/file0\x00', &(0x7f0000000ac0)=[&(0x7f0000000480)='^+\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='#! '], &(0x7f0000000bc0)=[&(0x7f0000000b00)='/dev/nullb0\x00', &(0x7f0000000b40)='vfat\x00', &(0x7f0000000b80)='.]\x00']) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, 0x0, &(0x7f00000003c0)) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000240)=@nullb, 0x0, &(0x7f0000000780)={0x7, 0xa, 0xe, 0xc66, 0x5, 0x8, 0x1, 0x100000001, 0x7}) getrandom(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1040884, &(0x7f0000000d80)=ANY=[@ANYRES64, @ANYBLOB="64cd4edafcc4e955214734312226a1fbfe0a6fc81fc11c0f423143c9d4803291995493a079d2c6a47eaa88beee32f270a38adfb1aa1f4b89985d48c680b3ddcc6975637d05a92e666dc8f31c2708409437e0a65233a1f5d52ac8c9fde387525a5cd8869805d9d38e92354de3a287d7a56bcf7799c7ee447fccedc57944c42290ac4e62d8c4f4e38e85451117620593553836b89ceff9a624d136be9bea19777e31cca120fb2739c73134530a11985c07e1f03470f3da707d88c227a009240c893bb9427501b066e5584f78fde9e25afa3de8d83906dda2", @ANYBLOB="73686f72746e616d653d6f72733d742d726f2c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e39352c756e695f786c6174653d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c6ee6732c756e695f786c6174653d312c756e695f786c6174653d312c6e66732c757466383d312c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c6e66732c726f6469722c726f6469722c6e6e6f6e750000000e0000000000c61fbe7fae49c700"/246, @ANYRES8=0x0, @ANYRESDEC, @ANYRESOCT=r6, @ANYRES8=r0, @ANYRES32=r6, @ANYRES32=r1, @ANYRESOCT], 0x1, 0x2a6, &(0x7f0000000800)="$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") 1.353432355s ago: executing program 1 (id=577): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80804120, &(0x7f0000000100)) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020400050e000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000000000000000000000020001000000000000000000000000000500", @ANYRES8=r0, @ANYRES8=r1, @ANYRESHEX], 0x70}, 0x1, 0x7}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000000)="714bb498ea3437756cc367c39fd66c2896735216e2216e6bbd3b19361c3b1d9e0326e5224e6f24d98f7d72e61e2a7e8c9be09e70cd14f0ae9fbf6fafebeb997513db2b9bad2f1943bb402a08086d291e6ce29b46300ba65917a45767c9e680d311aaf6a42964e72f777274d325bf8854cc9c94408cd101d6dff154", 0x7b) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)="8fc51ea43bc38fdc672ff8a38c366bb16b506f6b0a9054452a7000538d993be36813c4d7ed5cf342504aab2192e5e9ede74ddeb93cc59ec6ff6fce6466a68433b79ac0c778d805cfff9bc09c7d7b7cbc7c77db378a8b572e53", 0x59}], 0x1}}], 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r9 = syz_open_pts(r8, 0x141601) fcntl$setstatus(r9, 0x4, 0x102800) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000180)=0x14) r10 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) close_range(r7, 0xffffffffffffffff, 0x0) 1.280938191s ago: executing program 1 (id=578): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) 1.148371312s ago: executing program 1 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000580)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000001b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES16=r0], 0xff, 0x2e7, &(0x7f0000000280)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000180)={0x201, 0xd000000, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll(&(0x7f0000000540)=[{r5}], 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000500)=0x401) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x1f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = mq_open(&(0x7f00000001c0)='.(:[}%^', 0x1, 0x70, 0x0) mq_timedsend(r6, 0x0, 0x5cd8, 0x0, &(0x7f0000008040)) read$dsp(r5, &(0x7f0000000200)=""/108, 0x6c) syz_mount_image$ext4(&(0x7f0000001140)='ext2\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f00000000c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@data_ordered}, {@prjquota}, {@noacl}]}, 0x1, 0x775, &(0x7f0000001180)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000580)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r8, 0x0, 0x1800, 0x10000) 225.200231ms ago: executing program 2 (id=580): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000740)=""/73, 0x49}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) 0s ago: executing program 1 (id=581): socketpair$unix(0x1, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38ffc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/80, 0x50}], 0x1, 0x0) io_setup(0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r1, 0x7, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000}, 0x50) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r3 = add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, r2) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/165, 0xa5}], 0x1) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) keyctl$instantiate(0xc, r3, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRESDEC], 0x2d, 0xfffffffffffffff9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x202140, 0x0) poll(&(0x7f0000001140)=[{r7}, {r8}], 0x1, 0x0) kernel console output (not intermixed with test programs): 8.900076][ T3661] bond0 (unregistering): Released all slaves [ 78.955740][ T21] usb 3-1: USB disconnect, device number 2 [ 79.030923][ T4043] syz.2.57 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.174922][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 79.247215][ T4029] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 79.286631][ T4051] 9pnet: p9_fd_create_unix (4051): problem connecting socket: ./file1: -111 [ 79.303266][ T4029] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 80.449677][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 80.633213][ T4064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 80.874802][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.906117][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.941212][ T4076] Zero length message leads to an empty skb [ 80.950755][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 80.962401][ T4075] loop0: detected capacity change from 0 to 524287999 [ 80.983932][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.995149][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 80.999762][ T4073] netlink: 'syz.3.67': attribute type 7 has an invalid length. [ 81.005072][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.014255][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.029379][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 81.052451][ T21] usb 1-1: config 0 descriptor?? [ 81.089620][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.100547][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 81.120266][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.131161][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 81.142387][ T4050] loop4: detected capacity change from 0 to 32768 [ 81.149915][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.160807][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 81.161333][ T4073] loop3: detected capacity change from 0 to 512 [ 81.341093][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.352008][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 81.371490][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.382410][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 81.392846][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.403801][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 81.411680][ T4075] ldm_validate_partition_table(): Disk read failed. [ 81.421396][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.432442][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 81.513993][ T4081] tipc: Started in network mode [ 81.519251][ T4081] tipc: Node identity , cluster identity 4711 [ 81.525597][ T4081] tipc: Failed to set node id, please configure manually [ 81.532917][ T4081] tipc: Enabling of bearer rejected, failed to enable media [ 81.549228][ T26] kauditd_printk_skb: 81 callbacks suppressed [ 81.549332][ T26] audit: type=1326 audit(1724435637.761:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4049 comm="syz.4.60" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7daf25be79 code=0x0 [ 81.677513][ C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.688461][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 81.974256][ T4075] Dev loop0: unable to read RDB block 0 [ 81.993308][ T4073] EXT4-fs (loop3): Mount option "journal_checksum" incompatible with ext3 [ 82.015928][ T4075] loop0: unable to read partition table [ 82.083153][ T4075] loop_reread_partitions: partition scan of loop0 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 82.125396][ T26] audit: type=1400 audit(1724435638.341:96): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A220AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A49A7D068DF62388E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=4082 comm="syz.4.69" [ 82.155262][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.739898][ T21] usbhid 1-1:0.0: can't add hid device: -71 [ 82.746705][ T21] usbhid: probe of 1-1:0.0 failed with error -71 [ 83.363039][ T21] usb 1-1: USB disconnect, device number 4 [ 83.414972][ T4099] loop2: detected capacity change from 0 to 512 [ 83.437022][ T4098] loop0: detected capacity change from 0 to 512 [ 83.514489][ T4099] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 83.612026][ T4099] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (28729!=33349) [ 84.148425][ T4103] loop3: detected capacity change from 0 to 131072 [ 84.188915][ T4098] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.72: casefold flag without casefold feature [ 84.213405][ T4098] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.72: missing EA_INODE flag [ 84.236743][ T4099] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.244999][ T4098] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.72: error while reading EA inode 12 err=-117 [ 84.257179][ T4103] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 84.266571][ T4103] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 84.277148][ T4103] F2FS-fs (loop3): invalid crc value [ 84.292714][ T4099] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.73: bad orphan inode 15 [ 84.337700][ T4098] EXT4-fs (loop0): 1 orphan inode deleted [ 84.360129][ T4103] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.384575][ T4098] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.433434][ T4103] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 84.440561][ T4103] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 84.460680][ T4099] ext4_test_bit(bit=14, block=20) = 0 [ 84.466069][ T4099] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,inode_readahead_blks=0x0000000000000080,noload,noblock_validity,init_itable,noblock_validity,,errors=continue. Quota mode: none. [ 84.651780][ T4099] netlink: 3 bytes leftover after parsing attributes in process `syz.2.73'. [ 85.282438][ T4118] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 85.423870][ T4124] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 85.840972][ T26] audit: type=1326 audit(1724435642.061:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4127 comm="syz.1.78" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f626dd17e79 code=0x0 [ 85.937288][ T4133] syz.4.80 uses old SIOCAX25GETINFO [ 86.053933][ T4142] mmap: syz.4.82 (4142) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 86.210282][ T4145] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 87.844949][ T4150] crypto_alloc_aead failed rc=-4 [ 88.047057][ T4186] KVM: debugfs: duplicate directory 4186-11 [ 88.136415][ T4186] mkiss: ax0: crc mode is auto. [ 88.424042][ T4210] loop0: detected capacity change from 0 to 8 [ 88.437455][ T4211] process 'syz.2.90' launched './file0' with NULL argv: empty string added [ 88.475262][ T4210] squashfs image failed sanity check [ 88.551396][ T4214] netlink: 'syz.1.89': attribute type 10 has an invalid length. [ 89.486080][ T4224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.92'. [ 89.516838][ T4214] team0: Port device netdevsim0 added [ 89.548087][ T4213] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.624052][ T4226] loop0: detected capacity change from 0 to 8 [ 89.706590][ T4226] squashfs image failed sanity check [ 89.980985][ T4235] Unsupported ieee802154 address type: 0 [ 90.151036][ T3617] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 90.201643][ T3617] Bluetooth: hci3: Injecting HCI hardware error event [ 90.248508][ T3584] Bluetooth: hci3: hardware error 0x00 [ 90.772034][ T4247] netlink: 'syz.0.100': attribute type 3 has an invalid length. [ 90.818603][ T4251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 90.981662][ T4257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 91.079798][ T3658] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.123152][ T4257] device bond1 entered promiscuous mode [ 91.197464][ T4263] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.192641][ T4258] device ip6gretap1 entered promiscuous mode [ 92.200194][ T3658] usb 1-1: Using ep0 maxpacket: 32 [ 92.240588][ T4258] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 92.336858][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 92.479772][ T3658] usb 1-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.44 [ 92.489138][ C0] eth0: bad gso: type: 1, size: 1408 [ 92.509930][ T3658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.521555][ T4267] netlink: 44 bytes leftover after parsing attributes in process `syz.1.105'. [ 92.528166][ T3658] usb 1-1: Product: syz [ 92.535680][ T3658] usb 1-1: Manufacturer: syz [ 92.546267][ T4267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.549793][ T3658] usb 1-1: SerialNumber: syz [ 92.559870][ T4267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.576859][ T4267] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 92.594238][ T3658] usb 1-1: config 0 descriptor?? [ 92.607561][ T4272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.107'. [ 92.643383][ T3658] usb-storage 1-1:0.0: USB Mass Storage device detected [ 92.696581][ T3658] usb-storage 1-1:0.0: Quirks match for vid 04e6 pid 0007: 1 [ 92.714727][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 92.722541][ T3658] usb-storage 1-1:0.0: This device (04e6,0007,0144 S 3e P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 5.15.165-syzkaller) [ 92.722541][ T3658] Please send a copy of this message to and [ 92.848501][ T4284] loop1: detected capacity change from 0 to 512 [ 92.931461][ T3614] usb 1-1: USB disconnect, device number 5 [ 92.964466][ T4284] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.991746][ T4287] tap0: tun_chr_ioctl cmd 1074025677 [ 93.016190][ T4287] tap0: linktype set to 270 [ 93.040933][ T4284] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 93.081775][ T4284] System zones: 0-2, 18-18, 34-34 [ 93.128576][ T4284] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 93.192225][ T4284] EXT4-fs (loop1): 1 truncate cleaned up [ 93.197909][ T4284] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.253569][ T4297] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.336653][ T4295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.113'. [ 93.358718][ T4299] loop2: detected capacity change from 0 to 128 [ 93.714071][ T4305] xt_hashlimit: overflow, try lower: 0/0 [ 93.727672][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 94.025517][ T4315] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 94.035999][ T4312] netlink: 'syz.4.117': attribute type 4 has an invalid length. [ 95.186036][ T4323] loop4: detected capacity change from 0 to 256 [ 95.201298][ T4331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.271429][ T4323] FAT-fs (loop4): bogus number of directory entries (4) [ 95.313588][ T4323] FAT-fs (loop4): Can't find a valid FAT filesystem [ 95.341124][ T4334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 95.622629][ T4338] loop0: detected capacity change from 0 to 2048 [ 96.440673][ T4346] loop4: detected capacity change from 0 to 24 [ 96.468045][ T4338] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.514643][ T2636] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.520157][ T4346] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 96.546278][ T4346] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 96.636413][ T2636] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 96.649142][ T2636] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.649142][ T2636] [ 96.660640][ T2636] EXT4-fs (loop0): Total free blocks count 0 [ 96.667452][ T2636] EXT4-fs (loop0): Free/Dirty block details [ 96.697813][ T2636] EXT4-fs (loop0): free_blocks=2415919104 [ 96.775562][ T2636] EXT4-fs (loop0): dirty_blocks=48 [ 96.797371][ T2636] EXT4-fs (loop0): Block reservation details [ 96.865011][ T2636] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 96.943030][ T4350] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 96.990459][ T4338] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: none. [ 97.003847][ T4338] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 97.009389][ T4350] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 97.092723][ T4361] 9pnet: p9_errstr2errno: server reported unknown error  [ 97.944088][ T4361] loop1: detected capacity change from 0 to 1024 [ 98.008659][ T4375] device ipip0 entered promiscuous mode [ 98.067151][ T4361] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,stripe=0x0000000000000002,noblock_validity,errors=remount-ro,data_err=ignore,bsddf,sysvgroups,nojournal_checksum,nodelalloc,. Quota mode: none. [ 98.193050][ T4387] misc userio: No port type given on /dev/userio [ 98.267725][ T26] audit: type=1800 audit(98.233:98): pid=4361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.128" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 98.289772][ T21] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 98.719875][ T21] usb 5-1: config index 0 descriptor too short (expected 13951, got 18) [ 98.729571][ T21] usb 5-1: config 121 has an invalid descriptor of length 206, skipping remainder of the config [ 98.746249][ T21] usb 5-1: config 121 has no interfaces? [ 98.759641][ T21] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 98.809213][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.860320][ T4388] loop2: detected capacity change from 0 to 8 [ 98.955973][ T26] audit: type=1804 audit(98.923:99): pid=4369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.128" name="/newroot/31/file1/memory.events" dev="loop1" ino=18 res=1 errno=0 [ 98.980661][ T4369] EXT4-fs error (device loop1) in ext4_setattr:5572: Out of memory [ 99.013993][ T4388] SQUASHFS error: lzo decompression failed, data probably corrupt [ 99.022002][ T4388] SQUASHFS error: Failed to read block 0x28d: -5 [ 99.028391][ T4388] SQUASHFS error: Unable to read metadata cache entry [28b] [ 99.036587][ T4388] SQUASHFS error: Unable to read inode 0x11f [ 99.078809][ T4369] EXT4-fs (loop1): Remounting filesystem read-only [ 99.084528][ T4379] udc-core: couldn't find an available UDC or it's busy [ 99.095726][ T4379] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 99.225299][ T3571] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 99.236104][ T4396] loop3: detected capacity change from 0 to 1024 [ 99.497460][ T4396] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.749800][ T21] usb 5-1: string descriptor 0 read error: -71 [ 99.766844][ T21] usb 5-1: USB disconnect, device number 4 [ 99.837149][ T4407] loop0: detected capacity change from 0 to 8 [ 99.900584][ T4407] Filesystem uses "unknown" compression. This is not supported [ 99.935619][ T4027] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.086602][ T4407] loop0: detected capacity change from 0 to 512 [ 100.117344][ T4027] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.193198][ T4407] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000008000,minixdf,,errors=continue. Quota mode: writeback. [ 100.323000][ T4027] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.337792][ T4424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.394071][ T4427] loop4: detected capacity change from 0 to 512 [ 100.514303][ T4027] team0: Port device netdevsim0 removed [ 100.540337][ T4027] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.931926][ T4434] netlink: 'syz.4.147': attribute type 3 has an invalid length. [ 101.082223][ T4438] Unsupported ieee802154 address type: 0 [ 101.439915][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.460173][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 101.709578][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 101.782018][ T4435] chnl_net:caif_netlink_parms(): no params data found [ 101.949823][ T4440] loop2: detected capacity change from 0 to 131072 [ 102.079670][ T4440] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 102.089110][ T4440] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 102.101485][ T4440] F2FS-fs (loop2): invalid crc value [ 102.323578][ T4461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.928764][ T7] usb 5-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.44 [ 102.971048][ T4440] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.031664][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.066011][ T4440] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 103.073128][ T4440] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 103.119894][ T7] usb 5-1: Product: syz [ 103.124065][ T7] usb 5-1: Manufacturer: syz [ 103.128658][ T7] usb 5-1: SerialNumber: syz [ 103.141683][ T7] usb 5-1: config 0 descriptor?? [ 103.147764][ T3614] Bluetooth: hci2: command 0x0409 tx timeout [ 103.181860][ T4027] bond1: (slave ip6gretap1): Releasing backup interface [ 103.200485][ T7] usb-storage 5-1:0.0: USB Mass Storage device detected [ 103.217573][ T4027] device ip6gretap1 left promiscuous mode [ 103.286992][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.297156][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.305245][ T4435] device bridge_slave_0 entered promiscuous mode [ 103.315279][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.322090][ T7] usb-storage 5-1:0.0: Quirks match for vid 04e6 pid 0007: 1 [ 103.334777][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.340475][ T7] usb-storage 5-1:0.0: This device (04e6,0007,0144 S 3e P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 5.15.165-syzkaller) [ 103.340475][ T7] Please send a copy of this message to and [ 103.343928][ T4435] device bridge_slave_1 entered promiscuous mode [ 103.741343][ T4476] F2FS-fs (loop2): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 104.113297][ T4435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.136009][ T7] usb 5-1: USB disconnect, device number 5 [ 104.152067][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 104.195580][ T4435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.226895][ T4488] loop0: detected capacity change from 0 to 512 [ 104.518971][ T4435] team0: Port device team_slave_0 added [ 104.573100][ T4435] team0: Port device team_slave_1 added [ 105.163032][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.218632][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.322841][ T3614] Bluetooth: hci2: command 0x041b tx timeout [ 105.395975][ T4508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 105.427625][ T4504] loop4: detected capacity change from 0 to 8 [ 105.439504][ T4435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.572074][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.579026][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.611207][ T4504] SQUASHFS error: lzo decompression failed, data probably corrupt [ 105.619032][ T4504] SQUASHFS error: Failed to read block 0x28d: -5 [ 105.621499][ T4514] Unsupported ieee802154 address type: 0 [ 105.669769][ T4504] SQUASHFS error: Unable to read metadata cache entry [28b] [ 105.677069][ T4504] SQUASHFS error: Unable to read inode 0x11f [ 105.698309][ T4435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.881207][ T4435] device hsr_slave_0 entered promiscuous mode [ 105.909923][ T4435] device hsr_slave_1 entered promiscuous mode [ 105.918420][ T4520] loop3: detected capacity change from 0 to 1024 [ 105.933210][ T4435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.949716][ T4435] Cannot create hsr debugfs directory [ 105.998891][ T4520] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 106.059077][ T4520] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 106.098898][ T4520] System zones: 0-1, 4-36, 102-102 [ 106.147539][ T4520] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 106.457578][ T4535] sctp: [Deprecated]: syz.3.161 (pid 4535) Use of int in max_burst socket option deprecated. [ 106.457578][ T4535] Use struct sctp_assoc_value instead [ 107.232989][ T4534] loop0: detected capacity change from 0 to 131072 [ 107.285947][ T4539] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.504696][ T4534] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 107.514450][ T4534] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.525772][ T4534] F2FS-fs (loop0): invalid crc value [ 107.533465][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 107.610647][ T4534] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.728020][ T4534] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 107.736495][ T4534] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 107.878269][ T4551] loop2: detected capacity change from 0 to 512 [ 107.983021][ T4553] loop3: detected capacity change from 0 to 256 [ 109.334922][ T4557] F2FS-fs (loop0): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 109.510303][ T4553] FAT-fs (loop3): Directory bread(block 1285) failed [ 109.566113][ T4553] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 109.590670][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 109.961653][ T4027] device hsr_slave_0 left promiscuous mode [ 109.968317][ T4027] device hsr_slave_1 left promiscuous mode [ 110.004355][ T4553] FAT-fs (loop3): Directory bread(block 1285) failed [ 110.024381][ T4027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.039641][ T4027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.057573][ T4027] device bridge_slave_1 left promiscuous mode [ 110.067249][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.095053][ T4027] device bridge_slave_0 left promiscuous mode [ 110.110970][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.139892][ T4027] device veth1_macvtap left promiscuous mode [ 110.145933][ T4027] device veth0_macvtap left promiscuous mode [ 110.169596][ T4027] device veth1_vlan left promiscuous mode [ 110.180170][ T4027] device veth0_vlan left promiscuous mode [ 110.437343][ T4027] bond1 (unregistering): Released all slaves [ 110.568889][ T4027] team0 (unregistering): Port device team_slave_1 removed [ 110.587903][ T4027] team0 (unregistering): Port device team_slave_0 removed [ 110.605172][ T4027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.623111][ T4027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.763983][ T4027] bond0 (unregistering): Released all slaves [ 111.125891][ T4592] loop4: detected capacity change from 0 to 1024 [ 111.145861][ T4435] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.179424][ T4435] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.208763][ T4435] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.247156][ T4598] loop3: detected capacity change from 0 to 8 [ 111.260723][ T4592] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 111.289857][ T4435] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.312923][ T4592] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 111.330219][ T4592] System zones: 0-1, 4-36, 102-102 [ 111.337451][ T4598] SQUASHFS error: lzo decompression failed, data probably corrupt [ 111.348545][ T4598] SQUASHFS error: Failed to read block 0x28d: -5 [ 111.355859][ T4598] SQUASHFS error: Unable to read metadata cache entry [28b] [ 111.363377][ T4598] SQUASHFS error: Unable to read inode 0x11f [ 111.391755][ T4592] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 111.550671][ T4605] sctp: [Deprecated]: syz.4.175 (pid 4605) Use of int in max_burst socket option deprecated. [ 111.550671][ T4605] Use struct sctp_assoc_value instead [ 111.751879][ T4435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.775434][ T4611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.177'. [ 111.856190][ T4435] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.875486][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.922756][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.964002][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.002070][ T4620] loop2: detected capacity change from 0 to 1024 [ 112.002212][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.066894][ T4620] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 112.104395][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.111500][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.128146][ T4620] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 112.137408][ T4620] System zones: 0-1, 4-36, 102-102 [ 112.170215][ T4620] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 112.187812][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.197457][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.206177][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.213267][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.231759][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.240871][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.249883][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.260427][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.339406][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.375203][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.392185][ T4630] sctp: [Deprecated]: syz.2.190 (pid 4630) Use of int in max_burst socket option deprecated. [ 112.392185][ T4630] Use struct sctp_assoc_value instead [ 112.414177][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.427058][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.467620][ T4435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.577805][ T4435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.792872][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.819528][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.864947][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.894450][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.089736][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.401569][ T4654] loop4: detected capacity change from 0 to 64 [ 114.223124][ T4658] loop2: detected capacity change from 0 to 1024 [ 114.359718][ T4658] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.449807][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.466998][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.501231][ T4435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.590669][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.607528][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.650108][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.678521][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.726455][ T4435] device veth0_vlan entered promiscuous mode [ 114.739044][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.753492][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.768152][ T4435] device veth1_vlan entered promiscuous mode [ 114.828738][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.851003][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.859319][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.877144][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.891542][ T4435] device veth0_macvtap entered promiscuous mode [ 114.907063][ T4435] device veth1_macvtap entered promiscuous mode [ 114.937023][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.953679][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.965316][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.983730][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.995183][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.012133][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.031391][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.074454][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.104928][ T4696] loop2: detected capacity change from 0 to 47 [ 115.129052][ T4695] loop3: detected capacity change from 0 to 1024 [ 115.132133][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.174646][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.201642][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.253894][ T4695] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 115.285516][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.305994][ T4695] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 115.319070][ T4695] System zones: 0-1, 4-36, 102-102 [ 115.319167][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.341323][ T4695] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 115.361345][ T4708] MINIX-fs: deleted inode referenced: 9 [ 115.390628][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.402935][ T4708] MINIX-fs: deleted inode referenced: 9 [ 115.442626][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.492895][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.512331][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.531160][ T4712] sctp: [Deprecated]: syz.3.194 (pid 4712) Use of int in max_burst socket option deprecated. [ 115.531160][ T4712] Use struct sctp_assoc_value instead [ 115.542701][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.566977][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.578335][ T4435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.609337][ T4435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.647009][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.684227][ T4696] device bond0 entered promiscuous mode [ 115.694296][ T4696] device bond_slave_0 entered promiscuous mode [ 115.739868][ T4696] device bond_slave_1 entered promiscuous mode [ 115.756116][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.781148][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.803490][ T4435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.844113][ T4435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.880672][ T4435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.903883][ T4435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.918970][ T4723] loop3: detected capacity change from 0 to 8 [ 116.020198][ T4694] device bond0 left promiscuous mode [ 116.025761][ T4694] device bond_slave_0 left promiscuous mode [ 116.101686][ T3585] Bluetooth: hci1: link tx timeout [ 116.107286][ T3585] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.160305][ T4723] 9pnet: Insufficient options for proto=fd [ 116.169847][ T4694] device bond_slave_1 left promiscuous mode [ 116.227224][ T4727] loop0: detected capacity change from 0 to 1024 [ 116.328500][ T2636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.342899][ T3660] attempt to access beyond end of device [ 116.342899][ T3660] loop2: rw=1, want=50, limit=47 [ 116.357510][ T4727] EXT4-fs (loop0): Unrecognized mount option "subj_role=" or missing value [ 116.408726][ T2636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.419542][ T3660] buffer_io_error: 7 callbacks suppressed [ 116.419555][ T3660] Buffer I/O error on dev loop2, logical block 24, lost async page write [ 116.492245][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.534140][ T3694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.548035][ T3694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.557596][ T3660] attempt to access beyond end of device [ 116.557596][ T3660] loop2: rw=1, want=52, limit=47 [ 116.580522][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.590469][ T4732] loop4: detected capacity change from 0 to 164 [ 116.649093][ T3660] Buffer I/O error on dev loop2, logical block 25, lost async page write [ 116.728970][ T4735] loop1: detected capacity change from 0 to 1024 [ 117.063753][ T4741] kernel read not supported for file /eth0 (pid: 4741 comm: syz.2.198) [ 117.080114][ T4741] program syz.2.198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.107357][ T26] audit: type=1800 audit(1142.043:100): pid=4741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.198" name="eth0" dev="mqueue" ino=37921 res=0 errno=0 [ 118.157405][ T3615] Bluetooth: hci1: command 0x0406 tx timeout [ 118.180718][ T4735] hfsplus: xattr searching failed [ 118.278092][ T4743] tc_dump_action: action bad kind [ 118.333144][ T4745] hfsplus: xattr searching failed [ 118.501961][ T4756] loop3: detected capacity change from 0 to 1024 [ 118.644944][ T4756] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 119.471077][ T4756] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 119.480301][ T4756] System zones: 0-1, 4-36, 102-102 [ 119.544206][ T4756] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 119.666077][ T3660] hfsplus: b-tree write err: -5, ino 3 [ 119.753982][ T4756] sctp: [Deprecated]: syz.3.205 (pid 4756) Use of int in max_burst socket option deprecated. [ 119.753982][ T4756] Use struct sctp_assoc_value instead [ 119.910429][ T145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.122847][ T145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.929100][ T145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.277835][ T145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.664895][ T4792] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.168439][ T4780] chnl_net:caif_netlink_parms(): no params data found [ 122.310029][ T3618] Bluetooth: hci1: command 0x0409 tx timeout [ 122.554224][ T4812] loop4: detected capacity change from 0 to 256 [ 123.546193][ T4828] loop2: detected capacity change from 0 to 1024 [ 123.602793][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 123.623918][ T4828] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 123.660195][ T4780] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.730428][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.737704][ T4828] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 123.780653][ T4780] device bridge_slave_0 entered promiscuous mode [ 123.802762][ T4828] System zones: 0-1, 4-36, 102-102 [ 123.808934][ T4828] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 123.857902][ T4780] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.902308][ T3658] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 123.909001][ T4780] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.923873][ T4780] device bridge_slave_1 entered promiscuous mode [ 124.016114][ T4828] sctp: [Deprecated]: syz.2.223 (pid 4828) Use of int in max_burst socket option deprecated. [ 124.016114][ T4828] Use struct sctp_assoc_value instead [ 124.060257][ T4780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.132013][ T4780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.189589][ T3658] usb 5-1: Using ep0 maxpacket: 16 [ 124.268719][ T4857] loop1: detected capacity change from 0 to 256 [ 124.309752][ T3658] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 124.386494][ T4857] loop1: detected capacity change from 0 to 512 [ 124.399651][ T3666] Bluetooth: hci1: command 0x041b tx timeout [ 124.406244][ T4780] team0: Port device team_slave_0 added [ 124.480350][ T4857] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 124.520904][ T4860] input: syz1 as /devices/virtual/input/input5 [ 124.531167][ T3658] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 124.568522][ T3658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.615268][ T3658] usb 5-1: Product: syz [ 124.644829][ T3658] usb 5-1: Manufacturer: syz [ 124.660654][ T26] audit: type=1326 audit(3199.633:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.1.230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe20c55e79 code=0x0 [ 124.680882][ T3658] usb 5-1: SerialNumber: syz [ 124.702573][ T3658] usb 5-1: config 0 descriptor?? [ 124.743863][ T3658] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 124.785280][ T3658] usb 5-1: Detected FT232H [ 124.813601][ T4780] team0: Port device team_slave_1 added [ 124.887465][ T4780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.918190][ T4780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.944125][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.969116][ T4780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.982133][ T3658] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 124.999569][ T3658] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 125.007844][ T4780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.015298][ T4780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.041948][ T3658] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 125.050900][ T3658] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 125.055721][ T4780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.087720][ T3658] usb 5-1: USB disconnect, device number 6 [ 125.110549][ T3658] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 125.120177][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.138050][ T3658] ftdi_sio 5-1:0.0: device disconnected [ 125.219619][ T4780] device hsr_slave_0 entered promiscuous mode [ 125.242691][ T4780] device hsr_slave_1 entered promiscuous mode [ 125.336193][ T4890] capability: warning: `syz.3.234' uses 32-bit capabilities (legacy support in use) [ 126.201048][ T13] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 126.241550][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 126.242500][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.287566][ T13] usb 3-1: config 0 descriptor?? [ 126.330538][ T13] cp210x 3-1:0.0: cp210x converter detected [ 126.469568][ T3618] Bluetooth: hci1: command 0x040f tx timeout [ 126.488012][ T4909] loop4: detected capacity change from 0 to 1024 [ 126.534529][ T145] device hsr_slave_0 left promiscuous mode [ 126.546877][ T145] device hsr_slave_1 left promiscuous mode [ 126.561293][ T4909] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 126.573436][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.596243][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.624053][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.642378][ T4920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.231'. [ 126.655510][ T4920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'. [ 126.655587][ T4909] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 126.655845][ T4909] System zones: [ 126.676273][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.706442][ T145] device bridge_slave_1 left promiscuous mode [ 126.790037][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.859589][ T4909] 0-1, 4-36, 102-102 [ 126.864836][ T4909] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 126.882281][ T145] device bridge_slave_0 left promiscuous mode [ 126.894531][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.970756][ T145] device veth1_macvtap left promiscuous mode [ 126.987772][ T145] device veth0_macvtap left promiscuous mode [ 126.996540][ T145] device veth1_vlan left promiscuous mode [ 127.007545][ T145] device veth0_vlan left promiscuous mode [ 127.092748][ T4926] sctp: [Deprecated]: syz.4.238 (pid 4926) Use of int in max_burst socket option deprecated. [ 127.092748][ T4926] Use struct sctp_assoc_value instead [ 127.310934][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 127.423525][ T4929] syz.3.241[4929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.423618][ T4929] syz.3.241[4929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.469361][ T4929] netlink: 72 bytes leftover after parsing attributes in process `syz.3.241'. [ 127.772998][ T145] team0 (unregistering): Port device team_slave_1 removed [ 127.798816][ T145] team0 (unregistering): Port device team_slave_0 removed [ 127.823788][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.860830][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.995967][ T145] bond0 (unregistering): Released all slaves [ 128.087663][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 128.239632][ T13] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 128.257059][ T13] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 128.299089][ T13] usb 3-1: cp210x converter now attached to ttyUSB0 [ 128.344429][ T13] usb 3-1: USB disconnect, device number 3 [ 128.367871][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 128.603405][ T3666] Bluetooth: hci1: command 0x0419 tx timeout [ 129.286734][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 129.360670][ T13] cp210x 3-1:0.0: device disconnected [ 129.643942][ T4967] loop4: detected capacity change from 0 to 512 [ 130.328696][ T4967] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.346897][ T4965] fs-verity: sha512 using implementation "sha512-avx2" [ 130.354172][ T4965] EXT4-fs warning (device loop4): ext4_begin_enable_verity:136: inode #13: comm syz.4.247: verity is only allowed on extent-based files [ 130.594040][ T4974] loop2: detected capacity change from 0 to 8 [ 130.630081][ T3618] Bluetooth: hci1: command 0x0405 tx timeout [ 130.833076][ T4974] 9pnet: Insufficient options for proto=fd [ 130.840206][ T4979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 130.876368][ T4780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.951913][ T4780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.995595][ T4780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.112082][ T4780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.628230][ T4780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.696480][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.727503][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.782855][ T4780] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.851544][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.922120][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.971610][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.978710][ T1472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.094891][ T5007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.255'. [ 132.100360][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.133786][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.159301][ T5010] netlink: 48 bytes leftover after parsing attributes in process `syz.1.255'. [ 132.198354][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.226790][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.233945][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.655251][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.661570][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.809468][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.841653][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.866696][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.900942][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.948734][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.956759][ T5021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.977772][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.009073][ T5021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.024293][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.070287][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.101007][ T5026] loop1: detected capacity change from 0 to 256 [ 133.110552][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.143607][ T4780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.179748][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.189941][ T5026] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 133.209241][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.224701][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.312665][ T5002] loop4: detected capacity change from 0 to 40427 [ 133.456963][ T5002] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.536781][ T5043] kvm: pic: non byte write [ 133.593016][ T5045] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 133.650019][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.669660][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.711107][ T5002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.735226][ T4780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.934433][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.976947][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.058116][ T5055] dlm: no locking on control device [ 134.296815][ T5057] loop3: detected capacity change from 0 to 512 [ 134.313474][ T4780] device veth0_vlan entered promiscuous mode [ 134.356291][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.373765][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.474766][ T4780] device veth1_vlan entered promiscuous mode [ 134.483830][ T3578] attempt to access beyond end of device [ 134.483830][ T3578] loop4: rw=2049, want=45120, limit=40427 [ 134.500644][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'. [ 134.549737][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.596688][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.640588][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.714927][ T4780] device veth0_macvtap entered promiscuous mode [ 134.759312][ T5068] loop1: detected capacity change from 0 to 8 [ 134.770565][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.794547][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.826339][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.838496][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.884243][ T4780] device veth1_macvtap entered promiscuous mode [ 134.922660][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.938808][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.948819][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.963730][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.975921][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.993588][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.151603][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.212518][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.271424][ T4780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.302173][ T5062] 9pnet: Insufficient options for proto=fd [ 135.337394][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.353744][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.415890][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.467571][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.539524][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.586426][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.643682][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.683635][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.727789][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.780574][ T4780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.854969][ T4780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.940017][ T4780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.975969][ T4780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.015435][ T4780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.054351][ T5097] netlink: 'syz.1.267': attribute type 3 has an invalid length. [ 136.066172][ T4780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.106167][ T5097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.267'. [ 136.107059][ T4780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.175093][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.205549][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.258312][ T5100] netlink: 84 bytes leftover after parsing attributes in process `syz.2.269'. [ 136.451270][ T3661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.498017][ T3661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.513990][ C0] eth0: bad gso: type: 1, size: 1408 [ 136.583309][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.619655][ T1472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.619718][ T1472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.623099][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.807138][ T5133] ODEBUG: Out of memory. ODEBUG disabled [ 137.244704][ T5148] loop3: detected capacity change from 0 to 512 [ 137.590077][ T3617] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.611674][ T5154] loop4: detected capacity change from 0 to 8 [ 137.777844][ T5154] 9pnet: Insufficient options for proto=fd [ 137.859533][ T3617] usb 1-1: Using ep0 maxpacket: 32 [ 137.979575][ T3617] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 138.199605][ T3617] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 138.208850][ T3617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.209957][ T3666] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.261618][ T5176] loop3: detected capacity change from 0 to 512 [ 138.299572][ T3617] usb 1-1: Product: syz [ 138.323015][ T3617] usb 1-1: Manufacturer: syz [ 138.360870][ T3617] usb 1-1: SerialNumber: syz [ 138.389369][ T3617] usb 1-1: config 0 descriptor?? [ 138.408459][ T5176] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.458219][ T5176] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.280: Directory hole found for htree leaf block 0 [ 138.520146][ T3666] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 138.578818][ T5176] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.280: Directory hole found for htree leaf block 0 [ 138.610085][ T3666] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.618961][ T3666] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.659514][ T3666] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.740056][ T3666] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.629007][ T3615] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 140.511290][ T3615] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.540814][ T3615] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.920757][ T3615] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.937776][ T3615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.946736][ T3615] usb 4-1: SerialNumber: syz [ 142.385889][ T3658] usb 1-1: USB disconnect, device number 6 [ 142.401517][ T3666] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.421585][ T3615] usb 4-1: 0:2 : does not exist [ 142.438245][ T3666] usb 3-1: config 0 interface 0 has no altsetting 0 [ 142.440182][ T3615] usb 4-1: unit 5: unexpected type 0x0c [ 142.537885][ T3615] usb 4-1: USB disconnect, device number 2 [ 142.560851][ T3666] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 142.568469][ T3666] usb 3-1: can't read configurations, error -71 [ 142.787619][ T5202] loop2: detected capacity change from 0 to 256 [ 142.869955][ T5198] loop1: detected capacity change from 0 to 512 [ 142.907430][ T5202] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 142.935890][ T5204] loop0: detected capacity change from 0 to 1024 [ 142.948425][ T5202] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 142.971947][ T5198] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 143.050955][ T5198] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 143.077646][ T5204] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 143.156703][ T5212] loop3: detected capacity change from 0 to 1024 [ 143.166121][ T5204] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 143.179210][ T5212] EXT4-fs (loop3): Ignoring removed orlov option [ 143.179412][ T5198] EXT4-fs (loop1): orphan cleanup on readonly fs [ 143.186374][ T5212] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 143.200482][ T5204] System zones: 0-1, 4-36, 102-102 [ 143.206299][ T5204] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 143.224432][ T5198] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.283: bad orphan inode 15 [ 143.289568][ T5198] ext4_test_bit(bit=14, block=2) = 0 [ 143.305667][ T5198] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,,errors=continue. Quota mode: none. [ 143.414112][ T5217] sctp: [Deprecated]: syz.0.284 (pid 5217) Use of int in max_burst socket option deprecated. [ 143.414112][ T5217] Use struct sctp_assoc_value instead [ 143.451436][ T3708] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000005) [ 143.477163][ T5212] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 143.539713][ T3708] exFAT-fs (loop2): Filesystem has been set read-only [ 143.549868][ T3708] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000005) [ 143.634959][ T5198] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 3: comm syz.1.283: lblock 0 mapped to illegal pblock 3 (length 1) [ 144.201122][ T5225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.287'. [ 144.294301][ T5230] netlink: 'syz.0.289': attribute type 16 has an invalid length. [ 144.307679][ T5230] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.289'. [ 144.367100][ T5233] loop1: detected capacity change from 0 to 512 [ 144.410189][ T3694] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.632472][ T5239] device bond0 entered promiscuous mode [ 144.667178][ T5239] device bond_slave_0 entered promiscuous mode [ 144.675086][ T5239] device bond_slave_1 entered promiscuous mode [ 144.717020][ T3694] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.825796][ T3694] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.869631][ T5239] device bond0 left promiscuous mode [ 144.879398][ T5239] device bond_slave_0 left promiscuous mode [ 144.886086][ T5239] device bond_slave_1 left promiscuous mode [ 144.952662][ T3694] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.234391][ T5252] loop0: detected capacity change from 0 to 2048 [ 145.395396][ T5260] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.529596][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.556897][ T5265] loop4: detected capacity change from 0 to 1024 [ 145.631474][ T5265] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 145.669759][ T5265] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 145.678217][ T5265] System zones: 0-1, 4-36, 102-102 [ 145.694272][ T5265] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 145.754927][ T5265] sctp: [Deprecated]: syz.4.299 (pid 5265) Use of int in max_burst socket option deprecated. [ 145.754927][ T5265] Use struct sctp_assoc_value instead [ 145.779808][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 145.781056][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 145.851332][ T5277] loop1: detected capacity change from 0 to 2048 [ 145.894859][ T5277] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 145.904999][ T7] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 146.016481][ T5277] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 146.129935][ T7] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 146.151420][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.160355][ T7] usb 4-1: Product: syz [ 146.166162][ T7] usb 4-1: Manufacturer: syz [ 146.174747][ T7] usb 4-1: SerialNumber: syz [ 146.193065][ T7] usb 4-1: config 0 descriptor?? [ 146.292389][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.346418][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.398079][ T5242] device bridge_slave_0 entered promiscuous mode [ 146.448009][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.151434][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 147.627835][ T5254] sched: RT throttling activated [ 147.646632][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.136210][ T3658] usb 4-1: USB disconnect, device number 3 [ 150.145553][ T5242] device bridge_slave_1 entered promiscuous mode [ 150.231010][ T4435] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /25/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=117440527, rec_len=0, size=2048 fake=0 [ 150.342333][ T4435] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 150.343130][ T5312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.407231][ T5314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'. [ 150.495767][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.572280][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.588190][ T5319] loop0: detected capacity change from 0 to 512 [ 150.618943][ T5321] loop1: detected capacity change from 0 to 128 [ 150.688080][ T5242] team0: Port device team_slave_0 added [ 150.984130][ T5321] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.305: iget: checksum invalid [ 151.000580][ T5321] EXT4-fs (loop1): get root inode failed [ 151.006380][ T5321] EXT4-fs (loop1): mount failed [ 151.061190][ T5242] team0: Port device team_slave_1 added [ 151.198233][ T3694] device hsr_slave_0 left promiscuous mode [ 151.217023][ T3694] device hsr_slave_1 left promiscuous mode [ 151.299010][ T3694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.307017][ T3694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.324512][ T3694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.332388][ T3694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.355255][ T3694] device bridge_slave_1 left promiscuous mode [ 151.374398][ T3694] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.386227][ T3694] device bridge_slave_0 left promiscuous mode [ 151.394677][ T3694] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.411095][ T3694] device veth1_macvtap left promiscuous mode [ 151.422757][ T3694] device veth0_macvtap left promiscuous mode [ 151.439139][ T3694] device veth1_vlan left promiscuous mode [ 151.501462][ T3694] device veth0_vlan left promiscuous mode [ 152.611257][ T2988] Bluetooth: hci3: command 0x041b tx timeout [ 152.952031][ T5353] loop3: detected capacity change from 0 to 1024 [ 153.077957][ T5353] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 153.132741][ T5353] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 153.141732][ T5353] System zones: 0-1, 4-36, 102-102 [ 153.144343][ T21] libceph: connect (1)[c::]:6789 error -101 [ 153.147967][ T5353] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 153.170710][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 153.205567][ T3694] team0 (unregistering): Port device team_slave_1 removed [ 153.216303][ T21] libceph: connect (1)[c::]:6789 error -101 [ 153.239064][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 153.260595][ T3694] team0 (unregistering): Port device team_slave_0 removed [ 153.281932][ T5361] sctp: [Deprecated]: syz.3.310 (pid 5361) Use of int in max_burst socket option deprecated. [ 153.281932][ T5361] Use struct sctp_assoc_value instead [ 153.302596][ T3694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.333647][ T3694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.501485][ T21] libceph: connect (1)[c::]:6789 error -101 [ 153.507963][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 153.538772][ T3694] bond0 (unregistering): Released all slaves [ 153.545723][ T5351] ceph: No mds server is up or the cluster is laggy [ 153.678046][ T5346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.309'. [ 153.820828][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.828169][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.921464][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.965817][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.990060][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.096441][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.789023][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 155.126764][ T5375] loop3: detected capacity change from 0 to 512 [ 155.161621][ T5369] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 155.264086][ T5242] device hsr_slave_0 entered promiscuous mode [ 155.318298][ T5242] device hsr_slave_1 entered promiscuous mode [ 155.353812][ T5375] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.387575][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.413660][ T5242] Cannot create hsr debugfs directory [ 155.431591][ T5386] loop1: detected capacity change from 0 to 512 [ 155.508063][ T5383] loop4: detected capacity change from 0 to 128 [ 155.564465][ T5387] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:0 [ 155.628511][ T5390] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:0 [ 155.770433][ T5383] xt_ecn: cannot match TCP bits for non-tcp packets [ 156.597281][ T5401] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.663080][ T5406] loop4: detected capacity change from 0 to 128 [ 156.974848][ T5406] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.997331][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 157.054146][ T5406] syz.4.320 (pid 5406) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 157.067323][ T5413] Invalid ELF header magic: != ELF [ 158.109224][ T5425] loop3: detected capacity change from 0 to 1024 [ 158.139845][ T5417] fscrypt (loop4, inode 12): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 158.678725][ T5425] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 159.016648][ T5425] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 159.041231][ T5425] System zones: 0-1, 4-36, 102-102 [ 159.048050][ T5425] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 159.139014][ T5242] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.151327][ T5439] sctp: [Deprecated]: syz.3.323 (pid 5439) Use of int in max_burst socket option deprecated. [ 159.151327][ T5439] Use struct sctp_assoc_value instead [ 159.170797][ T5242] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.182035][ T5242] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.197166][ T5242] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.367954][ T5446] loop0: detected capacity change from 0 to 512 [ 159.916663][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.014318][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.027110][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.088696][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.286332][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.322425][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.748090][ T2636] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.755284][ T2636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.910210][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.918576][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.985985][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.013578][ T5476] loop0: detected capacity change from 0 to 2048 [ 161.031023][ T2636] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.038080][ T2636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.134524][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.161805][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.190642][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.219393][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.255281][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.270632][ T5476] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.466280][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.515037][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.607380][ T5502] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 161.624148][ T5502] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 161.637434][ T5502] EXT4-fs (loop0): This should not happen!! Data will be lost [ 161.637434][ T5502] [ 161.647213][ T5502] EXT4-fs (loop0): Total free blocks count 0 [ 161.653294][ T5502] EXT4-fs (loop0): Free/Dirty block details [ 161.659267][ T5502] EXT4-fs (loop0): free_blocks=2415919104 [ 161.665112][ T5502] EXT4-fs (loop0): dirty_blocks=16 [ 161.670300][ T5502] EXT4-fs (loop0): Block reservation details [ 161.676334][ T5502] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 161.721784][ T5502] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 161.734213][ T5502] EXT4-fs (loop0): This should not happen!! Data will be lost [ 161.734213][ T5502] [ 162.010853][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.053044][ T5242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.339138][ T5242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.604746][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.770922][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.779292][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.825525][ T5503] netlink: 36 bytes leftover after parsing attributes in process `syz.3.334'. [ 162.980470][ T5515] loop4: detected capacity change from 0 to 1024 [ 163.754591][ T5515] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 163.779019][ T5515] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 163.811720][ T5515] System zones: 0-1, 4-36, 102-102 [ 163.817808][ T5515] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 163.947976][ T5532] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.279880][ T5533] loop3: detected capacity change from 0 to 512 [ 164.700261][ T5535] sctp: [Deprecated]: syz.4.337 (pid 5535) Use of int in max_burst socket option deprecated. [ 164.700261][ T5535] Use struct sctp_assoc_value instead [ 164.710720][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.869915][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.898725][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.948052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.273063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.312887][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.325658][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.354889][ T5242] device veth0_vlan entered promiscuous mode [ 165.373329][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.394249][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.415955][ T5242] device veth1_vlan entered promiscuous mode [ 165.606497][ T5242] device veth0_macvtap entered promiscuous mode [ 165.606646][ T5556] loop0: detected capacity change from 0 to 1024 [ 165.671642][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.694217][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.704795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.714222][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.771005][ T5242] device veth1_macvtap entered promiscuous mode [ 165.787019][ T5556] hfsplus: xattr searching failed [ 165.797838][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.816682][ T5556] hfsplus: xattr searching failed [ 165.817042][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.985197][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.381534][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.584783][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.596080][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.606965][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.618319][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.631164][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.720010][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.789010][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.807268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.830274][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.841378][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.874897][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.889486][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.900480][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.910865][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.922382][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.942795][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.962127][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.988671][ T5580] loop3: detected capacity change from 0 to 512 [ 167.000403][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.016272][ T1472] hfsplus: b-tree write err: -5, ino 3 [ 167.048674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.066987][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.127440][ T5242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.166740][ T5242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.398267][ T5580] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.426329][ T5242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.549392][ T5593] loop0: detected capacity change from 0 to 256 [ 167.720051][ T4027] wlan1: Trigger new scan to find an IBSS to join [ 167.852064][ T5242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.082928][ T5583] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.349: Directory hole found for htree leaf block 0 [ 168.183132][ T5597] loop4: detected capacity change from 0 to 512 [ 168.505257][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.519228][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.980946][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.105887][ T5509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.136226][ T5509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.239968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.353223][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 169.613510][ T5620] loop4: detected capacity change from 0 to 256 [ 170.240903][ T5628] loop3: detected capacity change from 0 to 1024 [ 170.302395][ T5620] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 170.332052][ T26] audit: type=1800 audit(9395.307:102): pid=5616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.357" name="bus" dev="loop4" ino=1048612 res=0 errno=0 [ 170.782753][ T5634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 170.984975][ T5635] Falling back ldisc for ttyS3. [ 171.127813][ T5628] hfsplus: xattr searching failed [ 171.142342][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.150314][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.181931][ T5641] hfsplus: xattr searching failed [ 172.987537][ T5650] loop1: detected capacity change from 0 to 164 [ 172.989493][ T3704] wlan1: Trigger new scan to find an IBSS to join [ 173.005703][ T1077] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 173.031844][ T1077] Bluetooth: hci2: Injecting HCI hardware error event [ 173.098963][ T3583] Bluetooth: hci2: hardware error 0x00 [ 173.461005][ T5651] loop4: detected capacity change from 0 to 2048 [ 174.087195][ T5650] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 174.102612][ T3660] hfsplus: b-tree write err: -5, ino 3 [ 174.111759][ T5648] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 174.124748][ T5648] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 174.127175][ T5659] loop2: detected capacity change from 0 to 512 [ 174.150518][ T5651] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 174.187962][ T5651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.048126][ T26] audit: type=1107 audit(9400.017:103): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 175.093839][ T5667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.106147][ T5670] xt_l2tp: v2 sid > 0xffff: 16777216 [ 175.174487][ T5669] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 175.213455][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.250713][ T5670] device vlan2 entered promiscuous mode [ 175.264716][ T5670] team0: Device vlan2 is already an upper device of the team interface [ 175.314826][ T5669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 175.346160][ T155] wlan1: Creating new IBSS network, BSSID 12:11:6e:6b:8e:53 [ 175.366219][ T5678] device syzkaller1 entered promiscuous mode [ 175.527123][ T5680] loop2: detected capacity change from 0 to 512 [ 175.776270][ T5680] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.119545][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 176.239700][ T13] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 176.499749][ T13] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 176.614505][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.643423][ T13] usb 1-1: Product: syz [ 176.647690][ T13] usb 1-1: Manufacturer: syz [ 176.729174][ T5699] loop2: detected capacity change from 0 to 512 [ 177.278490][ T13] usb 1-1: SerialNumber: syz [ 177.289965][ T13] usb 1-1: config 0 descriptor?? [ 177.310668][ T5698] loop1: detected capacity change from 0 to 8 [ 177.358630][ T13] usb 1-1: USB disconnect, device number 7 [ 177.415886][ T5699] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.421960][ T5704] loop4: detected capacity change from 0 to 512 [ 177.438178][ T5697] EXT4-fs warning (device loop2): ext4_begin_enable_verity:136: inode #13: comm syz.2.376: verity is only allowed on extent-based files [ 177.472671][ T5698] 9pnet: Insufficient options for proto=fd [ 177.502438][ T5701] print_req_error: 7 callbacks suppressed [ 177.502452][ T5701] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.844448][ T26] audit: type=1326 audit(9402.817:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5705 comm="syz.0.379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb99ae79 code=0x0 [ 178.571312][ T5704] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.612423][ T5716] loop0: detected capacity change from 0 to 512 [ 178.631606][ T5713] loop2: detected capacity change from 0 to 512 [ 178.699998][ T5713] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 178.716691][ T26] audit: type=1326 audit(9403.687:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5703 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7daf25be79 code=0x7ffc0000 [ 178.832381][ T5713] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,errors=remount-ro,nombcache,sysvgroups,. Quota mode: writeback. [ 178.982343][ T26] audit: type=1326 audit(9403.767:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5703 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7daf25be79 code=0x7ffc0000 [ 179.005990][ T26] audit: type=1326 audit(9403.947:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5703 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7daf25be79 code=0x7ffc0000 [ 179.682190][ T26] audit: type=1326 audit(9403.947:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5703 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7daf25be79 code=0x7ffc0000 [ 179.912364][ T26] audit: type=1326 audit(9403.947:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5703 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7daf25be79 code=0x7ffc0000 [ 180.235559][ T26] audit: type=1326 audit(9403.957:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5703 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7daf25be79 code=0x7ffc0000 [ 180.351818][ T5756] loop2: detected capacity change from 0 to 512 [ 180.943160][ T26] audit: type=1326 audit(9404.337:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5703 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7daf25be79 code=0x7ffc0000 [ 181.036004][ T5756] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.050261][ T26] audit: type=1326 audit(9404.337:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5703 comm="syz.4.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7daf25be79 code=0x7ffc0000 [ 181.111737][ T5763] loop4: detected capacity change from 0 to 16 [ 181.237048][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 181.328678][ T5763] erofs: (device loop4): mounted with root inode @ nid 36. [ 181.463370][ T5767] xt_bpf: check failed: parse error [ 182.190023][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 182.330930][ T5772] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 182.631398][ T5773] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 182.648413][ T5774] loop3: detected capacity change from 0 to 1024 [ 182.694393][ T5777] loop2: detected capacity change from 0 to 512 [ 182.704404][ T5776] loop0: detected capacity change from 0 to 2048 [ 182.767032][ T5774] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 182.812327][ T5776] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.812816][ T5779] loop4: detected capacity change from 0 to 256 [ 182.828952][ T5774] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 182.837939][ T5774] System zones: 0-1, 4-36, 102-102 [ 182.843438][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 182.873217][ T5774] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 182.899636][ T5777] EXT4-fs (loop2): Unrecognized mount option "func=PATH_CHECK" or missing value [ 182.980181][ T5779] netlink: 152 bytes leftover after parsing attributes in process `syz.4.395'. [ 183.029618][ T13] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 183.058288][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.088639][ T13] usb 2-1: Product: syz [ 183.098126][ T5783] sctp: [Deprecated]: syz.3.394 (pid 5783) Use of int in max_burst socket option deprecated. [ 183.098126][ T5783] Use struct sctp_assoc_value instead [ 183.140738][ T13] usb 2-1: Manufacturer: syz [ 183.161414][ T13] usb 2-1: SerialNumber: syz [ 183.570363][ T13] usb 2-1: config 0 descriptor?? [ 183.589667][ T13] usb 2-1: can't set config #0, error -71 [ 183.596851][ T13] usb 2-1: USB disconnect, device number 5 [ 183.737376][ T5790] loop3: detected capacity change from 0 to 512 [ 183.816233][ T5792] loop0: detected capacity change from 0 to 764 [ 183.840608][ T2988] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 183.903876][ T5795] loop2: detected capacity change from 0 to 1024 [ 184.069477][ T13] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 184.106410][ T5795] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 184.129929][ T2988] usb 5-1: device descriptor read/64, error -71 [ 184.145322][ T13] Bluetooth: hci4: Injecting HCI hardware error event [ 184.213537][ T5795] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 184.244994][ T3584] Bluetooth: hci4: hardware error 0x00 [ 184.341726][ T5795] System zones: 0-1, 4-36, 102-102 [ 184.347817][ T5795] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 184.399987][ T2988] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.589936][ T2988] usb 5-1: device descriptor read/64, error -71 [ 184.792660][ T5807] sctp: [Deprecated]: syz.2.397 (pid 5807) Use of int in max_burst socket option deprecated. [ 184.792660][ T5807] Use struct sctp_assoc_value instead [ 184.820075][ T2988] usb usb5-port1: attempt power cycle [ 185.106482][ T5810] netlink: 'syz.0.402': attribute type 4 has an invalid length. [ 185.230033][ T2988] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.260762][ T5810] loop0: detected capacity change from 0 to 1024 [ 185.330089][ T2988] usb 5-1: device descriptor read/8, error -71 [ 185.650318][ T5819] xt_bpf: check failed: parse error [ 185.800130][ T2988] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 186.350169][ T2988] usb 5-1: device descriptor read/8, error -71 [ 186.521136][ T2988] usb usb5-port1: unable to enumerate USB device [ 186.662994][ T5829] xt_bpf: check failed: parse error [ 187.334575][ T5831] loop4: detected capacity change from 0 to 16 [ 187.382313][ T5833] loop2: detected capacity change from 0 to 1024 [ 187.403189][ T5831] erofs: (device loop4): mounted with root inode @ nid 36. [ 187.422201][ T5833] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 187.481312][ T5833] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 187.580488][ T5833] System zones: 0-1, 4-36, 102-102 [ 187.595090][ T5833] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 187.759084][ T5840] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 188.339502][ T3614] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 188.424897][ T5845] loop3: detected capacity change from 0 to 1024 [ 188.432333][ T5841] sctp: [Deprecated]: syz.2.408 (pid 5841) Use of int in max_burst socket option deprecated. [ 188.432333][ T5841] Use struct sctp_assoc_value instead [ 188.482998][ T5845] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 188.553006][ T5845] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 188.566602][ T5845] System zones: 0-1, 4-36, 102-102 [ 188.566865][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 188.572788][ T5845] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 188.629535][ T3614] usb 1-1: Using ep0 maxpacket: 32 [ 188.667031][ T5850] sctp: [Deprecated]: syz.3.411 (pid 5850) Use of int in max_burst socket option deprecated. [ 188.667031][ T5850] Use struct sctp_assoc_value instead [ 188.914919][ T3614] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 188.945763][ T5855] loop4: detected capacity change from 0 to 512 [ 190.050732][ T5855] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.094690][ T5859] loop2: detected capacity change from 0 to 256 [ 190.159872][ T3614] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 190.286554][ T3614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.300908][ T5859] netlink: 152 bytes leftover after parsing attributes in process `syz.2.416'. [ 190.319427][ T3614] usb 1-1: Product: syz [ 190.359357][ T3614] usb 1-1: Manufacturer: syz [ 190.429482][ T3614] usb 1-1: SerialNumber: syz [ 190.437675][ T3614] usb 1-1: config 0 descriptor?? [ 190.537842][ T3615] usb 1-1: USB disconnect, device number 8 [ 190.721882][ T5870] xt_bpf: check failed: parse error [ 191.399547][ T3614] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 191.601856][ T5885] loop1: detected capacity change from 0 to 512 [ 191.609699][ T3614] usb 3-1: device descriptor read/64, error -71 [ 191.887230][ T3614] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 191.935277][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 191.954938][ T5892] loop4: detected capacity change from 0 to 1024 [ 192.104157][ T5892] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 192.119693][ T3614] usb 3-1: device descriptor read/64, error -71 [ 192.187295][ T5892] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 192.207226][ T5892] System zones: 0-1, 4-36, 102-102 [ 192.228189][ T5892] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 192.253282][ T3614] usb usb3-port1: attempt power cycle [ 192.371101][ T5897] loop0: detected capacity change from 0 to 1024 [ 192.404006][ T5897] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 192.442436][ T5897] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 192.453129][ T5897] System zones: 0-1, 4-36, 102-102 [ 192.459260][ T5897] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 192.477807][ T5900] sctp: [Deprecated]: syz.4.423 (pid 5900) Use of int in max_burst socket option deprecated. [ 192.477807][ T5900] Use struct sctp_assoc_value instead [ 192.611667][ T5907] sctp: [Deprecated]: syz.0.426 (pid 5907) Use of int in max_burst socket option deprecated. [ 192.611667][ T5907] Use struct sctp_assoc_value instead [ 192.643579][ T5899] misc userio: No port type given on /dev/userio [ 192.719659][ T3614] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 192.929821][ T3614] usb 3-1: device descriptor read/8, error -71 [ 193.001758][ T5912] loop4: detected capacity change from 0 to 512 [ 193.219491][ T3614] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 193.913654][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.920762][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.069506][ T3614] usb 3-1: device descriptor read/8, error -71 [ 194.322288][ T3614] usb usb3-port1: unable to enumerate USB device [ 194.342782][ T5912] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.358300][ T5910] EXT4-fs warning (device loop4): ext4_begin_enable_verity:136: inode #13: comm syz.4.427: verity is only allowed on extent-based files [ 194.452614][ T5917] loop2: detected capacity change from 0 to 512 [ 194.458545][ T5918] loop0: detected capacity change from 0 to 512 [ 194.618821][ T5917] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.636652][ T5918] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.533116][ T5917] EXT4-fs warning (device loop2): ext4_begin_enable_verity:136: inode #13: comm syz.2.429: verity is only allowed on extent-based files [ 195.673775][ T5934] loop1: detected capacity change from 0 to 512 [ 195.708796][ T5936] loop4: detected capacity change from 0 to 512 [ 195.806986][ T5936] EXT4-fs (loop4): Unrecognized mount option "func=PATH_CHECK" or missing value [ 195.895175][ T3614] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 197.059275][ T5953] loop0: detected capacity change from 0 to 512 [ 197.070359][ T3614] usb 4-1: config index 0 descriptor too short (expected 13951, got 18) [ 197.080637][ T3614] usb 4-1: config 121 has an invalid descriptor of length 206, skipping remainder of the config [ 197.092019][ T3614] usb 4-1: config 121 has no interfaces? [ 197.097681][ T3614] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 197.107111][ T3614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.136076][ T5955] loop2: detected capacity change from 0 to 1024 [ 197.186766][ T5955] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 197.236547][ T5955] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 197.259287][ T5955] System zones: 0-1, 4-36, 102-102 [ 197.268647][ T5955] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 197.296850][ T5953] EXT4-fs (loop0): 1 orphan inode deleted [ 197.321199][ T5953] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 197.365595][ T5961] loop4: detected capacity change from 0 to 256 [ 197.373954][ T5926] udc-core: couldn't find an available UDC or it's busy [ 197.390124][ T5926] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 197.417435][ T5955] sctp: [Deprecated]: syz.2.438 (pid 5955) Use of int in max_burst socket option deprecated. [ 197.417435][ T5955] Use struct sctp_assoc_value instead [ 197.481007][ T5961] netlink: 152 bytes leftover after parsing attributes in process `syz.4.439'. [ 198.091712][ T26] audit: type=1804 audit(16597.820:113): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.437" name="/newroot/44/file1/bus" dev="loop0" ino=16 res=1 errno=0 [ 198.747870][ T26] audit: type=1326 audit(16598.710:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda78e1ee79 code=0x0 [ 198.819882][ T1074] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 198.839611][ T3614] usb 4-1: string descriptor 0 read error: -71 [ 198.863930][ T3614] usb 4-1: USB disconnect, device number 4 [ 199.069775][ T1074] usb 5-1: device descriptor read/64, error -71 [ 199.879026][ T5979] loop3: detected capacity change from 0 to 512 [ 199.919678][ T1074] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 200.065491][ T5979] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.169905][ T5987] loop0: detected capacity change from 0 to 512 [ 200.301172][ T5979] EXT4-fs warning (device loop3): ext4_begin_enable_verity:136: inode #13: comm syz.3.445: verity is only allowed on extent-based files [ 200.340780][ T5987] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.386589][ T5987] EXT4-fs warning (device loop0): ext4_begin_enable_verity:136: inode #13: comm syz.0.443: verity is only allowed on extent-based files [ 200.681461][ T1074] usb 5-1: device descriptor read/64, error -71 [ 200.800294][ T1074] usb usb5-port1: attempt power cycle [ 201.241289][ T6000] loop4: detected capacity change from 0 to 512 [ 201.281840][ T6003] loop0: detected capacity change from 0 to 1024 [ 201.494841][ T6003] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 202.224517][ T6003] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 202.250281][ T6003] System zones: 0-1, 4-36, 102-102 [ 202.284542][ T6003] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 202.307231][ T6000] EXT4-fs (loop4): Unrecognized mount option "func=PATH_CHECK" or missing value [ 202.500208][ T6018] sctp: [Deprecated]: syz.0.451 (pid 6018) Use of int in max_burst socket option deprecated. [ 202.500208][ T6018] Use struct sctp_assoc_value instead [ 202.507536][ T6016] loop3: detected capacity change from 0 to 512 [ 202.744039][ T6016] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 202.812280][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 202.827358][ T6027] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 203.113450][ T6043] loop0: detected capacity change from 0 to 512 [ 203.134320][ T3616] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 203.377555][ T6048] loop2: detected capacity change from 0 to 512 [ 203.397241][ T3618] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 203.588299][ T6043] EXT4-fs (loop0): Unrecognized mount option "func=PATH_CHECK" or missing value [ 203.620116][ T1077] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 203.620168][ T6048] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.645658][ T6045] EXT4-fs warning (device loop2): ext4_begin_enable_verity:136: inode #13: comm syz.2.459: verity is only allowed on extent-based files [ 203.759617][ T3616] usb 2-1: Using ep0 maxpacket: 32 [ 203.781238][ T3618] usb 4-1: Using ep0 maxpacket: 32 [ 203.862336][ T1077] usb 5-1: Using ep0 maxpacket: 32 [ 203.958423][ T6063] loop0: detected capacity change from 0 to 256 [ 203.964990][ T3616] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 203.980388][ T1077] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 204.007255][ T1077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.022054][ T6063] netlink: 152 bytes leftover after parsing attributes in process `syz.0.460'. [ 204.047951][ T1077] usb 5-1: config 0 descriptor?? [ 204.060211][ T3618] usb 4-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 204.085758][ T3618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.110314][ T3618] usb 4-1: Product: syz [ 204.114485][ T3618] usb 4-1: Manufacturer: syz [ 204.121011][ T1077] rndis_host: probe of 5-1:0.0 failed with error -22 [ 204.137346][ T3618] usb 4-1: SerialNumber: syz [ 204.151458][ T3616] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 204.174011][ T3616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.195475][ T3616] usb 2-1: Product: syz [ 204.200624][ T3616] usb 2-1: Manufacturer: syz [ 204.206423][ T3616] usb 2-1: SerialNumber: syz [ 204.213683][ T3616] usb 2-1: config 0 descriptor?? [ 204.409716][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 204.430784][ T6075] loop4: detected capacity change from 0 to 512 [ 204.470914][ T3618] aqc111: probe of 4-1:1.0 failed with error -22 [ 204.488187][ T6075] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.458: invalid indirect mapped block 10 (level 1) [ 205.961837][ T13] usb 1-1: device descriptor read/64, error -71 [ 206.549106][ T13] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 207.030113][ T6075] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.458: invalid indirect mapped block 8 (level 1) [ 207.897037][ T3616] usb 2-1: USB disconnect, device number 6 [ 207.910968][ T3618] usb 4-1: USB disconnect, device number 5 [ 207.921751][ T6075] EXT4-fs (loop4): 1 truncate cleaned up [ 207.932337][ T6075] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.980982][ T2988] usb 5-1: USB disconnect, device number 14 [ 207.989583][ T145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 208.137184][ T6088] debugfs: Directory 'pts0' with parent 'caif_serial' already present! [ 208.228187][ T6090] loop3: detected capacity change from 0 to 1024 [ 208.287570][ T6090] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 208.304082][ T6098] loop2: detected capacity change from 0 to 512 [ 208.319199][ T6092] loop4: detected capacity change from 0 to 2048 [ 208.339328][ T6090] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 208.353460][ T6090] System zones: 0-1, 4-36, 102-102 [ 208.372033][ T6090] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 208.518352][ T6098] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.585401][ T6114] sctp: [Deprecated]: syz.3.469 (pid 6114) Use of int in max_burst socket option deprecated. [ 208.585401][ T6114] Use struct sctp_assoc_value instead [ 208.732245][ T26] audit: type=1326 audit(18658.707:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.1.470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe20c55e79 code=0x0 [ 208.857309][ T6092] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,errors=remount-ro,bsdgroups,. Quota mode: writeback. [ 209.403716][ T6119] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 209.431020][ T6119] EXT4-fs (loop4): Remounting filesystem read-only [ 209.585811][ T6128] loop0: detected capacity change from 0 to 256 [ 209.595874][ T6125] loop1: detected capacity change from 0 to 128 [ 209.688783][ T6131] loop2: detected capacity change from 0 to 128 [ 210.258952][ T6125] EXT4-fs (loop1): Invalid want_extra_isize 1365870823 [ 210.279049][ T6128] netlink: 152 bytes leftover after parsing attributes in process `syz.0.478'. [ 210.354703][ T6134] loop4: detected capacity change from 0 to 512 [ 210.434917][ T6134] EXT4-fs (loop4): 1 orphan inode deleted [ 210.461257][ T6134] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 210.906037][ T26] audit: type=1804 audit(18660.857:116): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.479" name="/newroot/95/file1/bus" dev="loop4" ino=16 res=1 errno=0 [ 211.616260][ T2988] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 211.623192][ T6148] loop2: detected capacity change from 0 to 512 [ 212.185764][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 212.228456][ T6125] loop1: detected capacity change from 0 to 2048 [ 212.301098][ T6148] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.321534][ T6147] EXT4-fs warning (device loop2): ext4_begin_enable_verity:136: inode #13: comm syz.2.482: verity is only allowed on extent-based files [ 212.346815][ T6125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.403486][ T2988] usb 1-1: device descriptor read/64, error -71 [ 212.439996][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 212.610216][ T23] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 212.657416][ T26] audit: type=1800 audit(18662.627:117): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.475" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 212.810636][ T23] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 212.822400][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.892617][ T23] usb 4-1: Product: syz [ 212.892638][ T23] usb 4-1: Manufacturer: syz [ 212.892655][ T23] usb 4-1: SerialNumber: syz [ 212.906213][ T23] usb 4-1: config 0 descriptor?? [ 212.943827][ T6169] loop0: detected capacity change from 0 to 512 [ 212.964599][ T6172] loop1: detected capacity change from 0 to 1024 [ 213.048387][ T6172] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 213.065694][ T6169] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.104417][ T6172] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 213.138841][ T6182] loop2: detected capacity change from 0 to 512 [ 213.141457][ T6172] System zones: 0-1, 4-36, 102-102 [ 213.271558][ T6184] netlink: 100 bytes leftover after parsing attributes in process `syz.4.489'. [ 213.388067][ T6172] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 217.633968][ T3616] usb 4-1: USB disconnect, device number 6 [ 217.823604][ T6191] ALSA: seq fatal error: cannot create timer (-16) [ 217.940159][ T6208] loop2: detected capacity change from 0 to 256 [ 218.019265][ T6204] netlink: 44 bytes leftover after parsing attributes in process `syz.1.493'. [ 218.050704][ T6208] netlink: 152 bytes leftover after parsing attributes in process `syz.2.496'. [ 218.287747][ T6222] sctp: [Deprecated]: syz.0.499 (pid 6222) Use of int in maxseg socket option. [ 218.287747][ T6222] Use struct sctp_assoc_value instead [ 218.484448][ T6230] netlink: 56 bytes leftover after parsing attributes in process `syz.0.499'. [ 218.590400][ T3614] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 218.831086][ T3614] usb 3-1: device descriptor read/64, error -71 [ 219.099501][ T3614] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 219.349554][ T3614] usb 3-1: device descriptor read/64, error -71 [ 219.469677][ T3614] usb usb3-port1: attempt power cycle [ 219.472386][ T3646] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 219.739842][ T3646] usb 5-1: Using ep0 maxpacket: 32 [ 219.860092][ T3646] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 219.930075][ T3614] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 220.029525][ T3646] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 220.038780][ T3646] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 220.049770][ T3614] usb 3-1: device descriptor read/8, error -71 [ 220.066100][ T3646] usb 5-1: Product: syz [ 220.078291][ T3646] usb 5-1: Manufacturer: syz [ 220.091501][ T3646] usb 5-1: SerialNumber: syz [ 220.111768][ T3646] usb 5-1: config 0 descriptor?? [ 220.140239][ T6239] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 220.329468][ T3614] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 220.459714][ T3614] usb 3-1: device descriptor read/8, error -71 [ 220.474355][ T1074] usb 5-1: USB disconnect, device number 15 [ 220.540330][ T6264] loop1: detected capacity change from 0 to 512 [ 220.580098][ T3614] usb usb3-port1: unable to enumerate USB device [ 221.585175][ T6271] loop1: detected capacity change from 0 to 1024 [ 221.657249][ T6271] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 221.695211][ T6271] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 221.713924][ T6271] System zones: 0-1, 4-36, 102-102 [ 221.720486][ T6271] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 221.806052][ T6283] sctp: [Deprecated]: syz.1.508 (pid 6283) Use of int in max_burst socket option deprecated. [ 221.806052][ T6283] Use struct sctp_assoc_value instead [ 222.347063][ T6299] loop3: detected capacity change from 0 to 4096 [ 222.967396][ T6302] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.033858][ T6306] tipc: Enabling of bearer rejected, failed to enable media [ 223.058893][ T6301] sd 0:0:1:0: device reset [ 223.310120][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 223.341806][ T6318] loop1: detected capacity change from 0 to 512 [ 223.465812][ T6321] loop4: detected capacity change from 0 to 256 [ 223.611561][ T6321] netlink: 152 bytes leftover after parsing attributes in process `syz.4.520'. [ 226.039006][ T6345] loop3: detected capacity change from 0 to 1024 [ 226.150551][ T3646] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 226.207349][ T6345] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 226.247808][ T6345] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 226.277224][ T6345] System zones: 0-1, 4-36, 102-102 [ 226.312129][ T6345] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 226.397188][ T6357] sctp: [Deprecated]: syz.3.526 (pid 6357) Use of int in max_burst socket option deprecated. [ 226.397188][ T6357] Use struct sctp_assoc_value instead [ 226.415151][ T3646] usb 5-1: Using ep0 maxpacket: 16 [ 226.460390][ T3646] usb 5-1: no configurations [ 226.465693][ T3646] usb 5-1: can't read configurations, error -22 [ 226.620262][ T3646] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 226.870059][ T3646] usb 5-1: Using ep0 maxpacket: 16 [ 226.916132][ T3646] usb 5-1: no configurations [ 226.928041][ T3646] usb 5-1: can't read configurations, error -22 [ 226.974302][ T3646] usb usb5-port1: attempt power cycle [ 227.176280][ T6377] loop3: detected capacity change from 0 to 512 [ 227.437079][ T6384] loop1: detected capacity change from 0 to 512 [ 228.164229][ T6384] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.195917][ T6381] EXT4-fs warning (device loop1): ext4_begin_enable_verity:136: inode #13: comm syz.1.533: verity is only allowed on extent-based files [ 228.692954][ T6413] loop0: detected capacity change from 0 to 128 [ 228.919061][ T6411] loop1: detected capacity change from 0 to 1024 [ 229.149871][ T6411] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 229.215550][ T6411] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 229.252574][ T6411] System zones: 0-1, 4-36, 102-102 [ 229.281537][ T6427] loop0: detected capacity change from 0 to 256 [ 229.289191][ T6411] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 229.660788][ T6433] sctp: [Deprecated]: syz.1.540 (pid 6433) Use of int in max_burst socket option deprecated. [ 229.660788][ T6433] Use struct sctp_assoc_value instead [ 229.696634][ T6427] netlink: 152 bytes leftover after parsing attributes in process `syz.0.545'. [ 229.808595][ T6434] tipc: Can't bind to reserved service type 2 [ 230.103392][ T3646] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 230.352185][ T3646] usb 1-1: Using ep0 maxpacket: 16 [ 230.495096][ T6425] loop2: detected capacity change from 0 to 32768 [ 230.502456][ T3646] usb 1-1: no configurations [ 230.507059][ T3646] usb 1-1: can't read configurations, error -22 [ 230.614087][ T6462] loop1: detected capacity change from 0 to 512 [ 230.992106][ T3617] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 231.031085][ T3617] Bluetooth: hci3: Injecting HCI hardware error event [ 231.059750][ T6425] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.543 (6425) [ 231.102600][ T3584] Bluetooth: hci3: hardware error 0x00 [ 231.147452][ T6462] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.164933][ T6458] EXT4-fs warning (device loop1): ext4_begin_enable_verity:136: inode #13: comm syz.1.550: verity is only allowed on extent-based files [ 231.200159][ T3646] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 231.246888][ T6425] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 231.259643][ T6425] BTRFS info (device loop2): using free space tree [ 231.281462][ T6469] loop4: detected capacity change from 0 to 512 [ 231.285429][ T6425] BTRFS info (device loop2): has skinny extents [ 231.377335][ T6474] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1620) ! [ 231.411849][ T6469] EXT4-fs (loop4): Unrecognized mount option "func=PATH_CHECK" or missing value [ 231.500985][ T3646] usb 1-1: Using ep0 maxpacket: 16 [ 231.540350][ T3646] usb 1-1: no configurations [ 231.544988][ T3646] usb 1-1: can't read configurations, error -22 [ 231.562539][ T3646] usb usb1-port1: attempt power cycle [ 231.581821][ T6425] BTRFS info (device loop2): enabling ssd optimizations [ 231.733030][ T6425] BTRFS error (device loop2): balance: invalid convert metadata profile single [ 231.986287][ T6501] sctp: [Deprecated]: syz.1.555 (pid 6501) Use of int in maxseg socket option. [ 231.986287][ T6501] Use struct sctp_assoc_value instead [ 232.019951][ T3646] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 232.150231][ T3646] usb 1-1: Using ep0 maxpacket: 16 [ 232.177847][ T6504] netlink: 56 bytes leftover after parsing attributes in process `syz.1.555'. [ 232.189793][ T3646] usb 1-1: no configurations [ 232.194436][ T3646] usb 1-1: can't read configurations, error -22 [ 232.261348][ T6508] loop3: detected capacity change from 0 to 1024 [ 232.318563][ T6512] netlink: 9 bytes leftover after parsing attributes in process `syz.4.559'. [ 232.363823][ T6508] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 232.380512][ T3646] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 232.432383][ T6508] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 232.446175][ T6508] System zones: 0-1, 4-36, 102-102 [ 232.452910][ T6508] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 232.529594][ T6522] sctp: [Deprecated]: syz.3.558 (pid 6522) Use of int in max_burst socket option deprecated. [ 232.529594][ T6522] Use struct sctp_assoc_value instead [ 232.619942][ T3646] usb 1-1: device not accepting address 16, error -71 [ 232.628023][ T3646] usb usb1-port1: unable to enumerate USB device [ 232.991772][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.562'. [ 233.092086][ T6561] loop2: detected capacity change from 0 to 512 [ 233.237307][ T6571] loop0: detected capacity change from 0 to 512 [ 233.291942][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.567'. [ 233.410260][ T6571] EXT4-fs (loop0): Unrecognized mount option "func=PATH_CHECK" or missing value [ 233.564842][ T6581] xt_bpf: check failed: parse error [ 234.241752][ T6585] affs: No valid root block on device nbd4 [ 234.254522][ T6587] loop3: detected capacity change from 0 to 256 [ 234.314041][ T6585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.321716][ T6585] IPv6: NLM_F_CREATE should be set when creating new route [ 234.328986][ T6585] IPv6: NLM_F_CREATE should be set when creating new route [ 234.368365][ T6587] netlink: 152 bytes leftover after parsing attributes in process `syz.3.570'. [ 235.337709][ T6607] loop2: detected capacity change from 0 to 1024 [ 235.357014][ T6609] loop4: detected capacity change from 0 to 256 [ 235.405493][ T6607] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 235.449931][ T3646] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 235.457657][ T6612] loop0: detected capacity change from 0 to 256 [ 235.465328][ T6607] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 235.486982][ T6607] System zones: 0-1, 4-36, 102-102 [ 235.498362][ T6607] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 235.568662][ T6612] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.668489][ T6620] loop1: detected capacity change from 0 to 128 [ 235.729998][ T3646] usb 4-1: Using ep0 maxpacket: 16 [ 235.748259][ T6607] sctp: [Deprecated]: syz.2.575 (pid 6607) Use of int in max_burst socket option deprecated. [ 235.748259][ T6607] Use struct sctp_assoc_value instead [ 236.363682][ T3646] usb 4-1: no configurations [ 236.368328][ T3646] usb 4-1: can't read configurations, error -22 [ 236.379233][ T6612] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 236.464107][ T6612] vhci_hcd: invalid port number 0 [ 236.540139][ T3646] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 239.990985][ T4027] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.351791][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.358118][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.792008][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.798339][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 343.099349][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 343.106379][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P145/1:b..l [ 343.114741][ C1] (detected by 1, t=10502 jiffies, g=22229, q=185) [ 343.121309][ C1] task:kworker/u4:2 state:R running task stack:20160 pid: 145 ppid: 2 flags:0x00004000 [ 343.132925][ C1] Workqueue: bat_events batadv_nc_worker [ 343.138544][ C1] Call Trace: [ 343.141805][ C1] [ 343.144756][ C1] __schedule+0x12c4/0x45b0 [ 343.149256][ C1] ? validate_chain+0x112/0x5930 [ 343.154178][ C1] ? mark_lock+0x98/0x340 [ 343.158488][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 343.164449][ C1] ? release_firmware_map_entry+0x190/0x190 [ 343.170321][ C1] ? reacquire_held_locks+0x660/0x660 [ 343.175672][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 343.180953][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 343.186038][ C1] ? __cond_resched+0x20/0x20 [ 343.190700][ C1] irqentry_exit+0x53/0x80 [ 343.195100][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 343.201068][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 343.206331][ C1] Code: 2b 00 74 08 4c 89 f7 e8 4c 7b 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 343.225932][ C1] RSP: 0018:ffffc9000170fa80 EFLAGS: 00000206 [ 343.231978][ C1] RAX: 0000000000000001 RBX: 1ffff920002e1f5c RCX: 1ffff920002e1efc [ 343.239926][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8b3cc0 RDI: ffffffff8ad8f7c0 [ 343.247891][ C1] RBP: ffffc9000170fbd8 R08: dffffc0000000000 R09: fffffbfff1f8e219 [ 343.255842][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920002e1f58 [ 343.263804][ C1] R13: dffffc0000000000 R14: ffffc9000170fae0 R15: 0000000000000246 [ 343.271767][ C1] ? read_lock_is_recursive+0x10/0x10 [ 343.277133][ C1] ? rcu_lock_release+0x5/0x20 [ 343.281876][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 343.286879][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 343.292840][ C1] rcu_lock_acquire+0x2a/0x30 [ 343.297506][ C1] ? rcu_lock_acquire+0x5/0x30 [ 343.302245][ C1] batadv_nc_worker+0xc1/0x5b0 [ 343.307004][ C1] process_one_work+0x8a1/0x10c0 [ 343.311929][ C1] ? worker_detach_from_pool+0x260/0x260 [ 343.317541][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 343.323065][ C1] ? kthread_data+0x4e/0xc0 [ 343.327568][ C1] ? wq_worker_running+0x97/0x170 [ 343.332580][ C1] worker_thread+0xaca/0x1280 [ 343.337258][ C1] kthread+0x3f6/0x4f0 [ 343.341309][ C1] ? rcu_lock_release+0x20/0x20 [ 343.346143][ C1] ? kthread_blkcg+0xd0/0xd0 [ 343.350714][ C1] ret_from_fork+0x1f/0x30 [ 343.355140][ C1] [ 343.358144][ C1] rcu: rcu_preempt kthread starved for 9510 jiffies! g22229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 343.369230][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 343.379180][ C1] rcu: RCU grace-period kthread stack dump: [ 343.385048][ C1] task:rcu_preempt state:R running task stack:26240 pid: 15 ppid: 2 flags:0x00004000 [ 343.395804][ C1] Call Trace: [ 343.399066][ C1] [ 343.401992][ C1] __schedule+0x12c4/0x45b0 [ 343.406474][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 343.412359][ C1] ? release_firmware_map_entry+0x190/0x190 [ 343.418230][ C1] ? mod_timer_pending+0x20/0x20 [ 343.423145][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 343.428498][ C1] schedule+0x11b/0x1f0 [ 343.432632][ C1] schedule_timeout+0x1b9/0x300 [ 343.437473][ C1] ? console_conditional_schedule+0x40/0x40 [ 343.443343][ C1] ? update_process_times+0x200/0x200 [ 343.448698][ C1] ? prepare_to_swait_event+0x321/0x340 [ 343.454224][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 343.459058][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 343.465209][ C1] ? rcu_gp_init+0x1140/0x1140 [ 343.469959][ C1] ? finish_swait+0xc5/0x1d0 [ 343.474544][ C1] rcu_gp_kthread+0xa4/0x360 [ 343.479111][ C1] ? _raw_spin_unlock+0x40/0x40 [ 343.483940][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 343.489038][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 343.494915][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 343.499927][ C1] kthread+0x3f6/0x4f0 [ 343.503975][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 343.509061][ C1] ? kthread_blkcg+0xd0/0xd0 [ 343.513624][ C1] ret_from_fork+0x1f/0x30 [ 343.518025][ C1] [ 343.521020][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 343.527317][ C1] Sending NMI from CPU 1 to CPUs 0: [ 343.532507][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340